Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
File: QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json)
Hash identifier: zIcScP/45z9uCQ7MTSWwiUiisecm/79oM0sMigxfB20=
Subject key identifier: 36:7F:FE:46:7E:83:EA:19:CD:5E:2B:2A:34:42:11:30:67:84:0B:0A
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial: 01974D0D821E3E79D4CF2CBCA4F09C938825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 01:00:20 +0000
Manifest this update: Sun 08 Jun 2025 01:00:20 +0000
Manifest next update: Mon 09 Jun 2025 01:00:20 +0000
Files and hashes: 1: IAPxu4HRLcUJCMnInPlbG2uB4Mo.roa (hash: UkwEFu/9WcHNWqkhhJVrUVhhQx3PtWZnB4zT5tjJmec=)
2: QWx1xOK0awW_LJrNTr9v52IOagA.roa (hash: QnthGSe6eJY0HRNxNIJ5MC5no9EL0aJAnRwmFNspHlA=)
3: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: w29GHW7Yv8/rnB9EyEq2AOEDXWz2O+7xvNPRpgVuOmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:82:1e:3e:79:d4:cf:2c:bc:a4:f0:9c:93:88:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Validity
Not Before: Jun 8 01:00:20 2025 GMT
Not After : Jun 9 01:00:20 2025 GMT
Subject: CN=367ffe467e83ea19cd5e2b2a3442113067840b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d0:3c:d9:9c:59:d2:8a:af:d2:15:c6:6c:92:
46:aa:ca:ce:4f:92:70:25:d0:28:39:cc:c0:3d:d0:
0a:ab:11:6b:bf:5e:78:86:a8:2a:77:aa:bc:d9:5d:
9e:79:da:9b:fe:7b:29:b1:7c:8d:3f:34:84:0c:9d:
90:4e:4a:63:61:be:f5:3e:b3:ce:af:96:f6:95:10:
03:d7:83:45:90:6e:49:1b:c7:fc:b7:5c:08:4e:dc:
c5:da:f2:1f:a7:7e:96:3c:75:8e:7e:2e:58:48:f0:
e9:fa:3b:76:6c:b8:79:5b:9e:1c:10:ae:27:f7:c0:
21:5d:1e:e9:b7:82:2c:e5:ef:7b:ba:a5:4d:03:6a:
e9:2c:1c:9c:1f:58:48:51:09:cd:21:23:f3:d6:8d:
c5:5e:8c:d0:0c:f7:13:83:70:40:2f:e7:16:c7:fe:
46:27:74:69:2c:8d:ff:99:44:d5:c0:2f:01:ce:e8:
e1:3d:68:de:a6:6a:b1:9d:86:60:8e:ef:d8:0c:56:
19:67:bc:ea:cc:be:af:dc:b9:df:16:f1:fd:da:e2:
61:1a:68:02:59:1f:fe:12:4d:36:da:6b:55:7e:cb:
75:ba:73:14:2e:c3:04:af:8a:be:65:75:73:2d:1e:
f3:18:4c:f5:b1:4e:35:f0:38:b6:e6:d3:70:bb:1d:
87:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7F:FE:46:7E:83:EA:19:CD:5E:2B:2A:34:42:11:30:67:84:0B:0A
X509v3 Authority Key Identifier:
keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8b:de:98:e8:af:da:e9:7d:37:73:55:60:13:4e:f2:1d:5a:
b5:57:b3:83:4d:fb:2d:a5:75:a4:b2:af:96:3b:3b:04:7c:88:
96:8f:98:4a:b7:36:0a:fc:77:22:35:6e:27:40:e6:3d:05:65:
d5:42:ba:d1:2f:d8:90:5b:3b:05:a0:1c:46:d8:40:7a:22:a9:
3c:40:5a:63:4e:c6:61:ac:f9:15:09:02:65:e9:a9:14:a2:27:
07:7d:61:28:32:ba:35:7f:08:17:04:55:a1:32:4e:c2:02:4f:
72:55:ae:3c:56:1f:c7:5c:19:38:8a:55:a6:a3:07:de:2e:95:
c3:af:48:b1:95:02:23:dc:8a:33:71:75:cb:12:d5:c5:86:19:
f9:ac:8e:85:32:6e:4f:de:39:c0:0e:91:75:c5:94:37:43:ec:
99:c7:d9:68:34:68:76:63:40:fe:20:d4:f3:49:9a:ba:8d:0e:
2e:7d:d0:70:d0:1a:d3:83:26:97:6e:34:d0:7e:bf:bf:fa:64:
4f:23:6e:49:46:2a:d8:0e:2a:37:fa:de:be:0a:2d:73:e0:0a:
aa:00:4b:c1:d8:63:be:a6:38:8f:33:0f:d8:36:d3:b8:ca:2f:
1b:61:56:c2:84:c5:87:fc:c7:fd:f2:4d:86:56:43:da:72:f8:
1c:76:ff:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:32:48 2025 by rpki-client