Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
File: q4gs1tGWrh-WhyrK54MhvnqSuOs.mft (raw, json)
Hash identifier: FdQvt+uNHF3KIxkiojhd/QMPcT8AS+L8I0gQzNZY7Hs=
Subject key identifier: 25:F3:C8:90:5B:20:1B:EC:27:48:25:54:B9:FC:CE:E0:F8:A1:4B:AE
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial: 019749D61A877EDF452AF3A185AB8DA3C819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 10:00:57 +0000
Manifest this update: Sat 07 Jun 2025 10:00:57 +0000
Manifest next update: Sun 08 Jun 2025 10:00:57 +0000
Files and hashes: 1: F9AhQNt9Udb849dXCdScX4FqhCA.roa (hash: px1gv2xGNlwFH8D+WdL+fioWoJ0lDCB6LorhXUTwMrQ=)
2: LVdTUXxiMF9XJQST5UOIEXtOCYY.roa (hash: 1JvKiaaOoOhGqXZ9Dq7CyaK8VVJ8p+cu5cPkQb+6aUs=)
3: q4gs1tGWrh-WhyrK54MhvnqSuOs.crl (hash: 2ZzEkawBxf9ohGXTz3yn/euT9lHeDSjB00Zdhl/w63U=)
4: skwwLakYgia163942_1PcvI2KGM.roa (hash: RjC50vXYyJh6b6nwgCbvXjKOTFm1vHWVMG4k+WUjU5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:1a:87:7e:df:45:2a:f3:a1:85:ab:8d:a3:c8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Validity
Not Before: Jun 7 10:00:57 2025 GMT
Not After : Jun 8 10:00:57 2025 GMT
Subject: CN=25f3c8905b201bec27482554b9fccee0f8a14bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:6a:d3:a8:e6:44:52:35:ab:44:88:67:c6:
30:51:86:1f:a1:0e:71:e3:17:df:54:56:75:56:f4:
d3:fe:01:b3:47:21:0c:1c:d8:34:58:f8:a4:4f:a2:
af:87:4d:cb:45:53:58:7b:23:96:bc:f8:ac:2c:4b:
c3:90:a5:16:da:d0:4d:c4:c0:ec:6a:bd:8b:f8:ca:
50:30:eb:7d:70:f3:96:9e:02:6a:b6:45:4e:b6:29:
31:91:6d:ea:f0:d1:b9:0e:32:be:54:ec:b3:b9:48:
4b:a5:6c:71:8b:b7:86:98:92:ee:39:38:d0:35:57:
bd:87:73:39:a0:04:5b:91:6b:59:5f:0b:49:6c:2c:
12:98:02:0f:6e:dd:0b:bb:0e:1a:4c:29:32:bb:bd:
5e:40:55:13:2c:09:f9:dd:c5:67:4b:44:7e:be:4d:
53:95:b9:f9:06:b7:02:1a:18:e3:8c:24:52:8f:5f:
a3:e3:36:99:53:a2:27:ca:6b:bb:41:b0:42:54:3b:
4b:f8:b2:ff:da:53:69:54:66:ca:ce:40:bf:32:ae:
dd:3b:91:35:73:8f:af:64:f0:57:4a:40:45:d9:fb:
01:c1:8e:70:01:77:1c:32:73:a5:48:e4:5e:1b:97:
9c:a8:2e:ee:02:86:73:db:0e:17:ca:11:b8:5c:f1:
b6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F3:C8:90:5B:20:1B:EC:27:48:25:54:B9:FC:CE:E0:F8:A1:4B:AE
X509v3 Authority Key Identifier:
keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:57:31:ed:f2:ea:ab:56:fb:96:a2:e2:6a:82:c3:37:28:fd:
f8:e2:ec:a6:ad:91:77:0b:54:8e:98:e5:23:4b:7a:03:87:47:
a5:ab:6a:55:37:65:7c:91:02:41:d7:7d:3a:5f:19:47:5c:20:
9f:87:af:4f:d0:0f:2d:21:1e:fb:48:33:7e:a4:b4:49:67:d0:
a2:96:53:25:fd:e3:10:40:d2:0a:be:32:4f:88:8f:d1:d2:da:
d5:10:ed:44:6b:2c:f2:ce:45:6f:5b:83:45:48:7a:49:9e:70:
be:ff:7e:89:f9:94:34:f1:d8:1a:71:33:9e:5f:81:aa:c2:ab:
80:ff:e7:1b:c7:7d:17:80:08:0f:4a:9d:a2:f8:27:71:70:a9:
0b:9b:95:b9:84:97:b8:17:d8:13:6a:76:2a:63:e2:f8:47:23:
17:f3:ed:5e:4c:c3:07:12:cf:a5:cc:7d:69:25:3d:e6:8c:78:
f3:a1:c6:80:c1:dc:c8:66:29:8a:55:1d:97:7c:21:d5:9c:f8:
40:fd:c2:2e:aa:42:27:6b:ed:96:1a:9a:69:d6:ce:c9:23:2b:
b0:f5:4e:12:67:5b:37:5a:59:46:2f:45:27:c4:9b:49:a6:0a:
e2:e2:25:65:b5:2d:55:d5:34:a0:72:56:fa:b1:ee:d2:7f:df:
4b:f6:1e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:42 2025 by rpki-client