Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
File: QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft (raw, json)
Hash identifier: VWg+DPVGxIMvu5xWg8MQ8NUaVaKFinLAw9EEFSDHqyM=
Subject key identifier: B9:C8:CC:0E:DF:8A:EC:03:41:F3:E3:C6:16:7F:69:D9:C9:13:48:35
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Certificate issuer: /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial: 0197B5FBF7B605685EEAD470F2EBF9960EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
Manifest number: 1502
Signing time: Sat 28 Jun 2025 10:01:18 +0000
Manifest this update: Sat 28 Jun 2025 10:01:18 +0000
Manifest next update: Sun 29 Jun 2025 10:01:18 +0000
Files and hashes: 1: OEwb1lDHunikfNaNODhoAnbiQCo.roa (hash: wWLLrhKTcf6mPU2Bqqwm1puc/7JHEkcQ5M3ZaPHxpgg=)
2: QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl (hash: bWrRx0cR3Qnz2qV4Ito2MECS6s0nrwUhof9snv6gF4c=)
3: vn8Vk2vP0QzgnWs8YePhZCt8-Lc.roa (hash: NAYB0xo+Xhi57/QawXnfFqpG2CzRv0IH2N4vezreDYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:f7:b6:05:68:5e:ea:d4:70:f2:eb:f9:96:0e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
Validity
Not Before: Jun 28 10:01:18 2025 GMT
Not After : Jun 29 10:01:18 2025 GMT
Subject: CN=b9c8cc0edf8aec0341f3e3c6167f69d9c9134835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:d4:44:ba:97:57:c7:f8:c2:e9:b3:95:5b:
11:08:33:d8:72:0f:72:31:e6:97:0e:da:93:c0:69:
05:0c:35:fd:08:17:37:82:b0:73:16:f0:18:07:ac:
79:1d:d6:75:e2:f0:f7:60:80:d2:d8:fc:e4:b3:8a:
98:29:96:01:62:8e:9d:6a:be:d4:02:a5:a1:ef:e1:
c7:04:52:ae:fd:bd:1a:00:8e:19:a7:2e:f9:d6:4d:
47:61:34:e6:0e:63:6c:ce:2c:18:11:8c:75:42:a0:
5e:56:cf:01:d0:48:12:63:6c:f9:d7:18:69:a1:52:
62:7a:5a:60:ec:8e:19:00:32:a9:a6:85:4d:0d:bc:
47:06:99:85:01:b1:28:7b:0c:c9:f2:7b:46:5c:9a:
b7:92:12:43:a1:92:01:b1:8c:c9:1c:b1:dd:d8:70:
4c:92:5f:15:df:c3:73:6c:ea:88:c9:e6:1b:be:8d:
fd:0a:5e:83:ab:fa:ea:c2:9f:c2:9e:d9:b7:70:e1:
ad:d6:3d:f4:3e:5b:32:38:57:93:1a:95:49:59:37:
e9:9c:69:b9:ae:4f:f2:b3:01:1b:ec:0f:52:4c:93:
5f:a4:d1:89:3d:05:1c:db:2e:ba:d2:b2:7f:af:c2:
8a:de:3f:ee:15:4f:3c:69:2f:68:51:fa:31:ad:2f:
59:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C8:CC:0E:DF:8A:EC:03:41:F3:E3:C6:16:7F:69:D9:C9:13:48:35
X509v3 Authority Key Identifier:
keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fd:ce:a3:41:d0:54:72:8b:e2:da:c5:d7:28:cf:5f:f6:d2:
38:8a:00:f1:36:5b:66:f7:fc:2f:bb:df:da:54:8a:26:05:bc:
e3:ed:c4:6a:0f:b0:52:b6:24:b4:e2:1c:80:93:48:c7:25:c7:
78:36:f6:08:0a:2f:b8:43:8a:2e:53:ec:9e:22:1f:db:80:9e:
0f:4a:64:1a:4b:ec:08:27:e2:6a:80:51:79:10:d2:4e:19:d2:
09:5f:4e:bf:77:22:eb:03:b0:74:65:7e:6e:a0:8c:4f:4f:7f:
44:de:6e:36:40:7f:08:01:20:2b:aa:d2:26:b5:de:2a:2d:37:
d7:5f:93:f0:21:f3:49:e5:86:ed:92:17:d1:cd:1e:c0:cc:6d:
0e:af:39:a4:9b:0c:b4:28:52:12:9a:20:c5:be:ee:3b:c1:50:
29:a2:ec:73:29:ee:9e:b5:cb:ae:b2:eb:35:d5:10:ed:45:2d:
ca:7d:13:cc:86:9b:1b:c5:7f:8d:40:9e:de:8a:b6:6d:95:ef:
dd:e9:37:d8:be:a6:91:8d:06:f2:a2:34:a7:e5:27:a4:1e:84:
fd:65:d4:c5:cb:22:bd:fe:33:38:7b:f5:5c:c0:c2:e2:e8:83:
79:fa:aa:a2:4f:68:40:39:6b:3e:7f:d7:fa:24:fb:94:51:89:
5e:97:64:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:43 2025 by rpki-client