Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: pgkFcuRm/PH3VTYADZGvEetC02RvnQsd36zTX73cPJ0=
Subject key identifier: 5B:58:11:3A:46:93:8E:75:48:6A:6C:68:0F:AB:8A:D6:F3:18:C5:0E
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 01975BDC5006602C4D5F503F9F1E745DDFAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 1390
Signing time: Tue 10 Jun 2025 22:00:54 +0000
Manifest this update: Tue 10 Jun 2025 22:00:54 +0000
Manifest next update: Wed 11 Jun 2025 22:00:54 +0000
Files and hashes: 1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=)
2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: O5WPjeGB5f0GNOwFYEEFBOQ3RIZBTvstTz2UdE9WRO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:50:06:60:2c:4d:5f:50:3f:9f:1e:74:5d:df:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Jun 10 22:00:54 2025 GMT
Not After : Jun 11 22:00:54 2025 GMT
Subject: CN=5b58113a46938e75486a6c680fab8ad6f318c50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:79:ce:97:7f:9e:16:0d:be:63:4c:f7:62:6f:
d8:43:09:d9:8b:91:9d:97:7d:06:be:61:e0:51:96:
f8:5a:6e:2b:63:19:7f:f3:9d:e3:2f:91:be:9f:85:
f9:e8:d1:c7:24:68:48:b6:b8:26:3e:7c:55:21:f9:
b3:26:a1:1c:bb:40:e2:77:8a:71:6f:8e:b0:b6:55:
ab:1e:93:f1:db:a5:5a:49:f0:b6:4b:d6:22:5b:4f:
67:57:cb:bb:60:85:f4:e4:08:52:06:e2:05:9d:33:
83:76:9e:9e:ee:b9:2f:b9:55:c3:d3:0a:0d:53:04:
77:8c:0b:66:f7:20:d0:ce:c9:13:80:d8:ee:0a:5a:
ba:50:9f:8e:92:bb:46:92:d6:84:9e:43:69:d8:b0:
1f:b4:2e:aa:7e:73:e6:38:de:04:49:80:69:77:45:
6d:5c:59:dc:f4:74:b6:37:e2:b5:76:b2:bf:c8:6c:
13:dc:b0:40:f1:c8:39:06:05:74:ee:a1:b2:16:bd:
15:61:e3:8e:ab:fd:30:1c:0d:5b:82:2b:4b:77:85:
d1:4b:f7:c9:96:d5:f2:97:d7:4e:65:14:73:3e:25:
e1:36:c4:d0:6f:af:31:ee:a1:9d:2e:8b:4b:65:f1:
70:6b:c1:0a:4e:f2:db:e4:6f:a3:f0:d0:90:89:d2:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:58:11:3A:46:93:8E:75:48:6A:6C:68:0F:AB:8A:D6:F3:18:C5:0E
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3e:a4:4f:3e:f5:27:95:0f:7c:c2:0e:a2:76:4b:f6:39:c7:
03:4e:fb:5a:60:f3:b5:ae:2d:88:b7:48:06:0f:bd:6f:79:0b:
bf:db:60:4c:90:b1:07:bd:c7:5d:01:6a:cd:a1:40:d3:75:df:
24:be:bf:07:96:cd:8d:4b:03:25:56:28:fb:8d:76:9c:ee:54:
50:b9:25:75:08:eb:97:d6:6a:97:13:01:d8:e1:7b:43:13:ac:
6c:ff:fe:24:bb:0d:b6:6f:b4:66:84:3e:c9:2f:17:f0:c4:d9:
b2:b0:ac:16:80:d9:b5:15:ce:66:1d:13:d8:b6:c7:84:fc:b9:
e2:62:c0:a2:ce:e2:d8:66:27:46:96:8d:44:19:bc:af:07:bc:
c6:d3:d2:f6:a3:71:73:8c:1c:28:4f:c2:3e:14:29:de:e2:e8:
6f:c7:39:2e:57:c0:bc:12:5d:70:8c:25:58:61:f1:f5:17:fe:
8e:45:2a:f4:a7:d6:a3:c2:c5:62:31:ab:a9:97:fa:12:f7:d3:
81:19:0a:28:88:7e:78:55:2d:d9:df:95:08:83:2f:9e:b6:b0:
aa:dc:dd:e8:4e:08:10:07:f2:c0:db:9f:cb:42:88:57:e6:0a:
d8:38:8b:83:6e:d5:86:65:cb:f1:67:62:74:ba:f1:05:c3:ae:
f9:9a:7d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:28:18 2025 by rpki-client