Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
File: qS5dl54DJTmZRrI5CCLTDx0vNeE.mft (raw, json)
Hash identifier: EFKCcLvmObHPRECTbtIZQtMS3aH0BqcwLbkIsMDKj6k=
Subject key identifier: D9:D2:FA:5E:4F:A6:75:34:8F:0F:B9:57:67:11:30:3E:60:54:B3:E3
Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Certificate serial: 0197474307674B8156D23E8D5D4795062A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
Manifest number: 30
Signing time: Fri 06 Jun 2025 22:01:04 +0000
Manifest this update: Fri 06 Jun 2025 22:01:04 +0000
Manifest next update: Sat 07 Jun 2025 22:01:04 +0000
Files and hashes: 1: JQJmD49tR8jandeFHJ1IkrOGoDQ.roa (hash: qBRt18tQW7myUfjqyk6Za7F1LghK7qoZn+vndFJYSpM=)
2: qS5dl54DJTmZRrI5CCLTDx0vNeE.crl (hash: l9tSdeEVx794ECyu6FmwZNClCvBRjl/JIkHzp00upic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:43:07:67:4b:81:56:d2:3e:8d:5d:47:95:06:2a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Validity
Not Before: Jun 6 22:01:04 2025 GMT
Not After : Jun 7 22:01:04 2025 GMT
Subject: CN=d9d2fa5e4fa675348f0fb9576711303e6054b3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:eb:c9:ba:09:b2:de:a6:a0:5c:81:db:43:
44:5f:7f:6f:12:30:5c:ac:34:88:bf:54:36:ad:29:
98:83:31:ca:2a:a1:fd:9b:9d:90:f3:fb:50:c3:b8:
f0:3e:61:25:bb:ff:b7:3d:d7:1c:8d:f7:8a:1f:96:
82:13:3b:99:80:0f:51:7a:75:72:a5:a6:a4:95:9d:
56:a9:49:3a:d8:cd:94:aa:77:7e:6c:12:2b:cb:aa:
8d:ff:ed:47:c4:b6:0f:f2:a6:79:47:eb:ce:80:b5:
4d:d2:2b:bd:99:af:e7:70:4a:e2:0f:c7:61:af:a8:
e0:52:be:2e:04:2a:81:06:33:1e:53:f1:f6:f0:9d:
91:80:93:1b:f7:c9:8c:cf:e0:a3:19:91:87:58:2c:
39:9c:59:a1:35:0d:0a:44:f3:09:94:b3:b7:03:d4:
f2:0d:1a:dc:a3:d6:7f:1a:fc:a9:3a:9a:b0:b3:a9:
f4:3e:f4:b6:e2:f9:51:33:c6:98:5b:e3:48:3e:da:
c9:0a:7b:30:f1:ea:70:ef:0d:ba:d2:b6:ac:18:10:
dd:37:aa:5b:f5:1a:40:b9:2b:7c:4b:59:7b:df:5c:
48:c3:f1:49:bb:bb:49:d0:d7:bb:07:3c:1c:a7:39:
31:58:c7:37:82:51:2d:2d:3a:5a:6a:5b:42:1f:f1:
b8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D2:FA:5E:4F:A6:75:34:8F:0F:B9:57:67:11:30:3E:60:54:B3:E3
X509v3 Authority Key Identifier:
keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3b:d1:d4:4b:e4:47:50:eb:07:0f:46:01:bd:dd:03:e8:9f:
77:b0:0b:ca:80:2e:59:c3:d3:bf:4d:56:28:fb:25:03:27:82:
fe:36:ea:84:47:5c:88:8f:d6:e2:95:17:63:17:9d:be:22:6f:
77:1e:27:af:cd:c8:a8:cf:25:22:ef:6f:e1:bd:53:f0:3d:10:
b4:90:56:0b:a8:ab:b7:2b:65:e8:78:a5:54:68:cb:7e:02:97:
aa:26:1c:f8:96:9d:2f:bf:65:a7:aa:60:a5:0e:75:88:4f:b8:
4f:16:b4:21:d1:5b:42:84:1a:e5:45:13:b9:21:2d:16:da:67:
3d:f6:4e:21:d1:2f:73:2f:b9:be:22:0d:a8:4d:61:0c:0c:23:
20:cb:26:db:78:68:47:ee:c8:c9:c9:57:47:aa:00:18:e2:89:
04:ca:3f:c5:a6:49:ae:b1:5f:7c:82:75:8e:a2:b1:7e:2e:2b:
a7:0a:f0:c4:cf:17:d0:b4:32:23:b1:60:59:a7:e4:c7:de:7d:
4e:2f:d8:27:ad:bd:c9:ff:8a:76:e3:33:8f:e4:ee:a0:db:7a:
a7:3c:88:da:62:73:5b:fe:af:fa:39:34:33:de:81:7c:f3:84:
1f:77:eb:2b:15:66:47:50:49:3a:e3:d6:da:bc:4b:13:5e:1a:
db:9d:c6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:12:54 2025 by rpki-client