Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
File: qg-X5jUIIZuWy7IQY0P14bbcWk8.mft (raw, json)
Hash identifier: 88i6K1kzqkBxS/0WFsR7K6MOHdTE84cGur9Q5Q0OLjU=
Subject key identifier: 85:28:CC:50:02:0C:D1:7A:DC:A8:62:0E:EA:B9:55:A4:7C:A4:A1:07
Authority key identifier: AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
Certificate issuer: /CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Certificate serial: 01974D4536AB0EEA983AE5098A8BEAD10357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
Manifest number: 0284
Signing time: Sun 08 Jun 2025 02:01:10 +0000
Manifest this update: Sun 08 Jun 2025 02:01:10 +0000
Manifest next update: Mon 09 Jun 2025 02:01:10 +0000
Files and hashes: 1: 9AnxnImjEc49reXZMK2FTMayLmk.roa (hash: 8tldiaw0Efa5JT0iNf3f5fRMFBv7jO6PfNRsCAPI7BY=)
2: qg-X5jUIIZuWy7IQY0P14bbcWk8.crl (hash: wTpHbGiEOQcAcUiq6G41lU/n4EmHHWaOqXu01FH5XtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:36:ab:0e:ea:98:3a:e5:09:8a:8b:ea:d1:03:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Validity
Not Before: Jun 8 02:01:10 2025 GMT
Not After : Jun 9 02:01:10 2025 GMT
Subject: CN=8528cc50020cd17adca8620eeab955a47ca4a107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b3:f4:4d:8b:9a:95:c7:8e:1b:62:7b:1e:72:
ec:cb:9b:87:c1:9d:ec:c3:85:c3:2f:ad:70:95:b7:
38:f8:2f:b9:62:ac:8c:f6:c0:8b:6b:e3:d1:3a:83:
81:ca:68:93:78:10:eb:63:c3:51:22:fa:a7:c5:e5:
5a:fa:bc:3b:bd:76:e9:eb:ef:6e:e4:36:b4:82:db:
b9:da:29:ca:c1:b4:ba:9f:b3:44:78:01:ba:ab:53:
af:ca:53:7b:8e:28:f7:5b:22:86:49:7a:7b:26:56:
52:3a:2a:46:42:aa:e9:ca:b8:78:81:87:6d:ad:a4:
fc:a0:67:e9:b6:ee:5e:a1:8f:ed:e7:27:82:f1:c2:
44:60:fe:51:73:0b:fb:f1:6b:c9:d8:73:a6:e6:8f:
0f:6b:df:d0:62:0c:32:4c:96:09:b2:f3:0d:d0:ad:
ba:e2:d4:41:6d:29:73:db:c3:2f:df:a9:cd:a8:65:
5d:52:86:c5:fb:37:a6:e0:dc:c1:76:a7:8b:ff:03:
05:6c:3a:23:ca:da:ee:59:aa:90:73:72:83:9b:6c:
8d:79:0c:2a:a6:1d:1e:e8:19:32:07:17:94:14:5a:
24:2c:05:e8:4d:d9:6d:a7:fd:e0:fa:f4:82:72:c7:
83:75:ad:72:11:f4:33:60:f3:dc:0b:b3:7b:3a:89:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:28:CC:50:02:0C:D1:7A:DC:A8:62:0E:EA:B9:55:A4:7C:A4:A1:07
X509v3 Authority Key Identifier:
keyid:AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ea:c1:1d:1a:32:d2:02:db:db:59:77:61:c3:b9:95:65:d9:
fd:12:c8:08:53:29:12:39:da:ba:85:34:ac:fc:5b:37:4d:3c:
fd:a8:42:e5:2b:9f:1f:e9:61:cd:e4:55:61:7f:81:b7:05:f8:
82:c8:ae:14:6d:c5:7f:80:fb:68:be:ab:09:ad:b8:2c:11:95:
9b:4b:94:2c:92:24:ee:2a:18:b0:97:5b:0a:e6:1d:1e:40:8a:
c4:3e:66:49:28:59:6a:83:22:a1:f4:9d:a6:87:74:83:a5:d3:
1a:02:e9:98:f1:1a:c1:1a:52:eb:bd:18:9e:83:70:f7:5a:51:
97:de:e5:5b:04:1e:30:18:1f:fd:8b:13:44:d4:4d:25:eb:5f:
bc:85:d9:ba:a0:6b:32:61:30:b3:ba:16:26:b4:f4:fe:4a:27:
d2:6c:f3:69:6c:7a:60:8e:bf:44:3d:3e:60:fa:f5:a4:77:b8:
9d:8a:63:61:60:5e:46:6e:77:7f:ed:ab:4f:7f:fe:a1:d3:ed:
df:c6:37:bc:c6:a3:8c:0e:0c:0e:a6:6a:76:8d:70:9e:d5:83:
f7:6a:bb:76:f9:9e:2d:1b:4e:fd:c3:a1:15:46:ed:fe:24:ef:
64:49:ba:35:ba:e1:ac:77:67:04:91:5f:06:38:e4:d5:c3:6d:
3a:58:bd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:41:59 2025 by rpki-client