Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
File: Q5i1d7IjtadjUSGadP2kRnBIkPc.mft (raw, json)
Hash identifier: qMaDXsXoadoN/oeJVwacGBJIT/NItFqnCn+2VIBrOMQ=
Subject key identifier: 53:EB:40:BB:1C:B6:0E:00:D1:C2:D0:00:4A:19:DC:F9:9A:96:69:24
Authority key identifier: 43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
Certificate issuer: /CN=4398b577b223b5a76351219a74fda446704890f7
Certificate serial: 01974D0DBB0E199CF494B4BE5111C3459E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
Manifest number: 1266
Signing time: Sun 08 Jun 2025 01:00:34 +0000
Manifest this update: Sun 08 Jun 2025 01:00:34 +0000
Manifest next update: Mon 09 Jun 2025 01:00:34 +0000
Files and hashes: 1: KL5bIat3Yk7dpaHmhHBN9ywSikg.roa (hash: 2Dm1yDCv5S4uhPon+c/p0fcUA41+SmoP2uLFsPOLfB0=)
2: Q5i1d7IjtadjUSGadP2kRnBIkPc.crl (hash: 2+nCiYmxYWQpAD5HHoSl3N5pHJ3icPKsLoTAFdiEMck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:bb:0e:19:9c:f4:94:b4:be:51:11:c3:45:9e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398b577b223b5a76351219a74fda446704890f7
Validity
Not Before: Jun 8 01:00:34 2025 GMT
Not After : Jun 9 01:00:34 2025 GMT
Subject: CN=53eb40bb1cb60e00d1c2d0004a19dcf99a966924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:d9:68:c0:ca:65:1c:82:98:90:fc:3f:9c:
38:79:46:58:1a:02:40:1c:34:e3:bb:af:95:c2:10:
29:1b:ea:42:62:99:6a:24:6e:9f:b6:00:0c:e7:9a:
a0:41:fa:76:43:13:bd:64:d3:32:da:cd:e9:2a:a8:
3e:f6:0a:4a:ef:dc:8a:88:9b:8b:c4:b7:42:46:0f:
1e:2c:b7:55:dc:8a:47:62:28:db:57:0d:a9:e2:ed:
ce:bd:07:d1:84:34:12:00:cd:42:4c:4f:c2:6e:90:
ed:eb:97:80:0f:57:0e:c9:9e:1c:b2:92:b9:e0:38:
f2:b2:ca:ed:f3:97:b7:28:0c:ad:02:69:70:c9:1b:
97:12:41:e7:e0:10:b1:f3:88:a9:c4:f3:6c:a7:d6:
92:d2:6b:50:4e:6e:07:d0:f9:74:a1:c9:30:df:ea:
fd:98:a8:81:1e:7e:44:94:58:e3:08:49:a5:1c:f2:
b0:84:d8:c3:7c:ee:25:e3:01:51:da:59:d0:b3:04:
ea:20:18:b7:11:ae:a8:7f:71:ef:07:5e:85:ad:1e:
90:f4:fe:90:92:07:ed:99:1b:5b:06:6a:76:58:6f:
bc:cf:29:8e:c0:95:71:20:b7:1b:78:f2:92:31:f0:
c2:e6:cf:8a:db:1f:13:38:60:d6:48:d3:e5:73:46:
4f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EB:40:BB:1C:B6:0E:00:D1:C2:D0:00:4A:19:DC:F9:9A:96:69:24
X509v3 Authority Key Identifier:
keyid:43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:90:c1:ff:32:ac:59:f8:37:21:d4:92:6b:fe:06:6b:fc:a5:
01:56:2d:3b:9c:28:d4:82:9b:3d:86:58:ae:d4:ed:a0:b0:f9:
ca:7b:ce:6d:f8:10:4b:b4:be:93:fc:f2:a7:66:7e:7f:72:e2:
7c:43:a9:c9:90:04:1c:18:e4:82:58:59:69:c0:f1:cf:94:97:
8d:da:cb:80:1b:98:53:20:00:f0:5e:a2:c1:65:e9:0e:28:fa:
64:f8:a0:0f:ec:ee:8e:c0:f1:80:75:3f:ca:cb:b8:59:b2:98:
50:af:58:ef:e5:54:bf:3e:7b:49:5b:5d:46:25:d7:4b:bb:20:
8e:f2:91:65:cc:f4:cf:8f:14:43:70:74:c6:12:b1:4b:af:d6:
be:b2:3b:02:68:38:55:b3:87:d2:c4:cc:e8:83:08:3b:60:5b:
87:72:75:aa:21:b2:34:ad:34:59:d5:b9:94:85:16:aa:c7:e2:
81:a6:96:d7:c5:ad:f2:ae:7d:65:6c:4a:c3:39:45:e5:41:69:
d3:6b:81:a4:93:25:d3:1d:e0:14:dd:92:34:27:3d:52:ba:da:
de:34:28:2c:4d:ff:af:8f:79:6f:cc:ab:d6:2d:cf:61:14:18:
79:58:c6:77:ac:7a:f2:be:2b:41:0c:83:83:32:01:96:43:ed:
c2:f3:c7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:39:57 2025 by rpki-client