Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json)
Hash identifier: zxObKFLklAlWAeK09/ooKwJjpbIgA7HaaVKp13Jy5PA=
Subject key identifier: 56:62:3D:CE:6E:A4:20:32:09:02:0F:D2:AA:12:17:DA:67:94:56:AC
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial: 019751C68BE36216FEFEE7D537D4A70CA8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 23:00:55 +0000
Manifest this update: Sun 08 Jun 2025 23:00:55 +0000
Manifest next update: Mon 09 Jun 2025 23:00:55 +0000
Files and hashes: 1: MvXI14tDwVTEk5R-D7-LraqIO4w.roa (hash: 3BHAzhEhaXiTqmDVNfIXzHzlk0Nw0qhzvKzpdNvcPCU=)
2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: bxIfUz5hEB91Q9NOO2tNhvJ6L8l7IHUY4c3N3c9hhYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:8b:e3:62:16:fe:fe:e7:d5:37:d4:a7:0c:a8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Validity
Not Before: Jun 8 23:00:55 2025 GMT
Not After : Jun 9 23:00:55 2025 GMT
Subject: CN=56623dce6ea4203209020fd2aa1217da679456ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:8d:e2:c9:81:9c:cc:bd:a6:40:50:36:f8:
80:05:a0:b6:99:d7:f8:10:d4:7d:d4:98:bc:a6:51:
ae:e5:44:89:d0:1c:e8:10:13:30:a5:a8:d8:d9:d4:
5a:18:26:bc:d8:c1:e4:eb:bd:86:06:ac:7e:5f:d1:
85:4f:42:f3:00:71:c7:1e:14:27:1e:83:17:fc:33:
e1:af:bc:d5:2c:0f:49:ba:f6:a7:6b:69:a1:f9:ad:
df:f6:c5:70:ea:9c:74:4e:4c:8a:55:4f:33:52:74:
0b:37:b5:cc:a6:3b:d8:f8:f3:a7:f7:9e:54:8a:31:
60:2b:ef:88:e6:af:45:9b:65:17:d7:93:91:03:a7:
77:5a:78:88:09:d7:93:ff:23:3e:1a:89:c6:d4:80:
cd:aa:b7:ae:41:d2:99:df:f5:78:f0:d1:5f:de:8c:
84:78:82:24:dd:4a:41:67:a5:0c:9c:03:d0:b2:b0:
1c:f7:59:55:51:e0:bf:ad:2a:98:a6:1b:d2:c7:4d:
96:65:28:bb:98:d6:e3:c0:1b:17:f0:90:94:97:48:
1d:5c:5b:1f:9b:aa:ab:b2:69:61:67:67:f8:bb:4d:
ff:15:0e:cb:08:ec:c3:88:80:66:cc:3e:2d:03:ae:
28:16:ec:43:a7:d9:f6:64:42:2b:8d:c6:d0:7e:4c:
01:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:62:3D:CE:6E:A4:20:32:09:02:0F:D2:AA:12:17:DA:67:94:56:AC
X509v3 Authority Key Identifier:
keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cd:43:89:fd:42:8b:26:00:43:91:62:d4:a5:a3:c8:c9:15:
d1:7c:16:a7:1b:e0:fd:1c:4a:af:23:83:cb:bc:54:4e:69:4a:
5d:bf:d0:5f:60:3f:94:e9:11:1b:e7:f5:26:94:49:ad:bf:97:
be:73:a7:86:3a:a6:7a:e4:da:3f:05:ff:40:e5:71:1b:0c:18:
a7:a0:44:9a:f9:90:b9:6a:1c:b2:2e:cc:d1:bb:21:90:06:4c:
3d:cc:cb:5a:44:0e:75:6a:7e:c4:70:cf:fb:3c:ef:a2:2b:4b:
e2:ee:95:fe:93:36:ac:03:f2:9c:74:0f:8c:37:6e:c3:c2:14:
4b:4e:2a:87:db:be:51:94:8b:2a:d4:0f:ca:0d:76:ec:e0:54:
25:c8:21:81:82:a2:b7:b2:5d:7b:84:bf:64:8f:11:ee:19:1c:
8b:5a:0a:78:da:eb:7d:45:1e:8e:05:b2:0a:45:b4:93:7c:7f:
67:bd:f4:d4:5c:1b:df:f3:36:c3:c6:66:50:64:1f:7f:7c:5c:
0c:35:11:fb:77:b2:5d:35:bf:04:ee:fe:91:3d:bc:9a:60:1f:
35:40:83:fe:4c:df:19:39:fe:34:03:34:5f:56:bf:a8:f4:3d:
8a:7a:61:ad:14:d5:36:63:96:66:3e:35:1c:c3:d9:f8:8c:06:
31:71:39:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:27:00 2025 by rpki-client