Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: 6HE2VOvWRaKD0kBe+lEJFisIzcZi5nNr+hO1vTIPDrw=
Subject key identifier: C7:1A:CD:52:7D:DD:D2:36:F9:91:33:2E:C4:08:11:A9:AA:EB:9F:CB
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 0197DC64B484D36742AA416E64A1EEF72214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 1417
Signing time: Sat 05 Jul 2025 21:01:16 +0000
Manifest this update: Sat 05 Jul 2025 21:01:16 +0000
Manifest next update: Sun 06 Jul 2025 21:01:16 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: B21MnU5XR9EDDv1+B51EIxGvxjLCeYO/PWbO1SXuujo=)
2: cIo_z6M4iUgSv6Rq-GH3zvKNA-E.roa (hash: uuzfvafFMiGynhqFG/8GblYil9CuUOOslH5kMNYMbzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 16:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:dc:64:b4:84:d3:67:42:aa:41:6e:64:a1:ee:f7:22:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Jul 5 21:01:16 2025 GMT
Not After : Jul 6 21:01:16 2025 GMT
Subject: CN=c71acd527dddd236f991332ec40811a9aaeb9fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:bc:4b:55:7b:bc:81:56:19:95:64:f3:a4:
9a:26:6a:5e:fb:e2:f0:53:2b:3a:8a:ba:ca:08:e8:
4a:7f:61:e9:b6:0f:e7:25:c7:a6:d5:64:a1:6d:4e:
09:25:3a:3f:62:c2:21:ac:0b:61:70:85:6d:ce:42:
93:f3:01:09:12:9e:29:39:8a:f0:7b:53:8c:c5:ec:
eb:57:cf:c5:dd:ab:18:f2:7d:be:e7:d4:c6:57:4c:
c0:0e:e4:ac:3f:5f:8f:84:43:c9:86:0f:83:d3:b4:
6d:b9:5a:7a:4e:c3:13:cf:35:53:ec:4b:74:d9:d3:
c7:96:78:b8:05:8e:bc:db:03:a4:00:e7:60:96:a1:
f9:3a:8d:ad:ad:28:ce:57:c2:d9:f5:33:14:cb:ac:
52:87:73:cf:87:1f:81:7c:cb:61:0e:01:f0:3e:2f:
a2:5d:da:eb:e1:2b:45:21:c5:6d:08:87:99:85:fa:
01:44:37:ba:14:0e:e4:37:43:a4:36:73:b0:3f:1f:
b6:f5:5e:1a:c0:6e:63:3c:47:4b:f6:b0:23:2f:30:
a9:78:55:a2:c5:e0:1e:a2:98:b2:26:0f:12:d8:88:
e4:e5:d2:e1:a9:e1:ec:a5:ad:8f:fc:62:b4:e7:82:
68:da:6f:9f:8a:e7:b4:9c:9c:7d:54:30:07:00:c5:
aa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1A:CD:52:7D:DD:D2:36:F9:91:33:2E:C4:08:11:A9:AA:EB:9F:CB
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d1:90:54:7a:72:4d:e0:86:18:6b:2f:cb:59:ae:f6:fa:bf:
42:88:05:2c:37:00:78:c3:dc:4a:2d:f8:5f:15:f8:91:44:ee:
5f:93:b5:66:c3:9f:2d:94:8b:1b:69:15:13:db:5f:3b:f7:b3:
21:68:f0:93:0d:5d:e7:38:bd:a7:0e:2d:61:3a:02:02:ed:66:
b7:1b:61:13:cb:f7:11:87:78:2c:67:06:20:d9:b3:78:2c:fb:
16:b9:31:5c:0d:f5:a9:5c:b1:8d:16:1a:59:e0:24:0e:75:e6:
ed:f9:53:5c:4c:d8:b4:f2:58:20:13:b2:a3:6c:92:db:3a:c9:
91:2d:a9:78:0e:ea:dd:0f:01:1a:f0:01:ef:f0:df:59:86:07:
30:c7:70:5a:54:b2:65:79:48:5a:f0:17:0b:4e:71:00:24:de:
03:14:07:3b:2f:64:92:4c:b4:f9:00:7f:4e:2d:3d:a5:73:64:
ed:7a:82:dc:70:ad:23:78:0d:3b:6c:06:39:f2:5f:5b:0f:75:
ba:44:d3:45:e4:66:dd:02:f6:3b:98:6c:13:af:74:10:98:27:
4d:47:50:1a:cd:96:db:5b:96:7b:a1:4c:99:f1:7d:f3:c7:72:
5a:1b:14:c4:9d:26:3c:28:50:53:66:8e:10:5b:a0:03:80:04:
ce:72:cc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 00:50:42 2025 by rpki-client