Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
File: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft (raw, json)
Hash identifier: jNZbp3S2Zzi3jFFXbpm67SjxFSXohZIuq1GEF7zkjVc=
Subject key identifier: 38:19:F1:00:F3:6A:A3:84:8A:6D:D3:B6:4F:A4:1B:B2:65:42:8F:57
Authority key identifier: 42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
Certificate issuer: /CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Certificate serial: 0197CE03FBFA9309D8617F401AE732361D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
Manifest number: 4C
Signing time: Thu 03 Jul 2025 02:00:56 +0000
Manifest this update: Thu 03 Jul 2025 02:00:56 +0000
Manifest next update: Fri 04 Jul 2025 02:00:56 +0000
Files and hashes: 1: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl (hash: 2bkMCVySXdPNDuqwt0KBfy/37/DE4yGnVis3lbG0JM4=)
2: n0Ip-VL6cLqnuppCWC9aIAGGBVk.roa (hash: Plze8bNi0S5C4H4tkQ3hgwkWsiFwc79XI6iUMh0AEzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:03:fb:fa:93:09:d8:61:7f:40:1a:e7:32:36:1d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Validity
Not Before: Jul 3 02:00:56 2025 GMT
Not After : Jul 4 02:00:56 2025 GMT
Subject: CN=3819f100f36aa3848a6dd3b64fa41bb265428f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:83:9c:58:0f:e3:5f:99:3b:09:95:50:05:
5d:fe:39:af:08:f6:a9:a2:c9:12:bf:fd:47:1d:2b:
bd:94:6c:78:4b:81:6b:16:f2:81:db:37:56:f2:21:
59:85:cf:73:be:9d:02:10:67:72:d7:3b:e0:cc:4c:
f5:17:05:3f:a3:69:d1:1f:1d:f0:6a:f9:44:2e:b8:
f3:6c:f4:e9:33:a6:b6:7b:fa:ee:37:7c:5b:8c:dc:
ff:be:01:c5:6a:89:f6:5f:92:e6:00:c6:d4:89:1a:
8a:f5:f0:46:1c:d5:1b:bb:fa:ca:2b:bf:61:47:cd:
ca:6a:87:3c:7a:7e:d7:8e:7b:39:35:69:31:11:b1:
ad:58:88:20:9f:ee:38:f9:28:a9:ad:a9:67:49:0a:
fc:45:a2:1c:05:1f:81:f9:aa:26:0c:cf:c8:22:a5:
02:47:89:c2:59:f3:30:d8:31:29:53:8d:d6:2d:d4:
b8:7e:49:97:ca:a2:25:18:80:da:8c:48:f1:ee:ec:
a7:a3:88:b3:38:89:2c:27:b2:6f:4f:51:80:4d:e7:
b2:58:c5:52:fe:14:e5:3a:70:54:ae:67:47:ce:11:
f9:5a:91:88:1b:79:0a:d6:ac:8d:2c:93:ad:04:e0:
10:86:49:fc:95:a4:87:51:72:0c:95:3a:4b:ca:06:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:19:F1:00:F3:6A:A3:84:8A:6D:D3:B6:4F:A4:1B:B2:65:42:8F:57
X509v3 Authority Key Identifier:
keyid:42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ec:1e:31:6b:ea:a9:69:af:37:33:c9:73:5d:5d:23:52:95:
fd:52:cf:8f:c4:16:f3:b6:25:38:ee:7e:a9:35:f7:61:3b:f1:
c4:bc:33:b0:b7:99:4a:1f:98:dd:bd:90:c5:e3:fc:eb:ee:2a:
de:f5:eb:8c:70:a2:4f:69:95:de:4d:79:8b:ae:21:4c:d2:6f:
7b:b8:af:f4:7c:d8:7e:57:27:bb:a2:bd:3d:85:22:83:6b:9b:
2d:41:6e:5b:fd:07:fe:d9:b6:47:0d:52:30:cc:db:fb:e2:27:
b2:d2:d4:a9:ce:52:5d:5d:5d:01:4d:47:e0:22:c5:9e:25:b3:
72:ae:65:e0:51:65:9d:82:8d:0d:35:7e:ec:d5:d7:80:ec:24:
56:77:fc:ed:a3:64:fb:8c:df:70:94:27:14:0c:2f:e3:f3:69:
6f:c6:ce:71:6f:2d:0a:9a:fe:b8:6f:a0:65:3e:19:53:fa:3d:
fe:dd:4f:25:05:67:e4:23:6a:37:b5:a1:44:42:2f:ea:b8:f8:
85:d6:e3:a0:20:22:e6:ca:50:2a:50:a1:9d:dd:bb:62:9f:07:
38:31:62:fb:7a:1d:a1:f7:d1:e1:1a:2a:b4:fc:55:a6:62:af:
c7:83:d0:60:f8:74:a7:f1:fd:98:95:d8:9a:52:e6:53:d9:74:
94:eb:38:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:36:46 2025 by rpki-client