
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
File: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json)
Hash identifier: dnJDgnkNxNJ7tMc6F9T3IAl+T/Ys9JRJvRbmKKaLKKQ=
Subject key identifier: A1:98:AA:B5:C3:41:98:89:91:A0:F4:BD:37:1A:9F:4A:5D:62:20:CE
Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
Certificate issuer: /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Certificate serial: 01974A439DD4B70142BAED05F4C4F524058D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
Manifest number: 0750
Signing time: Sat 07 Jun 2025 12:00:34 +0000
Manifest this update: Sat 07 Jun 2025 12:00:34 +0000
Manifest next update: Sun 08 Jun 2025 12:00:34 +0000
Files and hashes: 1: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: PEbSgjjKSExglhqioLARsq1FLd4M+3rFaWJr9V23S00=)
2: sMIvEGgdBdZC0ifsu9Gkafw6woE.roa (hash: iKp2tkAQc6Y6Q0ADEwAX11UEBz8QCxtuHKm3ZBghjNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:9d:d4:b7:01:42:ba:ed:05:f4:c4:f5:24:05:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Validity
Not Before: Jun 7 12:00:34 2025 GMT
Not After : Jun 8 12:00:34 2025 GMT
Subject: CN=a198aab5c341988991a0f4bd371a9f4a5d6220ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:c9:34:01:7c:85:16:92:ee:53:ff:9e:92:
13:ce:75:db:a9:98:64:46:b2:9b:ba:50:67:5c:ea:
06:6b:bb:be:d0:a3:fe:3f:3b:03:97:cc:74:b5:45:
7e:a9:d8:5e:c0:6d:33:61:f6:f3:4c:90:e5:7f:dd:
90:29:09:78:43:eb:97:98:c7:59:bc:b6:61:0e:97:
c8:e4:e2:e3:e9:6a:4b:0f:8f:1f:44:04:45:f0:2d:
e4:ca:e6:cb:74:66:c1:2f:c9:f1:75:d3:96:72:04:
8f:85:36:ac:5b:a7:c2:d6:36:48:40:45:8d:0c:b2:
bb:45:5b:f8:52:9a:83:e0:a6:7b:a0:77:67:18:72:
60:12:bb:57:8f:a7:10:ab:7e:0a:18:87:21:fe:fe:
12:df:ea:86:aa:33:1d:d9:d7:c8:30:4f:93:c1:2a:
4d:f3:84:34:64:c5:d2:c0:4d:32:5f:79:28:20:28:
78:47:fd:f5:3a:6c:6f:1f:c4:df:b3:f7:f4:89:3d:
74:ea:4a:17:a0:5c:3b:6c:9d:35:fc:0d:c2:42:a6:
a3:3d:20:cc:42:ad:2e:fd:4d:d3:20:07:3e:04:19:
af:d9:db:e5:b6:57:f2:af:74:f2:c7:88:e2:57:e7:
44:ad:94:20:b8:76:e6:2d:cf:31:13:d0:54:17:68:
3f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:98:AA:B5:C3:41:98:89:91:A0:F4:BD:37:1A:9F:4A:5D:62:20:CE
X509v3 Authority Key Identifier:
keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:32:cd:d4:ad:8b:8a:9a:b6:7e:0a:e0:4e:ca:88:59:77:b9:
dd:8f:b5:73:0e:98:8d:d5:ae:71:4f:36:c6:f2:bd:d6:f2:94:
f2:18:34:c3:74:6b:ea:85:ca:4f:9c:7f:88:1e:20:f3:c7:b6:
dd:42:8c:96:5e:0d:7c:eb:34:e6:fc:dc:a1:37:4b:d1:fe:80:
68:ac:f4:db:82:15:fc:c8:cb:da:52:46:11:09:c2:b4:f5:00:
2f:b5:36:82:9a:8a:7c:40:32:e9:8d:bc:cf:ce:46:9d:4a:b9:
12:d4:7a:08:5e:78:d6:52:38:4a:77:4c:3c:0d:69:78:cf:7d:
90:90:f6:f2:70:f3:a9:39:a5:5e:eb:32:59:d9:8a:97:01:4f:
13:64:10:cb:2c:50:46:40:ea:8a:79:25:13:d8:82:b0:41:d2:
88:2e:2d:86:9f:fe:99:4e:36:90:0e:f7:f9:b0:7c:4c:8d:69:
9a:65:f9:57:1c:6e:20:d1:3b:cb:02:94:61:f0:ca:1d:00:cd:
67:5f:49:7d:66:3d:81:71:83:c3:61:2e:df:45:bb:5b:12:22:
b9:a2:4a:47:b4:f6:14:55:a0:b1:09:12:e1:52:6a:b9:20:01:
76:4a:f7:9c:7d:a6:a6:d7:32:c3:35:3a:24:21:35:d8:cc:3f:
a9:9a:aa:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:04 2025 by rpki-client