Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
File: qdvUwWus1i0mMqoeF7LozQEA1oQ.mft (raw, json)
Hash identifier: V8PMHcIvMLSS75QOk0K8KY+Cgg/aq5lTcW3bKkeQGyI=
Subject key identifier: 40:37:46:1B:7A:72:EE:FC:01:DA:C5:66:B4:E6:E5:69:F6:66:44:DD
Authority key identifier: A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84
Certificate issuer: /CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
Certificate serial: 0197586CE4364A7D300DA028DA0461775B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
Manifest number: 158C
Signing time: Tue 10 Jun 2025 06:00:20 +0000
Manifest this update: Tue 10 Jun 2025 06:00:20 +0000
Manifest next update: Wed 11 Jun 2025 06:00:20 +0000
Files and hashes: 1: I4II5YG7LUFBoJ8SBtHVtTTsJRQ.roa (hash: EK6oOV8QOUxKFrS4ArdugAEfde8g8gPU3lkmuBHgdRY=)
2: qdvUwWus1i0mMqoeF7LozQEA1oQ.crl (hash: yvEC51jwkYSf+O65OI/91QYII3MIl7z2nfCcz2D6L2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6c:e4:36:4a:7d:30:0d:a0:28:da:04:61:77:5b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
Validity
Not Before: Jun 10 06:00:20 2025 GMT
Not After : Jun 11 06:00:20 2025 GMT
Subject: CN=4037461b7a72eefc01dac566b4e6e569f66644dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:54:b1:19:20:67:a2:50:59:a7:6a:4a:35:
61:e1:c3:13:82:26:bb:bc:f5:5d:c9:c7:0c:08:99:
6a:62:cd:45:2e:52:fe:bb:45:8a:4e:52:2a:75:29:
48:a1:17:06:e8:88:45:c5:60:4e:7b:93:f8:24:8c:
25:ee:2c:83:95:64:1e:86:06:c1:f6:43:01:06:04:
9b:9c:1a:d7:a5:92:61:05:bb:48:ed:93:55:01:27:
1b:9e:c1:dd:05:5e:8b:aa:68:98:f3:5f:92:1c:33:
f6:15:07:ff:5b:43:2a:df:82:95:6d:68:09:3e:96:
09:ec:9a:7c:74:66:d7:ae:17:a3:e4:e6:b3:d9:18:
90:23:f5:10:16:46:01:7d:62:ae:ec:da:42:41:6b:
97:df:92:12:43:1e:c5:0e:3a:71:4d:99:8f:2f:15:
bc:91:7c:ab:f8:92:b8:88:4e:de:a7:fb:cd:cb:22:
08:62:d1:06:10:f8:4c:58:2d:7b:84:d5:79:2c:70:
eb:f2:e1:a9:de:b0:6a:52:75:b7:3a:cc:e5:06:62:
33:f5:ad:dd:01:b5:4f:13:b0:59:77:ad:dd:e7:71:
91:46:ba:9f:73:e5:49:89:2a:24:6a:0d:38:bc:94:
dc:3a:27:0c:ee:fb:22:a8:04:a2:50:d4:33:81:9c:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:37:46:1B:7A:72:EE:FC:01:DA:C5:66:B4:E6:E5:69:F6:66:44:DD
X509v3 Authority Key Identifier:
keyid:A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:24:fe:b0:1e:b2:b9:2f:99:12:a6:c4:8d:f1:6b:5a:27:c4:
29:1a:42:a6:82:5f:01:d3:ac:b3:1f:ea:3b:db:f9:07:a9:50:
56:c8:4a:db:07:0c:65:ee:9d:d8:55:6c:2f:14:86:23:bc:c7:
83:02:c1:f9:6a:48:d2:36:1b:ca:3e:47:f6:02:21:f7:42:75:
bc:69:69:35:79:e6:83:3f:e5:17:d4:f1:62:04:dc:92:3e:75:
2a:e9:8e:1f:a9:62:f9:6d:1b:89:13:da:02:d6:01:8d:fc:69:
57:c0:a4:e8:d1:de:a5:9a:b2:cd:d0:de:57:a5:80:d3:ce:42:
5a:b0:c5:d1:8a:40:b6:12:57:50:c3:80:2a:d9:87:ca:2d:9d:
43:6a:41:4b:89:24:6a:83:93:7b:5e:0a:ea:65:ec:7e:79:75:
5a:48:ea:b1:e8:a5:4f:dc:a6:c7:6f:71:02:3c:90:24:93:e5:
a5:47:79:b6:5d:86:26:19:32:e1:f8:c3:ea:ab:fc:60:e3:2c:
7f:49:bf:47:ba:82:2f:d6:34:70:18:a4:be:fb:8f:3d:98:b3:
be:e3:25:8a:36:0b:23:da:23:4c:d5:e8:ae:b6:e1:90:3f:c5:
89:96:41:2b:04:cd:88:3f:89:7e:f8:e5:8b:e1:07:11:49:a0:
b8:2a:67:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:12:53 2025 by rpki-client