Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
File: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft (raw, json)
Hash identifier: T6Vxrw35qvp10tAdN3DWFmkQeLnBYWY/A8Nllye078E=
Subject key identifier: 25:68:AF:74:3E:B3:11:32:41:3C:F7:8F:DC:DF:F6:2E:47:AF:08:C7
Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
Certificate issuer: /CN=ab91d5262561a9dd713dfa39163dec849fee4636
Certificate serial: 0197481E1160F597FC3ED8908571549ADD46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 02:00:19 +0000
Manifest this update: Sat 07 Jun 2025 02:00:19 +0000
Manifest next update: Sun 08 Jun 2025 02:00:19 +0000
Files and hashes: 1: 90qSTJbYoJhXhjJi4rtP_ZNlhJU.roa (hash: OSVSFtU4v1yfm+DOAOwZeidgdh2EY4LpmP/NOkKDmkg=)
2: JErXjXvKorGj9aJu1omld6wdpcs.roa (hash: kiyLNY+zTwPwB8AkdrotNIs7qiykrRwfggYUByu+C28=)
3: UscJiSEPN7-PYnIHOgT8LNjrioo.roa (hash: RVU014DpCH3z/tdVgprON9hggZk6wMumDABO2h4+Fx0=)
4: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl (hash: 3zoJWnS2gf5g1Tcn0/TLQTQTDy73URSDvAoLNMVh0fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:11:60:f5:97:fc:3e:d8:90:85:71:54:9a:dd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636
Validity
Not Before: Jun 7 02:00:19 2025 GMT
Not After : Jun 8 02:00:19 2025 GMT
Subject: CN=2568af743eb31132413cf78fdcdff62e47af08c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:2d:d6:19:05:66:89:b1:eb:ce:09:9e:85:
a4:01:87:da:b2:f6:ce:62:cb:7c:df:39:ca:29:45:
36:f1:94:3f:20:fb:c2:a0:4b:af:15:81:01:89:f9:
7a:7f:49:4f:3f:ac:1b:72:cd:75:1c:a5:b7:64:c3:
16:56:20:ca:42:f4:5b:f0:53:c4:e3:1e:1f:03:a2:
b8:f8:37:a4:cd:ee:e0:de:18:50:66:1b:1b:1b:04:
07:aa:e6:88:28:5f:8b:97:47:5f:55:c2:74:6c:ca:
6e:11:f1:2d:5e:80:e5:de:45:8f:e1:c0:31:67:0a:
d8:ac:b1:c6:7f:c7:72:f1:b6:f0:94:86:b5:90:7a:
d0:43:23:38:d4:db:02:33:a3:44:60:7c:83:81:90:
41:39:3a:f3:8d:9e:68:63:63:99:3f:09:50:99:d4:
63:14:d0:8b:41:9f:bc:66:9d:79:4e:f5:6c:cf:da:
aa:59:a8:0e:25:94:72:35:dc:ee:b5:bc:4a:ca:ff:
74:db:22:1a:94:58:77:8e:0c:f4:79:da:43:79:b8:
0e:6b:2f:56:be:f3:0c:a8:1a:d5:61:5d:34:d3:19:
1f:ae:6e:b9:a7:9c:23:e7:5a:44:44:ca:e1:17:19:
90:fd:1c:9b:a6:21:bf:26:66:2e:02:24:90:e3:be:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:68:AF:74:3E:B3:11:32:41:3C:F7:8F:DC:DF:F6:2E:47:AF:08:C7
X509v3 Authority Key Identifier:
keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:44:6a:16:04:2a:6a:bd:3e:aa:d0:97:af:fb:f9:b8:6c:cd:
ca:17:57:1d:11:9b:12:b4:24:f7:c7:b0:48:1d:c3:b6:6c:f7:
9e:54:76:6b:9b:18:c3:ec:be:c8:24:6f:b2:55:c6:68:04:f6:
83:66:ba:69:a6:3a:11:79:17:68:4c:31:60:82:bf:c8:47:b7:
24:63:a7:99:d9:2b:6b:36:4f:0e:66:b9:72:f1:e1:ce:11:58:
93:92:6d:88:99:09:17:72:e4:fb:b8:b4:60:e3:c8:d8:ce:c7:
db:2c:0a:70:ec:41:38:e2:1d:a6:e0:b3:1c:94:04:a0:f4:6c:
72:05:3f:5f:50:b3:bd:26:6f:55:0b:4a:65:6b:53:3b:73:19:
a7:0b:35:f1:f9:d2:35:d8:c4:c8:0f:35:f4:80:00:96:5b:b1:
48:f7:21:c4:6c:c2:8e:af:3e:21:47:6f:4c:7f:02:8a:99:2d:
2e:27:e2:c2:65:c9:ec:ec:5a:22:90:5a:f0:69:d5:a3:07:00:
ae:5c:23:68:c5:2e:37:e5:b1:b7:28:54:b2:fd:83:1c:30:5b:
4a:68:53:15:a1:f2:2d:ed:7f:fa:5e:bf:0e:e4:ac:c4:1b:16:
a3:7c:01:6f:b7:7d:f8:7b:cd:f4:6e:87:6a:dd:31:c6:5f:33:
ab:85:67:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:23:08 2025 by rpki-client