Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: wQcGZHIg5X0LFL50sl+hWITeN2VBPlCdJsh54Zcvsco=
Subject key identifier: 03:49:55:98:EC:7B:EA:A2:13:60:74:44:54:5D:5B:C8:B4:8B:C1:26
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 0197B6A18942DB7D346C7736D0BB3ADD7B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 045E
Signing time: Sat 28 Jun 2025 13:02:09 +0000
Manifest this update: Sat 28 Jun 2025 13:02:09 +0000
Manifest next update: Sun 29 Jun 2025 13:02:09 +0000
Files and hashes: 1: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: VbiMJeYHtJo7y00iM9D/7vrjMeAw8jbpwBaONOcKAMU=)
2: YjwHZ-U8mcXCH0aU6JQJG4PEKkA.roa (hash: AnaRhDa+1cCeJd4R7WSfA8EHeNFUa2CX4p8vAAGKzHM=)
3: ZSjK1k03bVh7IszUUplOg1a3fhc.roa (hash: ur9lsl4V/e4ObtEPnWIBtt1dkjYzJgol0eBWTC8If5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:89:42:db:7d:34:6c:77:36:d0:bb:3a:dd:7b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Jun 28 13:02:09 2025 GMT
Not After : Jun 29 13:02:09 2025 GMT
Subject: CN=03495598ec7beaa213607444545d5bc8b48bc126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:2f:84:5f:95:b6:f2:66:0b:cf:ca:40:2a:
cc:13:8a:57:24:b2:98:27:7d:8f:75:76:ce:c3:03:
50:e4:6b:cf:39:70:7a:57:c2:71:ab:8e:46:85:af:
c2:f9:1e:99:af:d6:d0:48:b9:64:1a:e7:80:93:61:
3f:6b:40:5b:f4:f1:be:40:c3:dd:e5:b6:5a:fb:3f:
2f:5e:d7:4c:a6:22:b6:f6:d3:14:ff:03:5e:58:f0:
b8:b1:a0:ff:6a:59:d9:92:7b:09:d6:44:ae:30:25:
0f:8d:77:4e:04:ad:85:1d:92:46:25:0a:97:38:62:
81:32:1a:0e:c8:b8:49:30:29:48:42:ab:48:71:83:
80:99:e0:d7:43:09:3c:1e:42:6d:7c:76:21:3d:af:
2b:b0:ee:63:08:8d:94:56:9d:27:f1:84:9b:6f:7d:
8e:85:d2:75:93:74:5d:26:89:54:60:87:54:77:38:
a8:d1:a4:6b:25:9d:6b:44:58:bf:0b:8b:68:da:51:
71:1b:cf:28:15:59:77:0b:a0:fc:62:8a:3f:b1:dc:
f9:ca:1f:8f:90:96:e0:37:a4:07:32:24:88:b0:1b:
ba:18:a6:f8:66:23:5e:0f:4c:0d:fb:c1:15:e8:d9:
3d:55:d5:1b:e0:73:3f:b0:51:4e:d5:73:71:d8:0c:
6a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:49:55:98:EC:7B:EA:A2:13:60:74:44:54:5D:5B:C8:B4:8B:C1:26
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:74:ae:5c:ea:63:06:6e:8c:64:f3:9a:6a:ec:0f:85:4c:26:
0a:a8:fb:03:df:7f:88:40:77:d0:f9:d4:17:59:42:b6:a6:52:
e3:18:e9:48:2b:eb:42:50:32:81:0f:52:b1:d1:fb:54:1c:5d:
f0:49:fe:47:a6:41:5c:06:e1:68:79:d8:ad:d6:97:93:1c:45:
19:f4:a9:63:2a:65:bc:1b:bd:0d:cd:60:bc:6c:79:4f:5d:8a:
d0:16:4a:87:d8:d2:46:1c:35:b0:ca:5f:35:14:35:9a:5e:6e:
3d:c4:cf:19:89:87:6b:6a:5d:83:e2:3b:16:97:69:e6:6e:d5:
5c:b7:b2:92:86:1f:28:8a:42:7b:7b:3f:a8:81:2e:b2:93:fb:
6b:7d:b0:cc:0f:0b:07:c6:f4:ee:da:f7:88:16:07:3a:f5:37:
39:a2:c9:24:0b:d9:66:42:6c:c3:ef:99:1f:a3:fd:18:39:d1:
bc:cd:85:92:c2:b3:96:8f:6f:ab:47:46:09:53:41:be:64:b9:
2f:b2:e6:f8:34:82:f7:c2:11:69:bd:b6:cb:a5:b5:3c:68:6f:
25:85:31:db:99:4c:f4:e0:13:3b:a3:52:cc:69:7b:70:ab:b0:
3d:b5:06:a2:25:73:1d:f9:92:36:4e:4f:32:25:e3:81:1e:2f:
43:fc:4c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:22 2025 by rpki-client