Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: eGkqLNruQ/Sb4Aoq9GqpRvarG3hDcz2W0x0m883hzZI=
Subject key identifier: 6E:BB:22:76:82:F5:72:0D:C4:ED:B8:A2:11:4B:79:77:C3:A7:E3:5E
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 019761A791A31D03048719E76A92571AF355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 1393
Signing time: Thu 12 Jun 2025 01:01:00 +0000
Manifest this update: Thu 12 Jun 2025 01:01:00 +0000
Manifest next update: Fri 13 Jun 2025 01:01:00 +0000
Files and hashes: 1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=)
2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: +pLXzN9On1l015Qwkn8T0DZ9tPuUXu1uI4alBtJR6Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:a7:91:a3:1d:03:04:87:19:e7:6a:92:57:1a:f3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Jun 12 01:01:00 2025 GMT
Not After : Jun 13 01:01:00 2025 GMT
Subject: CN=6ebb227682f5720dc4edb8a2114b7977c3a7e35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:ba:bf:51:d6:d8:06:35:8c:0b:7e:f8:7d:
1a:f6:71:10:55:ce:6d:ca:b3:0c:3e:bf:ad:9e:e7:
b4:0e:d4:64:1b:89:07:34:3b:00:b4:e1:c7:1e:fe:
30:49:1c:79:5b:2b:3e:7b:ff:d4:8e:0e:3c:74:2f:
8a:67:d6:9e:62:06:37:cc:c4:0c:65:97:26:ab:d6:
18:29:aa:57:20:ce:a6:75:44:35:45:5c:c1:46:7e:
15:1d:25:04:3b:6d:9c:ac:3b:71:b3:67:74:44:8e:
3d:52:94:ae:d5:17:27:ae:c2:32:00:7b:d5:7f:a3:
04:db:b7:c5:a3:7a:a3:e2:fc:64:17:da:ca:1e:92:
aa:5f:8c:6b:2a:fb:af:9f:82:1c:3b:03:95:7a:dc:
0e:66:27:91:1f:85:0d:1e:f3:d2:69:81:1c:56:52:
bf:a5:13:fd:cd:74:84:0d:b1:df:b3:06:8b:1b:ac:
8a:1c:99:c3:54:95:f3:6d:04:37:9b:a3:97:c5:78:
c7:10:21:4a:62:fd:31:b4:f4:0d:83:8a:ad:af:28:
92:68:95:0c:ce:dd:01:ba:41:49:26:4e:c8:ca:ba:
c9:e1:be:ca:59:4f:a8:b9:d0:32:99:aa:09:ef:5a:
36:85:22:8f:cd:a2:fd:b9:c2:f7:cb:5b:36:0e:07:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BB:22:76:82:F5:72:0D:C4:ED:B8:A2:11:4B:79:77:C3:A7:E3:5E
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:17:db:87:5f:bd:3a:83:4a:e5:8d:da:62:43:da:40:ac:3e:
da:75:85:16:e8:4c:dc:ad:8a:9b:8f:41:a2:1a:55:cd:f0:77:
e1:96:b7:77:7d:c8:01:45:da:ff:b9:bd:3c:7d:da:0d:45:18:
75:81:dd:cf:be:be:61:1d:9c:90:55:e2:a4:83:04:a4:16:e8:
68:3d:5b:8e:4e:ba:75:12:6c:79:a3:b8:2b:e2:c4:6b:3c:f2:
e9:b9:ea:39:b1:f5:47:1d:0d:0f:4c:d9:61:cc:b9:6b:05:b6:
bc:07:ae:a4:b1:4e:6f:48:5a:88:3b:5d:3e:bb:82:76:00:66:
cc:6a:f6:89:76:10:da:66:2b:80:d3:06:fe:09:c1:83:55:65:
8b:cb:af:83:06:b2:b0:ef:d7:5d:67:aa:f3:af:db:2b:ec:d7:
26:2e:ed:47:96:e0:c2:54:06:d1:04:73:ff:01:ad:e4:80:5e:
e5:7f:32:60:f9:06:33:cb:e2:83:77:4d:d4:ce:a4:2e:cb:00:
bd:88:36:09:85:10:d0:4a:ac:c5:ff:7a:0d:6e:64:fa:76:d1:
4c:58:29:df:81:22:2f:23:29:7b:64:5e:d9:a9:33:bc:d2:5e:
44:97:92:87:67:4c:61:7a:cc:2a:a3:59:7b:ff:70:cc:84:db:
66:ed:9d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:03:40 2025 by rpki-client