Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: famvPd6uGszm1ApSBWl1Vzjb4MmdtCQu/HM9LFmH8y8=
Subject key identifier: CF:09:53:A0:D8:8D:97:49:41:79:05:45:0A:56:48:F1:94:28:3C:42
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 0197470B74E47CD45067F537200D201389E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 1580
Signing time: Fri 06 Jun 2025 21:00:22 +0000
Manifest this update: Fri 06 Jun 2025 21:00:22 +0000
Manifest next update: Sat 07 Jun 2025 21:00:22 +0000
Files and hashes: 1: F_vaOKUje6wVSmmdNWKQj90pJEs.roa (hash: lSDHkW2GLzRQJdNUjIFPaHP5/gFVElG0iEqr3Re75Vs=)
2: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: Luyf+9kIF+C9oB66PJ+j7sFb3Huig4FvabFw7fC8Das=)
3: mJRbgDWTWOF5d-waA4kjPdUwfKM.roa (hash: Cjg8Drs7NcYUITHcRSLo1PVz8MlOvWaOvbO+s0BbSe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:74:e4:7c:d4:50:67:f5:37:20:0d:20:13:89:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Jun 6 21:00:22 2025 GMT
Not After : Jun 7 21:00:22 2025 GMT
Subject: CN=cf0953a0d88d9749417905450a5648f194283c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1d:de:da:6d:f4:11:93:61:b8:42:75:40:ec:
c7:d3:0c:18:3c:1c:5c:53:32:43:54:9a:3e:ed:44:
d0:7e:79:e7:2e:f1:b5:57:35:c8:48:9c:a8:0f:bf:
2e:d8:f0:d6:b3:c3:38:66:5b:bd:e5:c0:a7:2b:d3:
42:f2:69:ae:3d:ec:96:d2:61:17:70:2c:e8:9c:03:
99:b2:c5:a2:61:f7:18:06:37:64:03:72:9c:7e:4c:
ff:41:98:df:aa:8d:03:13:cf:42:de:0b:e6:9c:04:
e7:2c:96:ed:ce:35:d2:86:cd:97:fb:69:0e:3c:34:
04:33:78:89:fd:ac:6b:00:6c:48:45:a7:53:64:00:
d1:33:df:f7:a2:c7:e7:2b:61:5e:55:52:66:a1:39:
4d:f6:a9:6f:a7:bd:33:e8:0a:f7:3a:c6:b2:6a:66:
df:72:8c:d3:54:d0:7b:fb:d9:1a:88:c2:29:e5:23:
aa:33:83:3b:af:05:24:97:03:18:25:42:49:b2:41:
7b:4e:22:e3:6d:13:d4:a1:ca:af:ad:ad:f4:77:a0:
99:0e:73:46:2e:30:cd:c0:16:09:70:ae:3e:2a:4f:
10:35:14:33:ad:cc:7f:19:c6:1a:79:6a:35:44:eb:
4d:1d:7d:d4:bd:02:46:71:34:af:01:92:3b:dd:56:
d5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:09:53:A0:D8:8D:97:49:41:79:05:45:0A:56:48:F1:94:28:3C:42
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bc:65:76:a0:fa:da:6e:68:4d:7f:c5:87:12:34:e3:be:5e:
af:2e:34:6b:55:ee:c5:ca:f4:03:42:0b:d7:ff:c3:75:4a:01:
1c:46:ec:07:ac:64:51:9b:fe:5a:67:f2:1d:2c:6e:52:93:33:
99:47:ce:16:e5:0f:a3:cc:e6:48:ec:79:2c:95:48:05:76:36:
6f:8e:8e:3a:b3:69:d0:f5:2f:81:22:b6:d5:e2:5c:2a:8e:7b:
f4:b4:3e:01:bb:6c:7f:42:a2:33:50:69:f7:55:8e:1b:f2:8c:
14:a7:bf:b2:0f:77:12:27:0c:9f:9c:42:84:eb:ec:c3:48:13:
bf:a8:18:17:63:1b:9e:e9:80:c7:f4:27:eb:aa:b3:5f:f3:d8:
47:4d:44:33:25:14:54:37:d5:52:8f:7f:a8:a7:2d:3c:6d:a6:
de:a9:27:00:21:a1:f7:98:ed:1b:08:7c:48:96:f0:e8:18:38:
c2:19:cd:00:dd:8c:d2:2d:19:b2:c7:8e:b8:31:e2:d8:99:2a:
7a:f0:f7:b1:82:cc:82:c3:d3:2f:0f:cb:cd:ab:67:6f:38:d9:
41:5b:ba:3a:82:30:50:64:0d:af:9b:55:0c:00:e8:4c:5d:71:
2a:3e:7c:19:69:c8:67:e1:26:68:b0:78:7b:91:70:56:09:1f:
4e:ac:14:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:47:54 2025 by rpki-client