
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
File: q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft (raw, json)
Hash identifier: D/Ae5Ybm2MxJcY4GIxWpaSpRqwbPciholAo6WcXBe9c=
Subject key identifier: 31:78:B8:05:4C:E0:EC:54:A9:38:7A:08:74:D5:7C:DC:5A:0E:A1:2C
Authority key identifier: AB:85:20:EC:83:E3:0E:B7:93:8B:80:02:F4:70:F0:D1:C5:05:C4:51
Certificate issuer: /CN=ab8520ec83e30eb7938b8002f470f0d1c505c451
Certificate serial: 019748FA1C63490542175C49F68EE503D671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
Manifest number: 0B6F
Signing time: Sat 07 Jun 2025 06:00:40 +0000
Manifest this update: Sat 07 Jun 2025 06:00:40 +0000
Manifest next update: Sun 08 Jun 2025 06:00:40 +0000
Files and hashes: 1: 0SSsSk3JYtZfVKoUdIXep-skUls.roa (hash: lo1rRlcKmSiP/o5fsPXMsNzyze1q/0lfZDjTXaH15HI=)
2: q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl (hash: DhaB2DEfsicVi+2ZDS8n+YF+tbLbLBV50MySUJ7STWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:1c:63:49:05:42:17:5c:49:f6:8e:e5:03:d6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8520ec83e30eb7938b8002f470f0d1c505c451
Validity
Not Before: Jun 7 06:00:40 2025 GMT
Not After : Jun 8 06:00:40 2025 GMT
Subject: CN=3178b8054ce0ec54a9387a0874d57cdc5a0ea12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:f7:2f:8c:0d:11:2b:a7:29:6f:73:e4:c0:
43:de:9a:fb:cf:11:ff:45:b6:a7:08:b8:f7:0e:ce:
68:c3:13:ed:2d:c0:ee:57:9f:5e:4a:9e:13:4a:22:
36:1e:03:4d:0b:89:53:7d:aa:c4:07:dd:5e:91:21:
e0:79:be:a6:0b:5f:eb:e3:0a:f6:21:4c:8c:f5:d0:
3f:d0:7b:88:b4:e8:39:ca:cc:9b:81:b3:51:bd:ca:
9f:69:0c:65:26:76:62:71:c0:b3:bc:41:bc:3b:45:
82:1a:2c:22:31:53:d5:7e:ee:50:3f:5a:0e:ce:95:
cd:57:20:32:90:57:1d:2c:29:fe:ef:ff:58:08:82:
48:67:46:c0:63:fb:ea:31:94:86:7a:dd:77:87:eb:
39:55:3f:65:0d:ca:f6:fe:7f:65:f8:cc:1a:99:f8:
33:24:8d:f4:d4:93:f7:c6:2d:73:1f:99:4c:f9:2f:
94:40:17:23:07:8f:9d:83:34:d8:e7:8e:95:92:63:
46:18:12:5a:7e:38:5e:34:20:70:c5:b5:0c:25:1e:
5c:94:53:ac:99:36:00:e6:b7:e9:ec:90:8d:72:da:
11:41:e7:b7:ba:8d:99:05:6c:be:15:9c:d8:36:7d:
7b:18:c3:c5:2a:3e:29:10:34:d8:d1:e6:94:84:09:
0e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:78:B8:05:4C:E0:EC:54:A9:38:7A:08:74:D5:7C:DC:5A:0E:A1:2C
X509v3 Authority Key Identifier:
keyid:AB:85:20:EC:83:E3:0E:B7:93:8B:80:02:F4:70:F0:D1:C5:05:C4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:0c:e7:57:c4:cf:d8:2f:ff:ba:c9:aa:aa:3d:ce:05:56:16:
f7:e2:c4:36:bd:4f:ed:10:b1:ba:41:be:b9:25:98:c8:c1:d6:
e3:69:8a:dd:47:63:e3:b1:6c:64:ba:9d:fe:09:f9:5a:32:e7:
ec:22:f1:52:33:07:d9:95:e7:9f:fc:da:ba:c4:05:a5:8c:25:
dc:ac:0d:e8:ee:2d:18:db:e4:e3:b7:2e:09:dd:ad:72:97:21:
86:da:bf:bf:bf:2a:b7:60:c8:43:ca:28:41:ae:54:88:c5:02:
43:3f:c5:ba:0b:79:7c:45:74:24:35:2d:63:d2:2e:8e:4a:29:
2f:fc:b6:38:11:af:28:6a:bb:d4:8b:7a:3e:75:24:0c:62:38:
13:da:41:f6:88:82:0b:ef:95:3c:f2:23:01:72:ae:53:9e:72:
2a:c7:1b:7b:0b:44:31:1c:93:c4:2a:7c:65:cc:7a:91:51:8a:
74:7b:4b:e4:5b:41:1c:7c:5a:70:8e:27:ca:68:53:0e:0b:62:
ca:a5:18:1e:3c:22:6f:9d:39:f7:c8:e9:8c:f9:f6:92:5f:b1:
c8:7b:9a:54:82:2d:d1:2e:47:3a:5e:db:e2:18:31:d7:64:d7:
80:55:43:56:4e:48:16:d6:18:cb:a9:db:b4:e1:59:f7:c2:f0:
d2:92:85:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:06 2025 by rpki-client