Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
File: qZtHOUN7VflE0iKdFrbm-lmRloc.mft (raw, json)
Hash identifier: V3KfI/6sgNVcQc2e6olhsTnI8NRsw5t3zC7xCfB/3ZY=
Subject key identifier: 64:D3:BB:C7:25:FE:89:CB:04:09:B1:F1:08:C3:44:1E:B1:C7:E9:90
Authority key identifier: A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
Certificate issuer: /CN=a99b4739437b55f944d2229d16b6e6fa59919687
Certificate serial: 01974B56FC7959E20101229A5EFBF71AEEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 17:01:21 +0000
Manifest this update: Sat 07 Jun 2025 17:01:21 +0000
Manifest next update: Sun 08 Jun 2025 17:01:21 +0000
Files and hashes: 1: qMxnjU0y2BirW8Msof1Jf0nPV6Y.roa (hash: mETKuHxxI80kK1mEz5SE5kB8etbeHSydtbh41gdDMVo=)
2: qZtHOUN7VflE0iKdFrbm-lmRloc.crl (hash: jAzqYaHR0qcWbnp4b9MQBpa5W288GaEXdalJU8mzXVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:fc:79:59:e2:01:01:22:9a:5e:fb:f7:1a:ee:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a99b4739437b55f944d2229d16b6e6fa59919687
Validity
Not Before: Jun 7 17:01:21 2025 GMT
Not After : Jun 8 17:01:21 2025 GMT
Subject: CN=64d3bbc725fe89cb0409b1f108c3441eb1c7e990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:b3:d2:3b:73:0c:a1:70:26:5e:a6:ae:4b:
48:a5:23:7d:7d:56:89:8f:9e:26:b7:fb:e9:6d:f1:
4a:38:2e:02:48:53:1c:af:1b:11:39:ed:da:ab:78:
35:09:ab:fd:30:35:43:3b:28:11:8c:9e:ec:8f:0d:
f8:98:1a:ee:6c:e2:3c:4a:35:03:63:1b:b1:5b:bf:
d2:f9:3b:9a:f7:91:88:3b:7c:22:77:d8:45:5c:66:
6f:eb:14:e2:f3:78:e4:20:be:31:29:48:d5:f5:5d:
be:fc:b6:10:76:76:e6:16:be:a3:ef:78:36:06:2f:
50:b4:ff:ba:4e:5e:d1:02:e4:4f:56:43:31:a7:ee:
dc:4a:49:2d:a5:33:46:c1:01:38:e5:1c:f3:d9:df:
7b:86:14:93:62:d9:5b:b0:60:65:06:55:e5:4f:9c:
a1:e4:a3:8f:da:3f:4c:53:c1:24:bb:1d:fa:44:4e:
51:98:10:f3:a2:7e:fc:9d:4b:f1:d6:de:07:69:fa:
22:81:e1:ee:01:88:46:15:e1:43:e7:68:58:52:d2:
65:29:77:3c:15:53:7c:79:3b:5d:03:be:fb:b4:e5:
5d:4d:37:47:78:52:cc:46:5c:96:68:04:50:3a:b0:
1e:d4:43:73:26:db:c6:5e:9b:cc:34:e4:ad:cd:0a:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D3:BB:C7:25:FE:89:CB:04:09:B1:F1:08:C3:44:1E:B1:C7:E9:90
X509v3 Authority Key Identifier:
keyid:A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:dd:ec:5c:95:4e:77:93:83:a4:62:a0:19:92:27:dc:07:d4:
c2:60:c7:d7:74:a4:11:0c:c2:41:89:9c:63:7c:4e:d0:3a:cd:
f5:c0:69:f7:e7:1b:8d:fa:b9:37:e0:5f:52:86:3a:b3:57:9d:
bf:ba:11:4b:7e:9b:3c:ad:5b:91:d1:b6:db:4d:7e:8d:f0:3f:
88:f5:1c:ba:b9:68:85:6e:81:d0:f8:72:b8:71:bc:86:37:d3:
6c:05:49:ef:aa:50:13:bc:fc:26:f6:d5:8d:be:4b:bf:80:81:
49:48:e9:5a:0a:18:95:0a:33:a6:71:eb:c6:05:78:8c:07:0c:
45:5b:0f:75:5f:5f:89:f1:ba:e9:c1:39:d8:58:ed:87:7e:4b:
c8:1f:d0:bf:fd:9b:be:e0:76:fb:eb:e8:d4:d4:a3:25:22:33:
31:3f:91:59:ed:62:02:6d:e0:48:c5:e3:9c:13:6a:60:84:a1:
d4:07:eb:d2:c4:d4:1a:63:35:1c:f8:2f:8a:88:64:4a:5f:bf:
bb:9a:19:28:69:7f:e5:49:ff:d7:93:c7:b5:14:c8:c4:89:1c:
7f:57:90:b6:1c:b4:0a:d1:4f:17:37:d6:ad:fc:62:ae:c8:b0:
c0:db:9c:71:11:c5:a8:11:da:c7:19:7a:3e:81:e5:86:89:b8:
db:44:e4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:50:26 2025 by rpki-client