Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: EjiGdStx/tkW7IutK1pDcpB0phDuH06oWweZL2O6IKU=
Subject key identifier: 85:F5:C6:6D:C9:79:9B:B4:B3:80:3A:A4:6C:26:C3:1A:A9:4C:45:A7
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 0197499F1495A226B0851349AA15C0239FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 14B1
Signing time: Sat 07 Jun 2025 09:00:51 +0000
Manifest this update: Sat 07 Jun 2025 09:00:51 +0000
Manifest next update: Sun 08 Jun 2025 09:00:51 +0000
Files and hashes: 1: 4KqmJoEVUd9bhY-ntnaMTkNmA44.roa (hash: LLo6nOWCS1mxlNIUMzouZjN4HwCv7i5lI/hb4nBjcBQ=)
2: Jw4aASdhNdVI-FplW-882cj74Fw.roa (hash: ewm0/xps8d7RUrK5yQyWODWIjZ5yxmU6C2dpLRlFoTs=)
3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: wyhTcDvtRoZcpqpAwq7pjrK2qlrsqjMd6oVTw/EMOvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:14:95:a2:26:b0:85:13:49:aa:15:c0:23:9f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Jun 7 09:00:51 2025 GMT
Not After : Jun 8 09:00:51 2025 GMT
Subject: CN=85f5c66dc9799bb4b3803aa46c26c31aa94c45a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:32:88:32:a0:92:1a:f3:23:71:da:23:44:78:
c9:c7:86:de:cb:90:74:ae:94:29:4c:e1:38:d4:4a:
ed:8d:a9:c5:b3:89:3b:fc:d7:5d:1d:23:72:54:82:
a7:7c:79:85:9f:2b:e6:fc:8b:77:ab:bb:64:27:d0:
9e:0d:98:af:43:86:4f:7c:30:b7:92:3e:e7:59:42:
33:72:f3:fd:81:b4:d5:ad:8b:ca:89:81:4c:31:ec:
b8:0c:0e:01:60:14:74:fa:fb:b8:b2:33:99:17:ab:
ca:22:e4:5e:87:ff:89:08:d7:01:f5:5c:36:39:08:
02:2b:66:c3:c5:81:b8:97:0d:28:20:03:93:b4:7a:
8e:6b:87:14:87:af:ca:89:24:45:c3:f8:ba:90:5d:
87:0f:9e:15:55:96:01:1c:2e:5b:48:09:c6:bf:74:
13:38:e4:d7:1c:99:f8:1c:22:9d:b9:52:86:93:b3:
32:2e:2f:68:2c:3a:04:49:8b:d0:a9:94:a1:64:6e:
f3:9d:e7:08:14:3e:59:af:72:50:2b:08:30:58:3b:
af:82:7f:74:81:f0:3a:33:37:5b:18:70:90:a2:91:
95:c2:2b:9c:75:4d:77:8f:df:9a:ba:42:80:e7:36:
07:a8:ae:2d:a7:e0:b2:18:8a:ce:d1:5b:48:65:43:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F5:C6:6D:C9:79:9B:B4:B3:80:3A:A4:6C:26:C3:1A:A9:4C:45:A7
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b0:a3:b2:37:21:6f:d2:a4:98:b7:f2:b8:50:b1:c4:66:e4:
4f:5a:59:42:87:2a:74:bf:5a:64:86:5e:95:7e:20:a0:ea:e4:
b7:1c:93:01:ef:0c:a2:c0:39:ce:79:f6:1f:24:0b:5e:2b:fb:
d6:f3:4e:b9:96:dd:a6:77:44:36:58:84:f8:ac:e9:f3:19:72:
c7:47:f4:dc:3a:db:c3:ba:1c:7a:b0:a3:bb:42:40:e7:bc:1f:
4e:5c:f9:96:5e:3d:92:53:b7:02:98:02:4a:72:b2:ec:e1:70:
f0:fc:96:40:f5:44:a4:3a:a3:6a:cf:04:79:50:b4:02:5f:e4:
ed:44:e9:86:f7:bd:81:5a:57:17:76:26:15:99:7e:54:92:ad:
aa:a4:57:2f:a4:50:57:1f:8f:ac:71:a4:f0:59:02:de:10:c2:
8a:5c:92:2a:9a:00:21:b2:34:04:71:18:2b:f1:1f:09:fe:79:
69:5e:f3:a2:3a:28:d9:1d:e7:ec:52:d8:f4:1f:3c:25:df:f4:
33:50:46:d9:74:bb:cd:c4:34:cc:21:1a:28:55:0d:69:58:cd:
ba:06:69:71:5b:1c:e7:ef:5c:b8:1a:45:fe:b8:71:28:ce:15:
0b:14:88:96:0b:8e:d0:8e:da:28:44:2b:5c:f2:fc:33:11:55:
ad:67:05:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:52:42 2025 by rpki-client