Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
File: Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft (raw, json)
Hash identifier: 2RRv/208iOPrTCKbjl2Fj0YtcVKd52CSAXr4fcnXvkM=
Subject key identifier: D6:DA:E4:12:63:40:02:E6:5B:3A:11:D7:64:1B:B8:7A:E9:E0:0D:DC
Authority key identifier: 43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
Certificate issuer: /CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Certificate serial: 01974D451F8ED78110DE2CA9A3EBC2E970AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
Manifest number: 045F
Signing time: Sun 08 Jun 2025 02:01:05 +0000
Manifest this update: Sun 08 Jun 2025 02:01:05 +0000
Manifest next update: Mon 09 Jun 2025 02:01:05 +0000
Files and hashes: 1: 3ZVx610sqQi3jR1aN5jm4CubkNI.roa (hash: ailedL7i/J97fdockeVNWVcnZPHz5O3htVX32ZMAjHU=)
2: Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl (hash: wHwcIUf6b52/b7uiTU31riYO/CI1ko3fIXYmkuhdgQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:1f:8e:d7:81:10:de:2c:a9:a3:eb:c2:e9:70:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Validity
Not Before: Jun 8 02:01:05 2025 GMT
Not After : Jun 9 02:01:05 2025 GMT
Subject: CN=d6dae412634002e65b3a11d7641bb87ae9e00ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:d1:e9:3f:52:2d:73:ca:8c:da:98:e7:0d:
aa:44:48:a9:ec:3e:54:a0:89:ec:0a:ff:33:10:b3:
83:cb:ba:98:2d:f4:16:4b:3c:72:96:0a:f6:f9:ea:
79:df:03:f0:4c:a0:3c:bd:1a:c5:82:89:5c:dc:26:
24:a8:38:ff:e9:35:7c:67:86:8a:e8:77:e8:07:dd:
da:3f:42:3f:cb:d0:83:0b:74:54:35:da:a5:9e:95:
9f:d0:90:89:a2:5a:9a:20:3d:53:3a:65:a8:7b:b4:
9e:fc:b2:6b:56:64:c2:c5:08:58:a4:ee:8d:92:a9:
40:ea:6a:0a:e8:22:f6:b7:f0:b6:be:31:fe:a6:e7:
3b:2b:d4:96:c5:12:3a:cf:f6:a0:d8:e6:42:3a:b8:
29:a4:aa:5a:0e:e9:fa:9d:58:87:c3:d0:e6:22:b2:
18:42:00:bc:8e:d5:53:3d:8e:96:17:86:c4:dc:d3:
ae:5d:e3:bd:91:1b:1c:72:52:a0:2b:70:14:c8:e8:
ec:08:0e:9a:c3:06:ae:aa:b1:b0:35:22:ce:c5:d6:
75:84:b6:97:53:e0:d9:f9:8d:78:04:d3:8a:b2:c5:
b0:e1:60:69:a4:44:d5:9d:82:0d:e3:51:c4:dc:4f:
d4:58:fd:ef:cf:dd:b3:11:29:7b:3a:19:06:ad:95:
c7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DA:E4:12:63:40:02:E6:5B:3A:11:D7:64:1B:B8:7A:E9:E0:0D:DC
X509v3 Authority Key Identifier:
keyid:43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:40:1d:5e:14:de:6c:96:ae:1a:30:26:29:b1:5a:4b:38:91:
9c:9d:1f:b9:98:f4:39:f2:3d:d0:95:87:e4:9e:6d:61:0b:08:
aa:63:af:07:30:81:5f:43:6f:0a:dd:96:04:c8:1e:30:ad:82:
7a:20:53:65:29:c6:46:32:0d:c3:46:0d:ec:d3:5a:52:08:1e:
55:6d:dd:1f:b6:85:96:0e:87:88:6e:f8:02:f2:b6:3a:3b:8b:
4e:ce:0a:c9:b6:40:7c:91:bf:05:97:49:ee:ee:e4:8f:e0:ce:
99:f7:38:00:92:92:1c:7a:3f:50:f3:7a:d4:37:76:54:d5:24:
66:80:06:4c:45:d3:c6:e7:f0:4d:f5:d1:bf:5f:19:14:56:b7:
9a:1d:8e:9c:5e:10:e1:bf:20:f6:77:dc:0f:b0:c6:17:e2:94:
bc:35:fa:73:a4:58:66:15:15:8c:c0:73:82:13:d9:a2:83:f4:
4f:37:63:f4:43:ed:99:d7:26:db:b5:a9:a5:f0:32:4a:6b:d0:
a6:55:58:ad:0c:14:f8:83:9f:d7:a7:ad:d3:29:ef:b6:07:e9:
44:c1:be:41:94:cb:89:26:d4:fa:f9:51:76:e0:60:38:c8:b5:
9b:47:fb:6a:99:4f:ea:f1:b7:db:df:ff:41:99:22:72:fe:1b:
18:9b:77:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:39:58 2025 by rpki-client