Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: 75oQw/nr0SmY/H9nTw6Fubj+Tb8kBKkS+Q6YW6dBpmU=
Subject key identifier: 24:96:3D:9C:93:4B:0C:23:E9:12:F8:BD:84:67:6F:1E:FB:5D:CF:7E
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 0197499F3C53AC9B697F013AE94304AABBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 09:01:01 +0000
Manifest this update: Sat 07 Jun 2025 09:01:01 +0000
Manifest next update: Sun 08 Jun 2025 09:01:01 +0000
Files and hashes: 1: 71gvIX06FZhti5C8KqbG-iL3ji8.roa (hash: ixliMnZsbefklIbCdZSQC08KvvVc2/x3CDK+CGl2CBA=)
2: IEgYKG7Z6QdmhTg8jbadzlqUL0A.roa (hash: czHiBi7aC7gYGx6TuroDY+vPvsviuucmLi9+d2nYML8=)
3: N7dkJGPV_ClH0zdsWhUXQhLf-fI.roa (hash: 61rIBj7suoaRe9FEYDOMgKbW4Bfv19fnscul85uRvy8=)
4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: AsMqEef5UsH/Jtpo0Nss1FiQzT2UC380vMRgzbIwgbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:3c:53:ac:9b:69:7f:01:3a:e9:43:04:aa:bb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Jun 7 09:01:01 2025 GMT
Not After : Jun 8 09:01:01 2025 GMT
Subject: CN=24963d9c934b0c23e912f8bd84676f1efb5dcf7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:19:8f:1d:f6:1b:9a:e0:8b:c9:f7:94:f0:
31:16:70:01:a0:5d:e3:21:65:ca:1b:9f:8b:51:6d:
62:9c:34:69:76:2b:7f:b6:58:1c:8c:ce:3d:aa:ee:
76:a3:d8:83:47:87:aa:7f:25:20:da:69:26:a5:40:
bf:df:10:8b:ea:11:41:9a:2c:70:c2:48:f8:4e:55:
75:8a:3a:bb:9b:9a:96:ab:e6:d6:04:24:ec:c0:ac:
5b:c8:c9:c5:aa:f8:81:d4:94:8c:43:a4:a7:ad:63:
83:cf:e8:fb:bc:7a:5d:e4:da:1f:34:b0:27:48:e4:
24:13:d9:a7:cd:f3:e4:ca:13:0f:97:fe:c0:12:7c:
15:04:e6:6d:e4:8f:b8:d6:4f:42:d7:65:fa:72:c6:
ef:81:d9:65:cb:bc:ae:18:68:7b:8c:cc:eb:86:b4:
a8:e1:19:e3:99:96:31:19:6f:3f:fc:45:15:73:b5:
5d:54:c6:23:7e:bb:b7:66:3e:47:aa:bb:22:3d:5d:
92:77:d7:f3:20:c3:72:ff:c7:cc:c0:4a:7b:38:2d:
42:e5:03:ef:2b:c5:aa:fc:d3:7a:3f:d1:97:73:ed:
b6:69:41:6f:97:31:8e:2c:66:f9:2f:ea:e6:63:86:
21:49:c4:9b:e2:78:18:07:18:b8:ee:66:20:45:2b:
bc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:96:3D:9C:93:4B:0C:23:E9:12:F8:BD:84:67:6F:1E:FB:5D:CF:7E
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:53:6f:11:43:91:12:2c:3d:21:2a:2e:0e:6d:5a:93:b7:ee:
1c:c7:30:db:5f:60:df:c2:d9:c6:02:10:10:12:c0:35:7c:15:
4a:6b:2e:3c:3f:70:ab:ef:9f:7e:9a:a7:56:47:97:9a:6b:6b:
fe:f6:58:f8:41:51:2b:8c:e7:de:fc:68:f8:12:6f:7c:80:c2:
48:7c:2c:f5:fb:cc:de:26:47:c9:b1:90:64:ec:b6:65:24:9e:
f1:fb:d1:f0:f0:ff:ed:8b:82:78:ae:25:74:d7:10:ae:74:1b:
75:d4:a6:98:bc:ac:58:77:e5:03:87:55:11:a7:56:81:26:fa:
12:d7:b9:c2:c1:98:a4:10:05:f7:65:17:83:12:98:a3:8d:e2:
d3:8d:10:b7:09:56:b2:e0:06:e0:8e:7d:8d:40:fe:d7:f3:70:
93:c1:46:29:1d:1f:99:07:f1:de:9f:45:4e:b0:a2:15:90:1f:
84:7c:e9:ad:a0:fd:06:2b:39:d9:86:90:15:d7:85:73:6c:70:
69:bc:aa:46:36:96:84:c8:77:3f:78:86:3b:b6:f8:82:57:8e:
8e:cb:ef:60:db:71:72:98:f9:80:e2:f3:c3:37:2f:80:cf:6c:
c7:47:99:79:2e:2e:c2:f8:b1:40:3a:b9:01:c2:5b:71:48:78:
cf:16:07:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:46:28 2025 by rpki-client