Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
File: qjHuUSwaViq56UEKgx9y_UMYiS4.mft (raw, json)
Hash identifier: 5h9iAY1BGyHnvAgh1ssabgPmOGRRfgqDEaL5u/TIv/w=
Subject key identifier: F9:DC:6A:2A:ED:DE:FC:3F:B2:47:35:78:18:37:6F:AC:FD:29:2F:BC
Authority key identifier: AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
Certificate issuer: /CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Certificate serial: 01974FA13382EFD68C9814C17CFE763DF40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
Manifest number: 0859
Signing time: Sun 08 Jun 2025 13:00:53 +0000
Manifest this update: Sun 08 Jun 2025 13:00:53 +0000
Manifest next update: Mon 09 Jun 2025 13:00:53 +0000
Files and hashes: 1: TrtR0Owq5Xkx-biJC8Ej_IhK1Ag.roa (hash: a1F6oMMLvEFRIYoQInrH9FMRLmJcoCgIJF0JoxM2u7Q=)
2: qjHuUSwaViq56UEKgx9y_UMYiS4.crl (hash: /DYqEliFc1BmaUfXILSFIkRCxEw1TDCohZUEoNbzpaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:33:82:ef:d6:8c:98:14:c1:7c:fe:76:3d:f4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Validity
Not Before: Jun 8 13:00:53 2025 GMT
Not After : Jun 9 13:00:53 2025 GMT
Subject: CN=f9dc6a2aeddefc3fb247357818376facfd292fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:df:33:a2:8d:25:a8:82:e3:b3:e9:22:43:03:
60:8c:30:68:35:b3:55:c0:eb:ca:55:cf:41:7c:a4:
62:fa:ab:08:13:53:da:cf:4e:ba:95:b3:cf:83:9e:
d7:0a:65:a4:09:df:62:ab:de:c4:fc:a9:f0:c7:7c:
17:3a:a6:28:a8:ee:b7:2f:4b:00:30:5a:19:4f:77:
a5:2f:da:19:e6:43:46:b7:9f:a3:23:fd:1d:f5:89:
86:5a:8d:54:45:e6:a6:a3:cb:47:e4:4e:d8:79:ff:
5e:ab:82:ea:6c:22:cf:f0:6a:a7:69:cb:f9:7b:02:
31:34:f3:52:dc:10:a4:0a:1c:21:4f:14:e9:8f:0d:
37:d8:68:39:26:e3:c4:51:5b:25:16:3e:56:6a:65:
3a:7a:34:b5:e2:49:99:5c:46:df:0a:7c:0f:e8:4c:
fa:a1:c4:3f:13:35:36:55:17:c1:12:35:bb:5c:6f:
f7:b1:b7:c9:87:e6:cc:db:7e:84:47:2e:14:71:c6:
d7:ce:6c:a6:6c:29:bc:94:32:c5:84:81:31:c3:ff:
db:82:99:db:60:a2:c3:b9:5f:c2:de:2e:f8:1d:62:
cd:2e:87:43:f6:fe:69:12:4f:3c:0f:52:eb:11:62:
48:51:93:8d:ce:1f:c1:bb:c4:c0:1d:a8:73:4e:b0:
11:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DC:6A:2A:ED:DE:FC:3F:B2:47:35:78:18:37:6F:AC:FD:29:2F:BC
X509v3 Authority Key Identifier:
keyid:AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:79:1b:6a:da:bf:e9:42:ce:e5:e9:18:69:cf:3d:a1:5d:fd:
ae:05:54:c1:2e:c4:72:9c:b8:73:fa:fc:cc:a6:a4:35:62:a5:
85:21:11:49:e9:3f:f4:60:b1:e7:c8:2a:64:00:2a:e3:c3:0a:
20:ae:98:ad:4e:bb:4d:40:2b:26:33:9e:22:2d:ae:9d:9d:51:
a9:c5:9d:e3:b2:a1:f5:db:03:12:36:b0:85:5f:60:89:32:1d:
58:5a:53:48:55:45:81:d7:55:f7:59:01:37:d9:a6:ea:b7:22:
84:e2:dd:11:21:ec:64:49:1f:e0:99:0e:90:bf:79:72:a5:41:
f0:3a:8d:d1:fe:ad:56:8a:9a:59:d9:de:4e:03:f4:ab:d1:03:
0d:78:88:4a:85:6a:d1:23:2b:35:02:61:67:c4:5f:5e:db:63:
37:73:d0:72:3f:7b:81:b8:12:a1:8b:6e:22:d6:c7:3a:48:d5:
77:3a:1e:ee:78:e7:5e:8f:6f:9b:a9:d2:58:05:e7:6b:d1:fe:
23:bd:3f:0d:3c:03:70:f5:c1:05:f9:67:0a:4f:78:8a:01:bf:
5b:f1:a7:8b:1b:08:cf:df:ed:ee:fc:01:33:b0:58:37:8b:05:
7a:4f:69:3b:8e:08:05:d2:96:5b:37:bb:41:2d:02:78:b0:78:
6e:23:c3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:09:04 2025 by rpki-client