Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: +N0GuhU2dSXdTWWdqYFnRLlfdtTUDcNOX5NDZxFbPus=
Subject key identifier: 0F:E8:F7:43:42:51:43:D0:D3:13:E7:17:70:8E:03:C0:11:D6:24:2B
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 01976D3E1EBC9BCF1E2962CC7D3E1B3846E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 1399
Signing time: Sat 14 Jun 2025 07:01:17 +0000
Manifest this update: Sat 14 Jun 2025 07:01:17 +0000
Manifest next update: Sun 15 Jun 2025 07:01:17 +0000
Files and hashes: 1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=)
2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: QYP5i8+E1lfDnxn4XQ8rwT+QKh3P81RIItpN6BsBBAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:1e:bc:9b:cf:1e:29:62:cc:7d:3e:1b:38:46:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Jun 14 07:01:17 2025 GMT
Not After : Jun 15 07:01:17 2025 GMT
Subject: CN=0fe8f743425143d0d313e717708e03c011d6242b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1e:c6:25:03:e4:1a:19:58:14:b7:f1:b6:c6:
00:36:73:91:2f:7c:bd:18:a1:4a:3d:81:41:7e:18:
52:6f:32:e0:84:18:e2:d1:a9:96:1c:c8:35:0b:6a:
3d:b0:71:0f:a2:53:b3:37:bd:f1:79:68:f3:3c:08:
08:00:38:86:6b:10:c9:e3:7c:e5:8a:97:b0:96:d2:
42:06:0e:cb:ee:f0:36:9f:3b:fd:0f:61:98:4c:34:
07:f5:4b:54:1e:d3:b4:7d:37:c9:df:b2:fe:dd:40:
69:64:c8:57:04:6d:e2:d9:78:04:4a:60:d2:6c:32:
95:6d:d8:ec:74:45:b2:fa:37:a4:67:eb:ff:3f:a1:
5a:9b:ce:36:a5:f8:e5:55:9b:4d:45:f2:99:0e:d0:
fc:a3:56:a8:da:74:a4:46:a1:60:a9:58:b6:21:b8:
af:c1:93:f2:0e:50:29:f8:e9:07:88:d4:cb:82:e4:
22:9a:93:c9:5e:46:47:68:86:ae:8c:d2:de:b6:cf:
dc:a7:7c:1e:f7:6f:0f:d3:04:aa:ab:f1:6d:32:39:
4e:55:6c:3a:f6:50:cf:d2:13:f2:6d:a3:f0:97:b0:
64:50:e3:ee:c8:13:c9:bd:9c:d1:33:c9:21:8a:5d:
ae:c8:b6:e9:54:e8:72:ee:98:1d:72:84:2c:b6:24:
ba:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E8:F7:43:42:51:43:D0:D3:13:E7:17:70:8E:03:C0:11:D6:24:2B
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:52:29:ee:8f:48:ea:eb:a3:3a:a7:47:fd:5c:c6:22:5b:24:
c7:55:c2:64:39:1c:50:08:37:44:8e:33:6d:ff:f7:01:c6:bf:
a1:42:3f:90:5e:a2:36:fe:df:89:c2:af:0d:d8:5b:b3:9d:49:
fc:2a:38:f6:b1:3e:94:a3:fa:d8:2e:77:f9:13:4d:7b:06:9e:
1d:ce:de:ea:8b:d3:4c:88:c1:bd:b4:63:99:e3:d8:01:80:4c:
98:ff:56:ee:f7:3e:a0:80:15:10:cc:07:55:65:02:1a:a1:8d:
04:b4:0e:fe:67:4e:d8:bd:01:0a:21:50:42:d4:1b:7c:00:1d:
53:c9:48:dd:07:0e:f9:80:19:42:fe:4c:d0:e6:f3:91:e2:40:
fa:fc:e7:a4:59:d1:2c:f0:02:78:45:e3:83:5a:bb:04:f0:35:
1f:ba:1d:37:40:0f:d5:d6:fb:09:72:93:12:88:96:9c:a5:6d:
32:cd:36:50:1f:cd:6c:85:45:7e:d9:40:81:f0:3d:8e:0a:fc:
52:96:c4:66:87:3e:77:e7:24:1c:21:97:5d:96:9e:39:25:5f:
2e:8b:13:f7:00:93:b8:c7:9d:09:8a:72:61:b5:b2:11:65:74:
1a:2c:24:e9:41:18:6b:f5:ca:70:64:61:c7:9a:c9:c0:a7:0d:
36:ce:f5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:56:18 2025 by rpki-client