Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
File: qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft (raw, json)
Hash identifier: Qd7Z88Hwsx95yAYkZ5a8nYEZ8pohi+xlkvGTH2TxYLM=
Subject key identifier: 73:76:D9:FC:C1:61:C2:E2:9A:B0:B8:76:1B:08:47:60:3A:14:87:4F
Authority key identifier: A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
Certificate issuer: /CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Certificate serial: 01974BC41A717FE7D991DACA94B538B88210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
Manifest number: 0469
Signing time: Sat 07 Jun 2025 19:00:32 +0000
Manifest this update: Sat 07 Jun 2025 19:00:32 +0000
Manifest next update: Sun 08 Jun 2025 19:00:32 +0000
Files and hashes: 1: EIr__RLMMt-7cOeUxPceAyVLfLA.roa (hash: I7nOwl/EmoWFHPn01B2Q9SwyfzZiNKdHb9+3iK0TA1M=)
2: qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl (hash: 0XWMjV7Ld9lc/wsqKEUZcscb+BGOD8V5/tiGE+aRP6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:1a:71:7f:e7:d9:91:da:ca:94:b5:38:b8:82:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Validity
Not Before: Jun 7 19:00:32 2025 GMT
Not After : Jun 8 19:00:32 2025 GMT
Subject: CN=7376d9fcc161c2e29ab0b8761b0847603a14874f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:98:28:bd:18:5c:95:6f:1f:0f:e7:42:3a:
69:46:89:e2:3c:80:6a:13:ba:15:d8:56:bb:84:54:
0f:da:0c:a7:f3:fd:83:5a:70:f8:73:d8:bd:c8:97:
2b:2a:23:ad:70:f0:25:ab:68:e2:8b:76:8c:75:54:
0d:a1:5f:be:d5:8f:97:c5:4d:5b:cf:67:ea:fb:cc:
53:5d:31:82:44:83:e8:c0:98:24:f0:f8:b9:19:91:
c5:3d:22:6f:80:14:3f:f3:69:b9:d7:05:16:1d:38:
72:1f:d0:7f:93:84:87:f0:2c:f5:6f:02:ff:d5:49:
13:24:da:cc:ea:ef:7b:72:c9:42:b3:27:2b:b8:4e:
8d:76:ae:67:76:08:41:38:f9:c8:04:a6:c5:18:d3:
1b:64:2a:49:86:6b:54:0b:f7:79:ff:e9:89:65:1b:
c3:db:93:26:a8:ba:36:c8:e0:b2:19:c0:85:9c:66:
52:78:e3:34:80:97:74:04:d9:87:95:b1:fe:bd:62:
48:e9:34:3b:05:38:f2:ec:57:1e:c8:fb:c1:cc:c4:
11:9b:eb:45:2b:02:47:e0:be:9e:46:a9:78:aa:65:
0e:e0:05:e7:9e:b7:05:e7:97:8c:44:f1:a4:32:0c:
57:08:68:cb:ef:1a:9d:c6:bf:7f:57:be:53:58:cc:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:76:D9:FC:C1:61:C2:E2:9A:B0:B8:76:1B:08:47:60:3A:14:87:4F
X509v3 Authority Key Identifier:
keyid:A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:18:29:f0:bb:b1:01:29:4a:aa:1b:86:07:9c:88:a8:dc:e6:
ec:84:75:f0:34:c9:65:84:bf:b4:ee:78:67:6d:3f:f2:a3:3a:
1e:cf:ea:2f:7a:d3:84:71:b3:2b:ee:0d:63:26:4c:f2:af:5e:
94:f6:90:8e:e9:0d:71:e0:27:7f:5e:4f:2c:07:1c:48:56:ee:
de:f4:de:79:f6:0f:10:ea:6c:d0:e3:7f:8d:9a:7c:bd:e7:41:
7a:c7:0a:20:77:9a:07:18:5a:fc:31:35:b5:1f:62:52:d3:83:
7e:56:ff:8c:54:ab:07:df:b6:dc:0c:ef:0e:44:05:5e:96:1a:
51:97:de:be:30:76:3e:82:70:b9:49:dc:96:bb:4b:06:0d:73:
65:84:e2:f1:fc:51:05:c0:1a:24:45:98:68:52:f7:82:9a:e8:
1d:ba:e7:4a:ae:45:0d:86:b7:ef:4a:34:f1:db:56:32:da:1f:
c1:9f:58:88:45:d1:f3:33:36:47:5d:4c:1e:b6:33:5c:ed:0b:
a9:6d:da:ee:43:bd:a9:5b:b0:f5:22:1f:2e:13:19:0d:3a:e0:
0e:60:02:c9:f5:4b:ed:ff:4b:ee:89:fc:4e:54:4a:2c:d5:2c:
a4:f1:38:8a:60:e1:ba:3c:15:20:6b:da:b6:98:7f:4b:e5:b1:
67:9a:42:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:37:44 2025 by rpki-client