Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json)
Hash identifier: 6GTm0M4AJ6r33bdSt24b35p7bgZATweIJR8LFAtvHKM=
Subject key identifier: 1D:28:1B:59:39:63:76:80:47:0D:C8:33:C5:EA:80:1A:4B:A1:01:F9
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 0197488CF83B6355CDAE331D70889C17CEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
Manifest number: 158F
Signing time: Sat 07 Jun 2025 04:01:27 +0000
Manifest this update: Sat 07 Jun 2025 04:01:27 +0000
Manifest next update: Sun 08 Jun 2025 04:01:27 +0000
Files and hashes: 1: 8it1mnGsBB_0bpcwXcQ7puN3Hok.roa (hash: DK3oH31M5a3fOw5ohHJX58zCY8Qd9F+oTkaNS/1tWA8=)
2: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: SXnMFaK5OHul1esZj7O74Jnt8bOfH8993qpz5n9KzGE=)
3: bOyfi-z2wqC5OBTk4v100ve7CxI.roa (hash: WiyMw0UdlKQAlB0ieoJy4RAqYir7UCqclb4nu/UNQCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:f8:3b:63:55:cd:ae:33:1d:70:88:9c:17:ce:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Jun 7 04:01:27 2025 GMT
Not After : Jun 8 04:01:27 2025 GMT
Subject: CN=1d281b5939637680470dc833c5ea801a4ba101f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:2c:2d:c4:7e:8b:fd:22:f8:4f:7a:bc:fd:
99:08:13:b0:26:2c:72:5e:7a:7b:00:26:5c:2c:bc:
05:e0:24:08:42:6e:94:b2:dc:c8:75:70:91:17:e8:
7a:50:e1:a8:a5:3e:4b:74:d6:77:6a:da:11:9e:5d:
94:49:2d:ef:dd:6d:2b:9c:8a:66:03:a7:2c:41:51:
7f:1c:56:09:e8:0c:50:ae:d6:c2:da:9a:e1:d2:23:
39:d7:0a:8e:9a:c6:53:6a:a9:e2:75:b7:b7:4a:e1:
96:4a:eb:86:f8:9f:d9:f0:4d:11:c6:d3:12:0a:da:
ec:c9:f7:67:04:f1:b2:d7:c4:fd:02:be:4c:76:42:
78:ba:76:fc:12:b2:36:c0:b8:3c:43:9a:7e:59:e8:
93:05:4e:28:13:62:66:0b:6b:f5:19:a7:a3:8b:c9:
0f:4c:87:e0:8a:b6:5a:6f:08:8b:a3:76:34:25:32:
83:88:2b:26:22:c8:89:6b:8d:77:73:af:ad:31:56:
fc:a4:a0:f2:95:4b:20:2f:47:c1:91:4f:98:45:33:
0e:9e:a6:6a:1f:75:20:db:b0:58:ba:b9:dc:3b:8f:
e0:d0:7c:8d:f2:fd:e1:26:66:8b:8b:da:f1:b7:3c:
aa:a4:84:b6:92:d7:0b:d9:d6:62:e6:34:cd:e9:2f:
93:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:28:1B:59:39:63:76:80:47:0D:C8:33:C5:EA:80:1A:4B:A1:01:F9
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2e:66:98:04:7b:a0:3c:78:61:4d:90:29:be:60:61:f4:af:
82:a4:53:3e:48:b6:bb:d4:56:9c:bc:ec:58:68:bf:bc:aa:da:
62:be:53:a6:b7:b1:4d:d1:10:51:ca:b1:0b:b4:c9:bd:dc:2c:
70:2f:9f:18:26:77:d2:8b:fa:dc:a3:dc:20:74:8b:cb:7e:73:
d9:0f:3c:4f:0c:0a:90:12:f6:aa:a0:29:18:4e:74:f2:56:8c:
3f:48:84:45:f4:62:b1:85:0b:34:73:2e:82:47:4f:79:15:94:
2e:be:cc:46:ec:76:fd:e2:c7:d5:10:a9:e8:2f:b4:d2:fe:cd:
03:f4:85:b9:d0:02:43:da:9e:3d:b5:7c:d0:7f:ca:b8:54:bc:
fc:54:14:ce:7a:26:e8:d2:3d:13:ed:4e:f3:fa:57:a1:8f:e8:
41:30:df:9a:46:0f:91:f3:5d:ac:29:cc:43:35:ca:b5:bb:82:
7b:60:87:5c:f4:fc:d7:d1:b0:c2:f9:de:15:69:ce:a3:7f:39:
df:a7:c5:55:62:85:4d:f7:d5:34:cc:20:c1:20:f3:03:be:8b:
1e:99:86:bc:74:b9:4a:5c:db:8b:b4:40:f9:54:ce:61:41:d5:
49:b0:89:b1:38:86:2f:61:4f:ca:3a:91:11:5d:fa:fd:d5:e0:
d8:94:bc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:53:44 2025 by rpki-client