Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: cxFthteKEOrsRxuvhVUo69e/HBXdssbZYhpwbeLbUdo=
Subject key identifier: 29:6C:21:AD:5A:AD:FB:65:38:A8:29:A3:EE:C2:9D:FD:9D:B8:5E:58
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 01974E582ABE9B040EFD731AF95197A3042B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 07:01:30 +0000
Manifest this update: Sun 08 Jun 2025 07:01:30 +0000
Manifest next update: Mon 09 Jun 2025 07:01:30 +0000
Files and hashes: 1: 2ut4gcmR75V3_QB4c_0bjHQRV8A.roa (hash: Z/Z7sYO20kciWO7Cd+RFwgDueOu/lt3nwibhugXBGT8=)
2: 8IrzZekkYTKoZhthQz-Ja8OIvRA.roa (hash: 5Ew3dl4XH0P4aPETfurdIQU/EHcW5/rwYQ03Cgm05/8=)
3: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: 20IGDL/8L1LvlPJbrv4IhXgzzdwHqzTlbxdsCsUi1Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:2a:be:9b:04:0e:fd:73:1a:f9:51:97:a3:04:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Jun 8 07:01:30 2025 GMT
Not After : Jun 9 07:01:30 2025 GMT
Subject: CN=296c21ad5aadfb6538a829a3eec29dfd9db85e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:52:bd:97:f4:b6:59:b6:ff:a0:25:52:af:
d5:ae:ef:61:02:5c:ae:4d:cb:3a:3a:52:7b:5b:00:
dc:25:55:fd:0d:98:64:b2:76:83:37:3d:00:ad:3c:
2a:12:91:cc:58:b3:04:3e:75:26:c9:34:bc:73:22:
86:f9:80:9f:6e:e3:aa:11:b7:98:72:bb:e4:74:eb:
27:4f:6c:23:ac:95:be:2a:54:71:6c:9d:e8:7c:a5:
70:4f:5d:b5:7c:17:ce:1f:2c:71:e2:e6:5c:f0:cd:
ab:ba:2c:72:c8:47:46:b4:57:4c:4f:b3:30:66:f7:
0c:d7:53:63:9c:ba:1b:96:39:1d:71:8e:1f:d5:b7:
b6:d2:1d:8d:bc:12:a1:17:e9:b5:20:27:e7:72:71:
cf:91:9e:bf:27:3f:85:e2:20:5d:e2:b8:8f:48:e0:
c0:c9:c7:bd:21:81:74:b7:e5:22:2f:1b:f4:a5:8d:
9f:43:85:e3:c4:c9:50:dc:76:76:bd:eb:cf:4f:7d:
e6:ee:c0:91:c3:d3:9a:d9:7b:26:53:50:81:3e:e4:
24:89:43:4b:ec:0f:89:84:89:65:37:1b:04:53:ad:
4f:1c:8a:1a:e8:94:93:7e:bc:12:72:33:9e:0d:78:
eb:66:e6:9c:5e:84:c8:34:c3:1c:0b:df:30:c8:fc:
eb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6C:21:AD:5A:AD:FB:65:38:A8:29:A3:EE:C2:9D:FD:9D:B8:5E:58
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:51:6b:4d:c6:33:3b:0b:49:ea:dd:4d:f7:bd:08:31:7e:c1:
00:3b:44:9e:c4:bd:c5:fb:07:b9:97:95:6f:5e:ee:08:8b:d6:
c9:4d:7a:8d:95:ec:22:62:e1:9a:1c:c7:2e:2c:6f:d9:18:c7:
32:c1:e1:17:91:db:02:8b:00:a9:84:99:15:82:8a:45:2c:ba:
8a:2c:d1:78:c3:45:8d:a3:fa:c2:68:1e:64:07:e1:41:36:68:
14:bc:eb:50:7c:de:a1:ae:86:e6:79:d6:b8:f0:9a:73:51:eb:
b0:b9:7a:e8:4b:ac:13:3d:0f:da:1d:52:3e:d2:99:cc:e0:cb:
71:53:27:be:0e:88:b8:2e:2d:10:e8:c1:3b:e1:34:62:ff:dc:
8a:9e:48:08:13:1e:e1:4f:b0:a6:23:ef:66:48:03:3e:f5:49:
01:01:f8:45:90:2d:8e:ea:2c:b7:7a:82:4f:7e:10:e4:28:9d:
cc:36:0f:1d:09:2a:57:c8:4a:85:96:0f:f8:5e:d9:91:31:90:
b8:0e:51:92:7a:c2:ae:bc:5a:c9:33:f4:41:1a:e9:12:f8:6f:
2f:87:77:e4:d4:d5:a1:8c:c6:55:23:23:df:51:bd:cf:0f:06:
61:ee:bb:80:84:b5:b4:18:b7:01:8e:59:ec:ac:b9:0d:42:3c:
6c:f2:83:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:44:16 2025 by rpki-client