Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
File: q6g10GAXbugWDHkw-H5pNVkJDXg.mft (raw, json)
Hash identifier: WdKs3AjwYza7iRE3fFa+NMSEHlyJSxKttoM0KmWtcNM=
Subject key identifier: 7C:8C:BE:27:7C:47:BD:DC:F4:B5:B6:6A:C5:BA:8C:AC:8A:0A:D2:9D
Authority key identifier: AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
Certificate issuer: /CN=aba835d060176ee8160c7930f87e693559090d78
Certificate serial: 01974C3225BA2682607C8D085314983086E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 21:00:44 +0000
Manifest this update: Sat 07 Jun 2025 21:00:44 +0000
Manifest next update: Sun 08 Jun 2025 21:00:44 +0000
Files and hashes: 1: WxKERWcgZHE3QlVsylKc45ZZndo.roa (hash: ZntJzaaGEPPPr8RAncg56sX3jW5j5m9ABQj+rx3cm+Q=)
2: q6g10GAXbugWDHkw-H5pNVkJDXg.crl (hash: +NwsNspWEd3xccvW1aLjhcEmMQ8cGyu8wAR/GB3TBPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:25:ba:26:82:60:7c:8d:08:53:14:98:30:86:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba835d060176ee8160c7930f87e693559090d78
Validity
Not Before: Jun 7 21:00:44 2025 GMT
Not After : Jun 8 21:00:44 2025 GMT
Subject: CN=7c8cbe277c47bddcf4b5b66ac5ba8cac8a0ad29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:9f:2e:f5:38:67:9c:7d:af:59:d9:75:a5:
ce:0c:69:52:42:14:45:8f:d0:9b:ca:3f:89:7c:47:
ad:37:38:45:80:34:8c:65:c7:89:4b:d0:6e:74:be:
f0:05:f9:f5:75:85:96:22:cd:94:9b:f7:d5:16:cd:
93:f4:82:c1:aa:6d:07:66:09:8d:4e:22:97:f2:09:
03:f3:23:b4:fa:83:d8:a5:ce:2b:f9:c3:7f:9b:f0:
a4:10:c3:53:3c:d1:1f:ea:e3:57:c3:75:e8:34:27:
f5:28:5a:20:8c:20:b3:15:d2:c1:58:d2:a6:29:25:
b8:c4:0a:fc:42:f7:c3:8e:96:40:da:94:a4:98:ec:
04:17:6a:2d:02:02:20:7c:0e:9b:2d:7a:12:b6:b5:
3e:20:8c:c5:f8:23:91:fd:e2:7a:ed:d7:53:94:79:
e4:c6:18:a2:51:3a:4f:35:02:0b:71:a3:1c:1f:ce:
2c:29:88:50:bd:96:32:1d:20:bc:6a:80:ce:fd:a0:
b7:c8:0f:c9:2d:46:38:38:c3:5d:56:66:9f:cf:0b:
de:c2:25:15:14:a9:c7:af:64:82:38:f3:44:95:96:
7b:01:44:6f:6a:4d:fd:f8:ad:e7:74:3d:53:c6:50:
a6:ca:60:3a:4c:3b:06:8f:94:e4:75:39:d9:82:25:
11:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8C:BE:27:7C:47:BD:DC:F4:B5:B6:6A:C5:BA:8C:AC:8A:0A:D2:9D
X509v3 Authority Key Identifier:
keyid:AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:95:2c:15:9d:a3:6c:d9:bf:79:45:fa:e0:48:34:ca:b7:29:
cb:0e:99:0f:09:fe:4e:bf:0b:a5:d9:90:53:d1:d7:3c:ad:8a:
67:7d:87:54:6d:b3:96:1b:ca:3e:e1:52:71:4d:82:af:dc:43:
36:2b:c8:29:c5:6c:75:23:77:04:cc:88:a9:2e:46:dc:e2:ca:
81:57:fa:5a:10:96:5b:47:a6:d8:43:e9:f5:24:de:b0:27:3e:
ba:dc:50:2a:81:99:3b:01:69:cb:da:b0:c0:20:39:2d:f1:11:
6a:5f:76:af:fa:0e:77:2d:75:01:2c:bb:11:68:49:ea:25:1c:
2b:f6:0f:8a:65:b9:09:ec:58:72:69:b4:ae:1d:a8:e7:46:41:
f1:91:da:2b:d4:5a:71:9a:f8:92:d9:3c:05:dd:c8:35:b4:07:
00:95:e9:de:1b:4f:dc:e5:d7:f0:2f:03:6a:73:39:a1:b3:4c:
03:d1:84:ce:a3:9c:c5:b4:4f:e4:91:fd:4b:09:2b:85:ae:83:
78:c8:04:31:b2:0d:50:5e:2e:41:9f:b0:4f:a5:1a:e6:f1:29:
2b:c9:da:28:05:a6:eb:4c:ce:fe:bc:1a:89:51:60:3b:76:e5:
f4:fc:c7:0d:2c:a3:12:90:d2:45:89:b6:24:f2:fe:cc:ea:a0:
b5:1b:f9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:13:07 2025 by rpki-client