Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
File: qsU0mf8g8DXLixwKqbd8PX0ol2w.mft (raw, json)
Hash identifier: RwEvLyRO1pd93m4Sxeo0S0JQWps3MSnLkqwyx28ja64=
Subject key identifier: 9F:48:BB:76:23:E8:CD:1E:37:71:77:C8:A2:63:13:B9:6A:79:4B:4B
Authority key identifier: AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
Certificate issuer: /CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Certificate serial: 0197499F5785C50A21DBA85A8EE2FDF2AC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 09:01:08 +0000
Manifest this update: Sat 07 Jun 2025 09:01:08 +0000
Manifest next update: Sun 08 Jun 2025 09:01:08 +0000
Files and hashes: 1: 3RChXaGg2mHXT_oEdTM0SpY6jhc.roa (hash: PV09Dkm12mpf6AJ4aFGi0VOS8JddqTI6zuA00aTTnSY=)
2: qsU0mf8g8DXLixwKqbd8PX0ol2w.crl (hash: gXK320Q3og63C11usx2FI0+EjGvQEMI5n8D9R/Fg7vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:57:85:c5:0a:21:db:a8:5a:8e:e2:fd:f2:ac:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Validity
Not Before: Jun 7 09:01:08 2025 GMT
Not After : Jun 8 09:01:08 2025 GMT
Subject: CN=9f48bb7623e8cd1e377177c8a26313b96a794b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c7:a7:69:5c:d2:0d:90:41:71:c8:93:bf:09:
36:be:1a:03:4f:56:e8:8f:49:89:bb:80:45:66:d1:
a3:59:04:72:28:47:b8:52:be:16:16:83:29:cb:c0:
2b:aa:69:c8:29:bb:bf:d2:e1:3a:35:c7:12:65:93:
9b:74:b5:0e:d2:91:3e:50:6a:e3:63:a2:ba:bc:6f:
3c:b1:f3:f7:e6:50:99:aa:ba:56:0c:c0:70:a2:95:
b7:1d:75:a1:46:a1:fb:3b:22:13:af:81:be:fa:d0:
9f:d6:56:53:a2:86:c3:de:e8:1a:8a:11:b0:71:85:
e9:9c:bf:7a:fd:6a:8e:17:be:e5:3c:89:88:5c:a8:
4c:51:a8:ec:a8:30:69:e3:e2:f2:b5:bd:24:9b:02:
a6:49:22:98:b1:d0:b4:54:65:ee:6e:dd:4d:80:23:
24:c3:e1:2a:d9:08:b8:53:76:02:0c:5f:88:05:cd:
8f:b3:ad:8c:9e:6b:fa:d8:df:f1:a2:f5:b0:a3:6f:
7c:22:54:da:b8:65:f4:b9:38:93:8e:fd:38:cf:51:
76:01:dc:24:be:0c:9e:88:9e:c4:f8:2e:60:57:5f:
be:2d:a5:55:9f:ef:58:07:0d:a4:ff:2c:48:57:ac:
93:9f:56:ae:97:1e:da:7e:d4:a8:21:50:a0:e6:f0:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:48:BB:76:23:E8:CD:1E:37:71:77:C8:A2:63:13:B9:6A:79:4B:4B
X509v3 Authority Key Identifier:
keyid:AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a1:8a:33:45:b3:d8:b0:1d:d9:d4:fa:2a:37:c7:a3:8b:e0:
e1:7d:b7:51:0e:6c:08:1a:71:e6:d7:9a:81:1c:1f:97:0b:4b:
27:23:3b:fd:34:d5:d6:6f:07:cd:6d:05:81:84:42:a9:30:b3:
7b:72:ea:cf:28:17:17:1e:82:c3:1c:b9:48:2c:65:c5:c1:fe:
86:33:6a:fe:04:42:99:35:6c:25:8f:dd:ab:ad:fb:80:d1:f3:
1c:6e:6b:f3:b2:0f:d5:6b:9e:0d:eb:a7:4b:8b:02:9c:50:0b:
2a:d0:d3:9e:cb:2d:59:23:8e:1a:70:67:d5:32:64:ed:b9:fc:
4d:c6:86:39:d9:7b:81:a9:24:9a:e1:03:9d:6c:27:6b:d4:b8:
17:d9:35:70:08:bd:cf:17:22:5d:62:5d:11:fa:78:72:c1:19:
04:95:24:25:9a:b7:1f:c3:79:b8:b7:e2:3c:39:5b:3d:ef:e2:
47:89:d1:57:da:9e:34:1c:73:0f:98:ee:f9:43:5e:f3:72:d8:
6f:7c:e0:51:b9:db:de:de:5b:6b:e1:91:83:40:ef:90:21:18:
44:27:a9:a5:29:52:41:db:33:3a:b0:e7:36:46:3b:fe:c8:1e:
ba:34:0f:f7:99:d2:53:26:74:fa:b9:db:45:86:7a:6d:28:6f:
ca:a2:f5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:52:28 2025 by rpki-client