Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
File: Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json)
Hash identifier: twzly5tMpawmw59vqxB3EWhjWJCvw3ABZMENKMLyICU=
Subject key identifier: 2F:F2:E8:F6:D0:B1:40:23:93:25:E5:BC:8F:13:65:82:E2:16:2F:35
Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Certificate serial: 0197500EBB4A3E6716CD93EF35CBEA49333D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 15:00:32 +0000
Manifest this update: Sun 08 Jun 2025 15:00:32 +0000
Manifest next update: Mon 09 Jun 2025 15:00:32 +0000
Files and hashes: 1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: zclyjCaaNALt2MnqXJSR7BlEtcpEl/BPCP14eOMCtzI=)
2: pFcInvEW15iKWvoPMx5EVwuCano.roa (hash: nE+nXG0xZdbwspGUmTTrOhLDVrJyA6M8TZL//6qKpZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:bb:4a:3e:67:16:cd:93:ef:35:cb:ea:49:33:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Validity
Not Before: Jun 8 15:00:32 2025 GMT
Not After : Jun 9 15:00:32 2025 GMT
Subject: CN=2ff2e8f6d0b140239325e5bc8f136582e2162f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:d6:47:ab:e0:26:58:40:5f:d8:60:1c:e8:
db:99:bd:4c:32:b5:85:1b:9e:50:e8:cf:20:27:c5:
56:d2:7b:bf:4e:2f:05:73:f0:7a:23:52:c3:31:fa:
91:51:53:e0:8a:13:57:fc:68:1b:4e:1b:2f:2b:7d:
c9:28:ad:25:85:b2:99:a7:ba:7e:27:ff:83:83:86:
ff:53:0e:1d:2f:3a:4f:97:b6:5a:fb:f2:cd:bf:ed:
50:59:6c:76:cf:7d:bd:35:cf:a4:25:e9:0e:04:7d:
0f:b9:c6:03:4d:07:72:5c:53:dc:c9:80:02:1e:b8:
56:60:89:59:e7:cf:20:f0:0d:46:85:80:a8:08:6b:
5e:2f:20:53:fc:9a:cb:14:7a:60:3a:03:fa:25:20:
0e:ec:f0:66:37:f2:da:5a:dc:ae:a3:9e:69:5f:cf:
8e:38:af:87:47:b5:e1:d8:df:26:80:ff:bd:1a:6c:
46:70:73:92:98:10:8f:04:82:9e:99:2b:81:cd:07:
08:31:d7:3b:58:81:17:a8:27:fe:1c:46:ac:24:70:
76:51:57:41:d4:84:75:d7:b3:3e:1a:61:e3:dd:cf:
3f:5a:4e:ff:58:f2:d3:a2:ac:fa:11:7d:a6:63:42:
e9:d9:4e:d7:0a:ea:95:ea:ce:6a:3c:72:c9:6d:e1:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F2:E8:F6:D0:B1:40:23:93:25:E5:BC:8F:13:65:82:E2:16:2F:35
X509v3 Authority Key Identifier:
keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:42:47:2e:56:98:37:80:0b:98:13:03:6c:48:10:d2:7a:f7:
57:29:9d:ab:d0:79:93:8f:39:a0:df:35:5f:97:23:13:1e:cb:
f0:5a:46:05:b7:23:29:47:71:1b:73:e4:3a:ab:19:e6:30:28:
b2:9a:3c:44:c2:4f:de:5e:63:ca:c1:cf:d7:ea:69:aa:f0:bd:
b8:4b:d5:7d:46:6b:c1:af:19:04:5c:81:91:b8:10:ad:01:3c:
8b:0f:a3:b7:cf:6e:da:83:05:b7:c0:9a:21:b4:40:c4:ec:9b:
dd:5e:b2:04:d6:0e:44:20:b9:8a:ab:59:56:90:0c:0b:38:8e:
db:35:05:d2:d8:32:0d:6d:91:7a:b8:58:b7:2a:35:5c:35:cf:
ea:f7:da:fd:b1:ab:fa:e4:03:80:80:ca:73:aa:11:3b:80:87:
c1:3a:95:00:58:c4:4b:15:bf:90:ca:68:8a:ef:b3:83:b3:20:
1d:9a:63:58:e7:f2:da:12:a8:93:0c:dc:a5:43:cb:a4:1b:62:
c0:ac:8d:bc:9d:6b:e4:b1:d1:17:a0:22:c8:e6:cc:be:80:b3:
35:30:b9:86:09:9d:b0:84:6e:51:e6:0b:b8:e9:30:f3:71:0c:
3f:28:bc:c8:11:57:24:6a:97:7b:ec:65:30:cf:56:10:ed:d9:
79:4c:b8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:35:09 2025 by rpki-client