Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
File: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft (raw, json)
Hash identifier: f3GkMT8NrjiTz6yKwBWd067CEgY0gFWbBEhEUQlFoGU=
Subject key identifier: 2F:3E:ED:37:BF:23:0B:28:6B:FF:AB:4E:C5:75:9A:47:54:0E:93:90
Authority key identifier: AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
Certificate issuer: /CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Certificate serial: 01974DB2AC38B1B56ABAB1EE279606DD401E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 04:00:44 +0000
Manifest this update: Sun 08 Jun 2025 04:00:44 +0000
Manifest next update: Mon 09 Jun 2025 04:00:44 +0000
Files and hashes: 1: fc4brGlD2V9aXaMOkj_E0RZ_J08.roa (hash: OhUlbRmFgYOLeHLw8imL9BrjCyNfPZwGRzxzejrVjWo=)
2: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl (hash: Bfm09Y4KLav7S4zh19gUsjjXtNMQ5jVhZ02xNHORlqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:ac:38:b1:b5:6a:ba:b1:ee:27:96:06:dd:40:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Validity
Not Before: Jun 8 04:00:44 2025 GMT
Not After : Jun 9 04:00:44 2025 GMT
Subject: CN=2f3eed37bf230b286bffab4ec5759a47540e9390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:5e:b0:f7:1f:2f:70:fd:b9:ca:89:ec:54:
05:25:74:2f:05:56:71:c9:d9:ac:04:3a:a4:96:de:
af:ab:5d:f5:69:72:e4:3b:50:00:1a:b5:c5:96:36:
67:16:ef:75:7f:7b:82:7c:c2:ff:1e:3f:b0:3d:24:
65:c8:6f:20:20:f3:f7:99:65:30:2d:99:85:1d:42:
ae:5b:4a:01:82:a5:1a:e8:2c:ef:94:49:19:d5:77:
4d:e6:9c:d3:76:42:93:40:84:cb:21:9d:cd:8f:83:
db:bf:fb:82:59:fd:01:a1:94:70:25:f3:e8:09:e3:
1e:75:92:74:fc:30:9c:38:6c:a8:0e:98:47:78:66:
69:c9:51:d0:1a:66:87:3f:bb:ad:18:7a:5e:62:96:
e1:37:ca:aa:0d:d9:1f:fd:a7:ad:31:0e:43:cb:46:
88:9a:e7:d8:98:5d:cb:e0:47:87:46:25:7d:21:5c:
f7:28:f4:10:8b:c9:34:be:aa:3e:aa:6d:49:fb:d3:
23:ef:90:2e:60:46:95:3c:71:b8:8e:88:0a:4c:a9:
28:83:4a:54:e8:50:ad:46:05:c8:bc:9a:e8:bd:51:
92:79:dd:de:2b:a2:47:56:3f:16:9c:59:47:97:7c:
99:ed:03:35:7b:35:c8:8c:fd:d6:9b:40:97:e3:b5:
b1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3E:ED:37:BF:23:0B:28:6B:FF:AB:4E:C5:75:9A:47:54:0E:93:90
X509v3 Authority Key Identifier:
keyid:AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e6:c2:b5:58:ff:3f:85:a8:6a:32:08:72:6b:b0:6e:80:4d:
f6:60:95:2f:17:88:7a:7e:cf:a1:54:02:6a:ab:8e:96:a3:ad:
78:10:a4:b7:e8:61:0b:f5:06:02:ac:8f:7c:8c:65:ad:ee:0c:
d9:11:76:36:f7:22:36:39:f9:d0:97:4f:90:18:10:e1:f6:5e:
b3:cf:ec:18:77:f1:61:9d:da:cb:d4:85:24:9d:5b:b7:36:21:
96:50:21:b7:42:8e:fa:a0:2e:b9:46:ff:37:d0:a9:50:27:17:
9f:a4:f3:15:ae:d4:9c:34:5f:8d:5c:65:1e:fa:14:97:61:80:
94:84:82:7c:82:b5:54:17:0d:13:43:4e:f1:b0:ee:11:f6:f3:
f2:8f:08:3b:cc:cb:b1:0b:3f:f9:18:26:17:74:07:17:b3:22:
61:72:54:56:eb:ce:de:48:6f:f8:e7:99:49:70:be:5c:eb:63:
aa:a3:78:72:8f:c2:a1:b1:d3:56:65:fb:fa:f2:b5:10:56:87:
44:a5:08:ee:82:e7:6a:15:09:35:14:ef:9e:55:33:98:cd:b3:
03:9c:63:b3:25:43:5d:e0:ad:19:b9:1d:1f:83:d1:59:fb:85:
e9:42:4a:12:8a:05:78:de:2d:77:b3:04:f6:ea:df:e3:7b:97:
c2:3f:a7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:57:03 2025 by rpki-client