Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: /FUwU9rbguIFDSM8oqGm9I3KF9wuK5W1+fW8BZhqC3I=
Subject key identifier: F6:AB:7C:F5:2E:94:73:46:B0:FC:0D:0D:C3:D2:CF:BB:A6:B4:3A:46
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 0197B7EAA2E8A1EF7626F9CAAD606D624B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 09B1
Signing time: Sat 28 Jun 2025 19:01:36 +0000
Manifest this update: Sat 28 Jun 2025 19:01:36 +0000
Manifest next update: Sun 29 Jun 2025 19:01:36 +0000
Files and hashes: 1: Op1gh0wFko9724Ahwm8zyJJnCx8.roa (hash: xGR1u5ClwHU4q3WoVp5eWaY/nYx57WKoSQo4c6w7W+8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: YBypa0jSsTZUg8mQ0Ze1Nf9MZxsSNwaJ5wLr4RKgX3o=)
3: jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa (hash: Ci3+1/Zt1KX21Iibq86D4q3nL8Q6qZ17OnVkiVZ8OJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a2:e8:a1:ef:76:26:f9:ca:ad:60:6d:62:4b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Jun 28 19:01:36 2025 GMT
Not After : Jun 29 19:01:36 2025 GMT
Subject: CN=f6ab7cf52e947346b0fc0d0dc3d2cfbba6b43a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:eb:2d:ab:70:82:88:6f:e0:f1:0b:db:82:
5d:ab:0f:99:35:0c:17:17:f3:c7:19:eb:6d:9a:6b:
f8:c2:d3:a9:89:a2:6a:0b:db:33:1b:d4:3a:7f:60:
ac:32:ec:a8:64:1b:d3:77:0b:ce:11:19:d7:ad:69:
c2:af:15:0f:42:b1:94:3d:a0:29:c3:65:a2:fa:3a:
1b:71:60:21:e7:d4:0b:3b:21:a4:19:64:b9:38:ae:
60:be:97:d2:7d:8f:6b:3f:3a:43:36:db:64:ae:4d:
fd:bd:16:0a:6a:d5:dd:65:66:7a:b3:9d:7f:16:ff:
82:b9:42:8b:f6:d8:95:2f:6e:3e:4e:fc:6f:8b:15:
4c:bf:04:b2:a3:5c:8e:9c:51:53:f8:15:8a:a5:a9:
a2:0d:f9:fb:90:e8:57:cf:44:a1:5d:79:1e:78:14:
44:13:56:eb:51:47:3e:91:b7:94:2c:d9:64:65:79:
ab:20:d3:3a:2d:0f:02:4b:08:a3:81:2c:23:98:f9:
bf:11:64:a9:eb:0e:9e:29:dd:09:d7:d4:84:a2:4c:
3f:1b:fa:57:f7:66:ce:8b:05:82:21:b5:48:7d:c7:
b5:bd:1c:e8:f0:6e:31:4a:14:57:37:07:f0:d4:cf:
73:86:d1:a0:09:30:06:d8:0e:70:2d:9f:c2:d6:98:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AB:7C:F5:2E:94:73:46:B0:FC:0D:0D:C3:D2:CF:BB:A6:B4:3A:46
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:02:b1:59:94:3a:fa:cd:f6:2e:fe:fa:83:3f:fc:b0:72:56:
b4:ee:d4:87:24:87:75:6d:47:24:94:0d:7a:6b:e7:e8:ae:1a:
71:68:e5:68:c8:41:7d:8f:ac:f5:2f:8e:e1:7e:f0:27:df:b2:
76:36:0e:0d:90:43:c0:f0:0f:c3:06:31:32:42:14:ca:50:85:
bb:d2:1e:00:a6:d9:53:78:82:a2:d7:8e:8f:a9:b6:72:21:2a:
80:b9:ec:f1:1b:a0:e9:19:82:78:b2:0c:2d:41:35:e7:6d:4a:
4e:48:98:5e:e6:cf:5e:be:19:f6:04:41:97:8e:c2:22:27:d6:
a6:c4:7e:e4:a0:f6:4a:c7:2d:b8:06:15:d8:1c:f2:0e:16:df:
14:4e:74:1f:e5:0c:09:48:62:44:99:d0:b0:89:8c:ee:29:8e:
5e:b0:e8:66:1c:66:92:d5:4f:43:71:af:8e:92:5e:78:9d:47:
d6:82:ba:c4:cd:d7:03:88:36:7e:98:0f:60:11:9e:0e:0c:3b:
c7:e1:51:b9:47:8a:dc:e0:d0:6f:a3:87:c7:20:a2:0d:7a:52:
f8:5d:e7:a2:13:90:17:ca:12:fc:b2:c2:cd:6c:b5:19:1a:55:
ab:06:61:5e:f6:b7:63:6a:fc:76:3d:7e:23:bd:1c:a7:03:fe:
50:25:7e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:32 2025 by rpki-client