Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: FT29aCp+Fxtt9rIg7v14IXz902bk1HJEydg3A9B9fMU=
Subject key identifier: ED:D5:61:FC:D7:83:8F:24:C4:21:50:4C:8E:77:F4:B5:AE:DD:F2:A0
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 01976772C2E166ABB0DD812B86EF1AA9017B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 1396
Signing time: Fri 13 Jun 2025 04:01:03 +0000
Manifest this update: Fri 13 Jun 2025 04:01:03 +0000
Manifest next update: Sat 14 Jun 2025 04:01:03 +0000
Files and hashes: 1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=)
2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: Hl+rP+ave89FJ+QveRRqy/eSiuwV1dOuLIoXeids1Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:72:c2:e1:66:ab:b0:dd:81:2b:86:ef:1a:a9:01:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Jun 13 04:01:03 2025 GMT
Not After : Jun 14 04:01:03 2025 GMT
Subject: CN=edd561fcd7838f24c421504c8e77f4b5aeddf2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7f:b4:c4:3c:5a:fb:0d:5d:c2:49:56:82:dd:
85:b9:63:aa:62:85:d8:ec:45:9a:f0:32:6a:a5:61:
43:e2:21:ba:a5:c1:5e:4d:93:53:f8:d1:af:aa:15:
2f:82:ba:0c:d6:05:0d:c3:9e:50:ae:28:e3:a6:41:
f0:ad:87:d1:98:b4:8b:50:f4:0e:6d:03:f4:c0:7b:
af:fb:fd:38:69:4e:67:85:a8:1d:b7:4c:94:22:07:
66:d0:a6:c0:75:d8:b2:3f:17:fb:1f:44:2e:6b:62:
f0:84:5d:e4:b3:a2:8a:82:68:71:0b:a3:d9:be:47:
d7:dc:31:fb:df:79:64:88:fe:f3:93:be:46:22:95:
5d:94:bd:58:46:44:34:fc:ab:06:ea:f0:37:93:35:
1f:37:f9:5f:dc:34:05:9c:eb:a9:5b:7e:51:76:ca:
d4:4d:1a:bc:80:74:52:2a:83:9a:17:d8:7f:7a:f5:
b6:27:6f:b7:9e:da:52:a3:67:9d:9a:f4:be:df:aa:
05:64:6c:eb:04:e7:86:50:29:8e:9b:c8:0c:b6:7c:
04:2b:d7:7f:8e:89:73:ec:be:d5:93:ff:2c:60:2e:
cd:5c:52:bb:34:44:c3:27:e6:17:8a:be:a8:ad:5f:
fa:02:94:b2:26:1f:af:7b:ef:73:3c:30:64:b0:e1:
4f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D5:61:FC:D7:83:8F:24:C4:21:50:4C:8E:77:F4:B5:AE:DD:F2:A0
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c3:4d:55:ca:a4:bb:7c:11:b8:5d:a8:93:41:64:69:5e:a5:
72:b5:12:2f:47:08:c2:ab:ed:08:34:7d:c3:89:8f:1c:36:25:
56:ea:b3:23:d2:25:95:19:12:5a:9f:c0:b2:dd:08:96:f6:c1:
af:9f:16:60:6e:34:44:9d:a6:3d:d4:2d:c7:48:10:10:09:0d:
e8:d6:bc:34:a8:47:95:f9:d0:a7:98:2c:28:96:b0:f4:63:44:
df:78:93:a4:19:37:35:f0:b1:e2:cb:38:ba:8e:b8:a9:76:1c:
39:11:26:ab:9e:7a:7f:eb:1e:48:31:62:92:6d:43:e4:98:d9:
17:24:93:73:38:b4:ca:f2:c6:33:6d:61:6b:e7:d3:c8:c8:cc:
5f:a7:4f:87:e5:8a:f3:e3:9a:6c:11:42:81:af:cc:ce:50:bf:
91:90:7c:d8:fb:1b:23:2c:e8:8d:e2:a1:0e:30:3c:90:9f:b5:
d1:0f:e4:bb:f1:c4:5e:5f:81:a8:5e:47:01:84:b9:51:b0:dd:
9e:fa:21:48:ce:b9:ee:8c:af:53:cc:58:cf:79:a8:a3:df:4d:
17:72:3a:c9:eb:13:ac:6b:12:6d:16:a4:08:32:c8:7a:d4:38:
5a:43:83:b7:1f:20:f6:6a:87:56:9f:0f:ba:ae:b1:25:f5:e9:
14:ad:e2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:11:24 2025 by rpki-client