Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
File: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json)
Hash identifier: PRC0VXmXMq+gq0tAtW04KPwlCJ0rduP2H32yFsfnuCE=
Subject key identifier: F1:D4:9F:84:DB:B6:78:64:C3:18:63:CA:1F:13:62:B2:0E:FF:6E:37
Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944
Certificate serial: 0197DEC090660A33E713CF5D38AEAFF583F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
Manifest number: 1515
Signing time: Sun 06 Jul 2025 08:00:51 +0000
Manifest this update: Sun 06 Jul 2025 08:00:51 +0000
Manifest next update: Mon 07 Jul 2025 08:00:51 +0000
Files and hashes: 1: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: PJro2sfc0+wVp+iAkxVWvrz7CbhPDfnfWNA0JJ8gV5A=)
2: xkuriOxhH9L4osrYS3niaHQqN-k.roa (hash: K/CvJAstY6jQItpyuZ+KxEg8C5FknWg2U5h6YOrdb90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:de:c0:90:66:0a:33:e7:13:cf:5d:38:ae:af:f5:83:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944
Validity
Not Before: Jul 6 08:00:51 2025 GMT
Not After : Jul 7 08:00:51 2025 GMT
Subject: CN=f1d49f84dbb67864c31863ca1f1362b20eff6e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:7a:49:29:3d:a9:b2:e8:7c:cc:b0:f3:69:
b4:83:4e:e5:cd:5a:70:9a:3f:52:3a:6c:63:1a:2c:
a8:cd:c8:a9:14:2f:ae:6d:bc:00:ee:f6:be:e5:0a:
5f:9d:95:b2:71:76:68:cb:29:a6:08:53:5d:00:96:
1e:c3:52:c6:ce:c9:1b:b6:de:ec:0d:10:b9:e2:f3:
80:bf:f5:0b:d1:e3:99:6a:66:91:41:c0:fd:d1:b2:
ff:3e:09:2b:96:ba:9a:d5:60:49:15:17:df:e3:24:
c1:a5:91:24:72:e5:60:00:51:96:a0:fe:10:aa:f0:
c0:22:19:be:1b:0f:df:fc:47:2d:a0:80:c8:fd:ae:
b7:98:92:3e:1c:97:1f:2e:6f:86:61:61:6c:0e:53:
65:ed:9f:d4:5c:a9:7c:fd:23:87:db:6d:ab:92:f6:
5c:93:8b:01:23:c9:51:df:35:66:47:e4:53:33:e6:
a9:e9:60:39:fe:9f:0f:f1:41:6d:0c:ad:88:0d:d0:
94:f1:1a:61:c6:81:36:b9:bd:c6:73:24:f1:39:33:
7d:9e:20:4b:94:3d:70:22:e7:79:12:6d:7c:aa:bc:
cc:f6:3f:69:81:83:62:98:f0:b0:e9:95:71:bc:ad:
6a:6c:14:8c:d6:cb:c7:3e:3c:67:6a:d8:1b:70:0a:
f7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D4:9F:84:DB:B6:78:64:C3:18:63:CA:1F:13:62:B2:0E:FF:6E:37
X509v3 Authority Key Identifier:
keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:73:29:be:51:db:5e:13:57:f5:29:a8:e7:fb:40:f9:00:e2:
da:e1:05:0d:b2:2c:47:6b:44:08:da:16:04:4c:f2:70:f4:59:
83:8b:77:77:c6:e9:df:a7:a5:61:15:54:66:be:ef:07:c0:af:
6f:d7:9e:4e:66:52:7e:56:9f:71:7e:ec:d5:79:a9:f0:49:f1:
b9:8c:9a:ab:90:e9:9c:b0:ce:3e:1e:91:3c:78:22:6e:ae:f6:
b4:b8:3f:6a:c3:20:5b:58:2b:64:c6:97:57:29:03:6c:45:40:
28:b9:07:fc:04:3f:63:9b:03:af:17:15:c4:4f:6f:6e:7f:43:
df:c2:8b:10:e0:76:4f:47:cd:50:86:5a:c6:94:38:09:67:a8:
af:5a:3b:8a:5d:7c:96:b2:e7:f2:55:fb:4e:1e:b6:c7:60:02:
56:f5:72:89:3d:6f:8c:ca:85:b0:4a:09:b3:ea:8c:cb:00:9d:
6b:00:db:77:32:71:6a:79:95:d2:af:66:2d:e3:28:ce:d1:06:
fa:cc:19:e7:91:c4:ee:50:aa:26:c2:2b:0d:f9:91:34:44:8b:
3e:fd:64:8c:7d:58:0a:f5:20:06:27:aa:78:48:04:2f:a0:f9:
08:5b:cd:c9:c8:8d:bb:6f:12:91:41:33:41:bb:41:47:83:26:
97:0d:f7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 17:15:54 2025 by rpki-client