Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: xaxmIeUxf8ADft6qmvu+idBlgL8DFOnQw4nAApBVoFA=
Subject key identifier: 46:5B:A5:25:8B:C6:3E:8C:E0:22:2A:A3:45:59:4F:08:46:D3:6B:CD
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 01974DB308E4B6A23EE084B353137F10D1E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 09AD
Signing time: Sun 08 Jun 2025 04:01:08 +0000
Manifest this update: Sun 08 Jun 2025 04:01:08 +0000
Manifest next update: Mon 09 Jun 2025 04:01:08 +0000
Files and hashes: 1: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: z4l4ChwrqdfydPmLhmMWjiWNtIFjsR+6kXtRFqGOnUo=)
2: RackKE1twGeBor1eLjDiSlTrVkc.roa (hash: fjoph1tBy6gB1mXGT8/AsYnic9+cO2wmV2369HxSse0=)
3: UV-P_H7U_ZghmDFQbugvFGk8Rho.roa (hash: rLL2PRAgAL7amnAXMzDF6uWbk/cCk5kAorxzjbQE6+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b3:08:e4:b6:a2:3e:e0:84:b3:53:13:7f:10:d1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Jun 8 04:01:08 2025 GMT
Not After : Jun 9 04:01:08 2025 GMT
Subject: CN=465ba5258bc63e8ce0222aa345594f0846d36bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:20:49:ea:d2:07:c2:e2:5e:a8:ac:0b:34:
db:8f:0e:4c:36:40:f4:81:9b:e0:39:00:c0:bb:5a:
3a:2f:58:62:f7:ca:d6:67:64:8b:1d:7d:76:21:34:
d2:0e:a1:92:85:ef:b0:61:92:3c:f1:11:79:16:2c:
66:56:9f:6e:32:de:65:78:0c:80:46:75:7a:08:f7:
16:fb:70:52:1a:6f:57:48:65:de:54:4e:bf:9b:9b:
e2:34:b8:ae:b1:d3:23:d6:fc:55:9f:75:7d:a1:40:
cc:26:ce:85:00:08:91:b7:65:9c:e0:b7:06:bd:0c:
1c:34:bb:96:00:86:e1:8c:77:0f:0e:1d:a8:5e:fe:
d2:8b:2c:9e:41:82:57:24:0d:13:bf:1d:04:de:ab:
53:1d:86:33:68:cb:2a:95:ea:95:16:35:54:82:83:
21:36:03:30:54:79:ac:76:6d:cf:71:b9:44:df:3b:
3c:9c:43:5b:8d:e9:db:64:28:87:3c:54:cc:1d:4f:
e3:1a:a5:0d:20:3c:1b:df:7e:69:99:d4:be:21:c2:
4d:64:8c:9f:92:cf:4e:8d:51:04:d5:07:0d:e8:fd:
bf:83:c8:ee:9a:31:8d:19:6d:cf:25:7d:36:a0:7c:
67:bf:ef:55:f2:2a:cf:ff:9e:b3:23:86:92:da:f9:
77:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5B:A5:25:8B:C6:3E:8C:E0:22:2A:A3:45:59:4F:08:46:D3:6B:CD
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ad:50:2e:1e:33:e9:a6:b7:e3:a7:ac:28:eb:1a:34:96:10:
62:eb:3d:8c:95:92:3f:1b:c9:6c:9f:6c:11:06:f1:80:56:2a:
b0:1a:2e:69:39:9d:96:12:85:ca:17:f7:32:34:ae:2d:41:68:
9c:43:28:f7:fd:c1:4e:26:79:60:ed:c8:e0:ba:e1:f3:4b:0f:
d7:7d:cd:d2:f4:ca:a7:d7:da:dc:fa:2b:bb:fd:08:27:80:31:
a7:c0:07:8d:ff:19:17:bb:94:62:62:81:35:d2:63:c8:1e:42:
5d:e3:19:a2:03:49:38:09:f8:f6:5c:c9:5c:13:b1:ea:a6:99:
a6:71:5e:c2:2e:6a:9e:82:b1:1e:b9:be:71:80:24:0c:9c:a3:
94:7d:b4:da:f4:b6:9a:9b:11:7b:93:d0:3d:3e:27:a5:1e:8e:
62:2d:71:1b:64:8b:85:19:eb:6b:0e:40:3a:17:3d:cf:9e:1a:
d9:fa:0d:f9:b3:ad:b5:c2:ad:1b:de:ca:09:07:8f:15:eb:66:
49:8b:7f:0f:ba:9d:b8:5d:f6:76:42:1b:12:1c:0b:b1:2c:72:
47:9b:04:83:90:09:17:c3:bf:4c:4d:70:f6:a7:2c:b8:3b:ef:
12:31:e6:d0:82:07:f1:af:95:1c:30:57:37:ee:0f:8a:53:8b:
01:63:9b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:15:13 2025 by rpki-client