Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier: gD9gNXF0PnwtQQREV390Rd7EyLizqbTRhPz5RUgE9/k=
Subject key identifier: D7:BB:AF:46:FD:E9:77:5C:6C:F2:86:BB:1E:5A:E4:F3:49:06:BB:A9
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 0197B74534811BFA39C2BE4C2003C063D1FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number: 0438
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: 4Gjj4vT-vh5URW4bzUkYHjLyuzw.roa (hash: HxASWs91CGr7QHEsOom+lf/Gzup/Ba9MJEMnE5zFBkI=)
2: BVTw6vsjUxNoBbJObq9Iw2eDZYs.roa (hash: N/vjSEKCprvMbHrwkuq5WBhfoLp/HEmES1XrVOaxIlk=)
3: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: M3op1ePjAyM59OObo7qBHDxifNOf86SUvs9CF0pFi9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:34:81:1b:fa:39:c2:be:4c:20:03:c0:63:d1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=d7bbaf46fde9775c6cf286bb1e5ae4f34906bba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:ef:41:88:0a:42:8a:6f:d8:38:67:8a:ea:
4d:36:ae:6f:6b:15:e9:be:e6:45:b7:b1:fb:28:26:
bd:44:ca:23:cd:0f:2b:d4:99:2b:32:be:ff:8d:d0:
58:8a:ef:7b:fb:36:1b:d8:0b:b3:cd:94:e2:39:7c:
85:85:ff:68:e4:40:3e:27:f7:da:75:00:52:ea:34:
17:0e:80:01:14:e6:81:43:1f:99:8b:a7:11:8e:6f:
36:8e:3c:76:24:4e:93:b9:8d:20:d4:57:f9:59:31:
6d:ef:ea:b8:b4:26:89:a2:56:fe:59:fb:af:fd:33:
38:7e:a7:d6:b5:78:d0:a2:eb:ad:c1:3b:4b:5e:b3:
47:a3:71:6f:09:c0:97:9e:b6:02:dd:eb:fb:31:57:
64:6d:c5:9a:5a:25:9c:25:6a:c5:d7:a3:d2:55:b4:
be:e8:19:42:e2:50:2b:e0:61:5b:4d:8c:32:f6:22:
2b:aa:c9:9c:1b:42:74:d0:78:00:ed:0e:5f:71:fd:
3a:13:e5:c6:02:c0:ee:d3:ac:0a:86:4c:bf:8a:58:
eb:db:e4:6a:46:63:af:94:8d:3f:9d:ba:b1:22:7a:
28:72:cf:46:6c:ee:99:04:f9:46:0b:b5:34:05:50:
77:58:0b:43:5f:82:78:52:59:61:f3:da:2d:65:50:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BB:AF:46:FD:E9:77:5C:6C:F2:86:BB:1E:5A:E4:F3:49:06:BB:A9
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:4b:17:2b:df:12:56:83:1e:82:6f:da:9d:2e:58:85:eb:8e:
0e:9d:a2:38:52:50:74:ea:30:eb:a2:a8:0d:45:ff:3a:22:0d:
6a:13:13:a9:82:a5:c1:5c:4b:bb:49:64:14:73:99:db:de:e5:
25:4b:c3:a4:c8:f8:0b:7d:04:67:5e:92:6e:d7:92:82:17:fe:
fb:62:db:ed:fa:b0:ae:eb:d7:fe:11:38:75:58:27:ef:d6:50:
e6:58:93:14:e5:d3:be:16:d8:fa:1c:06:09:d0:09:36:b7:ba:
44:9b:4f:99:44:6f:e3:f6:2b:f5:f1:33:2c:b7:52:f4:47:af:
a8:14:a1:71:8e:f6:2c:fe:e5:26:f3:c6:c4:b7:56:06:5e:62:
8a:14:da:2c:74:52:6f:e1:69:52:23:c8:fc:9e:ff:72:9b:e0:
93:e5:94:06:1e:eb:a2:94:47:67:79:78:b9:c5:cd:04:1b:85:
b0:69:80:ce:d8:90:ea:00:0e:40:fc:91:d7:92:5b:bd:d4:fe:
3f:c0:93:fa:b6:5d:35:7e:b8:37:2e:ef:4c:33:9d:6b:c2:4c:
7b:70:56:95:bf:fa:f0:88:3c:b7:78:5a:35:6a:f1:c4:da:ed:
8a:09:8b:a2:07:12:ff:e2:71:3e:a2:2b:de:f4:ba:d2:8b:1f:
c0:ae:43:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:19:20 2025 by rpki-client