Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: mH/xkwkSAE12cU3UzGmXxEfSKKIkl71c90TAog21M0A=
Subject key identifier: CD:2D:C9:AB:33:92:DA:ED:3A:CB:F4:15:0A:CD:10:A3:E5:78:BD:96
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 0197488BFFC7764998C2600A1D0EEF920D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 04:00:23 +0000
Manifest this update: Sat 07 Jun 2025 04:00:23 +0000
Manifest next update: Sun 08 Jun 2025 04:00:23 +0000
Files and hashes: 1: Fxqjt6X76bxQBXWwSZ7TE0DXZ4E.roa (hash: 1w4Y/QhTTxCziVVyNTfr4p7dQVzXdB6YpDvNxykMieU=)
2: Khu0iUVuTs8ZYAwuEt_S3XCnJdE.roa (hash: 0AzGfOb5OfWgiAbeRL3c+g44yXgjZKIdXOkCd1IWoeo=)
3: MwggIWb8xKY_Gmyt-jhjyCB3Knk.roa (hash: 2e03nmncmnuNRXI/WbH4mmPniZO75Z2kJ+MSZTXtduk=)
4: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: cGX+Sblv2LyWE8vtsSkq2eu5AxEgzglqYh4C1LdSedw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8b:ff:c7:76:49:98:c2:60:0a:1d:0e:ef:92:0d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Jun 7 04:00:23 2025 GMT
Not After : Jun 8 04:00:23 2025 GMT
Subject: CN=cd2dc9ab3392daed3acbf4150acd10a3e578bd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d4:63:13:97:d1:36:b1:e2:5e:3a:86:9a:ce:
5c:b1:d0:d6:ed:32:99:40:7c:8c:4e:58:01:8a:be:
83:69:cc:f6:8f:00:6f:10:be:93:99:d0:17:db:37:
7e:14:1a:c8:a2:9f:a7:59:86:80:1a:33:c0:7d:2d:
c5:52:60:2e:23:94:48:69:de:80:e2:c7:6c:eb:d9:
8f:33:50:b3:30:51:da:fe:3c:2d:03:c6:f6:78:4f:
da:f6:42:4e:c3:3a:8c:d2:ce:27:e5:e8:c6:b0:a6:
38:11:5f:2c:d5:cb:ca:45:e7:5f:db:61:47:b1:a5:
85:3e:d1:ac:44:e2:d2:bb:40:ad:3f:c0:5c:d1:b4:
55:d3:0d:76:f0:86:b6:7f:44:14:e4:1f:36:57:cc:
1b:36:18:19:87:60:4a:cd:02:36:21:8e:de:94:ec:
fc:be:6a:f9:81:de:66:1b:a8:39:51:64:9b:0e:8e:
4a:ab:18:3a:1b:af:ea:40:19:2c:0c:09:ef:a7:f2:
1d:88:15:50:a2:f5:92:b0:8b:21:56:f2:95:22:9f:
9f:10:92:54:5b:9d:72:f1:17:96:df:e7:2a:f3:f3:
57:a2:bd:3e:fc:ee:94:fc:1a:70:ad:a0:02:0e:a0:
a0:03:04:2d:9e:08:c9:be:98:d2:98:ed:ba:53:14:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2D:C9:AB:33:92:DA:ED:3A:CB:F4:15:0A:CD:10:A3:E5:78:BD:96
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:01:25:d2:93:59:d4:3e:83:25:cd:3e:ec:c8:eb:fb:20:85:
d6:1c:1a:2e:c9:d0:1d:c4:18:a4:af:d0:33:78:d3:f7:df:5f:
4f:ec:74:70:0b:3e:99:8a:42:b6:8f:f4:73:a5:d9:f9:4e:8c:
1c:51:52:13:26:21:56:94:05:cf:4b:72:1c:92:9e:59:6c:0e:
69:22:c8:9a:72:95:87:1e:60:4f:26:6e:3a:9c:2a:11:b6:9c:
1f:a3:da:2f:11:7e:22:c2:b2:e9:74:24:89:ca:97:89:9d:12:
d9:85:71:f6:85:d3:6a:05:4e:8a:9b:db:fc:52:36:e0:6e:90:
bf:b5:2a:99:1b:6d:3f:6c:41:62:24:d6:49:a1:49:e7:46:ad:
a9:dc:0a:f0:c8:78:5e:bb:89:b1:c0:ec:83:92:08:13:66:bc:
11:09:9d:be:0c:df:d7:80:e6:b7:b3:88:1e:63:aa:39:8f:84:
d6:eb:15:dc:ef:da:94:29:7a:cb:80:56:c0:b4:1d:bc:ed:62:
c5:a1:90:a1:f3:77:48:41:90:79:16:3f:3c:d1:fc:9d:19:90:
f8:7b:2e:85:9c:c1:6c:30:25:ff:99:25:43:bd:49:9a:6d:50:
e5:99:a5:b8:e7:9e:7c:26:51:de:2b:fc:60:f9:f4:f1:54:75:
05:28:1b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:19:18 2025 by rpki-client