Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier: rIHWyKUmt+kDBTCmWVd1TXhSvlXmlDKoT7QHfoD0m5k=
Subject key identifier: 52:25:A4:6A:5E:DE:DC:FA:02:68:16:8D:46:04:56:9A:F9:5B:41:57
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 0197556C68537147E3AC99479BC51CD5F73F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 16:00:57 +0000
Manifest this update: Mon 09 Jun 2025 16:00:57 +0000
Manifest next update: Tue 10 Jun 2025 16:00:57 +0000
Files and hashes: 1: S0sJgeFKsSQM_Y24-bMbEEazWOE.roa (hash: y7ujKOOyPaVjZL4Z2dl77e4qeqFzdcjNTXADyZzs44w=)
2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: 0AkQDcReCRHv9Kl6+8kvk7TdMM+omtyMl5qrgJPzLpY=)
3: r-ygRbjtxxgO3t3aGjdEJ1nnCcw.roa (hash: WR2yF8mNXvC7JDBK3ZnnxThACZnLlRj8L9WEQd6jnY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:6c:68:53:71:47:e3:ac:99:47:9b:c5:1c:d5:f7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Jun 9 16:00:57 2025 GMT
Not After : Jun 10 16:00:57 2025 GMT
Subject: CN=5225a46a5ededcfa0268168d4604569af95b4157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:c1:ea:1f:92:d1:2b:ee:46:97:53:d5:a8:
9f:8b:ab:48:66:63:c3:9b:f1:c3:b0:6a:ff:4b:e3:
86:c1:8d:3c:e2:ce:e4:8a:c0:50:08:8c:dd:c3:64:
86:70:ed:7d:16:00:33:5f:a8:3c:34:d3:e0:09:6c:
ba:40:2f:44:26:ae:73:bc:4d:50:b3:8f:94:33:b0:
91:1c:bf:51:2e:cc:56:cf:fe:b6:13:27:2a:88:3c:
cf:00:9d:4c:ee:cf:29:76:20:f5:7d:0f:bb:34:cb:
98:6f:6d:aa:68:3f:c0:42:ba:da:47:b8:37:65:e6:
a5:85:e3:d1:65:2d:eb:48:91:44:47:6d:69:66:61:
95:7b:ee:7e:a2:f8:57:81:4c:da:7c:75:b2:c8:aa:
1a:b8:4e:43:3d:cb:89:ae:59:b0:8d:e4:51:5b:b6:
df:15:35:73:9f:d9:71:b9:55:4a:b9:b9:7a:5a:63:
22:67:aa:66:93:a5:e0:71:6f:0a:31:5a:44:35:8b:
46:b5:01:9c:bb:44:d6:1b:60:7b:0b:4d:ed:4a:48:
e3:57:85:bc:52:03:45:56:63:39:a9:af:8b:74:10:
61:17:74:d0:b1:23:6c:a2:3f:75:fc:7b:12:45:12:
e0:31:ac:7d:42:65:3a:07:bc:56:5c:b5:65:8d:1a:
11:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:25:A4:6A:5E:DE:DC:FA:02:68:16:8D:46:04:56:9A:F9:5B:41:57
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:36:71:f9:92:4d:d4:a8:99:19:ad:7b:b2:01:be:5e:14:75:
b0:16:a6:3b:9c:39:e1:fb:f7:a0:5a:1b:db:3e:67:f1:ec:15:
7a:c5:da:6e:16:f5:35:67:05:31:20:bd:c3:c0:24:2c:16:51:
48:25:bf:cf:db:a4:47:d5:fb:37:d2:f7:c7:75:ab:38:0f:08:
a5:bd:76:f2:e5:ed:1d:8e:92:86:b0:20:0b:bb:d1:77:a9:8d:
8d:45:a0:5b:07:bf:94:1f:32:57:5a:a3:7d:fa:44:38:b8:32:
37:43:de:45:50:a2:5d:d8:bd:d9:74:2d:34:7b:ac:21:ed:ab:
35:0c:81:43:3a:1a:cd:57:d3:dc:2e:2f:bf:e3:30:a3:43:5e:
f8:5f:e4:dd:9f:58:80:81:a4:e1:ed:98:be:5c:8d:94:a7:4e:
a5:66:5e:b8:88:5c:ea:9f:9a:4b:85:f1:52:58:40:a4:b0:bd:
81:78:ae:7d:51:b5:33:99:b2:5e:f3:0e:4a:69:16:d6:45:7b:
05:4b:99:71:9c:f6:05:a1:cc:89:49:5f:32:d5:28:20:d6:5d:
7b:4f:e5:c8:1d:8d:af:b8:89:99:7a:ae:10:ee:c8:92:58:51:
ba:08:d0:c0:f3:d8:b4:2d:d0:4d:b8:b6:e8:cd:87:25:83:8b:
e2:6e:4e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:32:09 2025 by rpki-client