Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: g1cxV2DF1trIxLiY6UlgxkoAQM0uu6Mmf8Bg2YCVqJ8=
Subject key identifier: EA:AC:59:16:62:94:22:88:58:42:35:6F:6B:6E:05:72:41:89:56:40
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 0197B7B31823925DC1DDAD195CE47923277B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:00:56 +0000
Manifest this update: Sat 28 Jun 2025 18:00:56 +0000
Manifest next update: Sun 29 Jun 2025 18:00:56 +0000
Files and hashes: 1: 3wDf96BAjCwHPGLFXHfr6FPj5tk.roa (hash: n76aMPDVHHg0+waIaYLD5Tllb242OUUWngTT/Znka38=)
2: Crd7C8SVck2OIDtSkQeAyuMLu6I.roa (hash: wscKj8/Aoswv3PHZoE2nGYXdRz4QSyUb5GTz6Q8fmgM=)
3: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: whQkSmn7CEmHYFnMdQ1bjwfR+pQI770vS1Uc7dirJyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:18:23:92:5d:c1:dd:ad:19:5c:e4:79:23:27:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: Jun 28 18:00:56 2025 GMT
Not After : Jun 29 18:00:56 2025 GMT
Subject: CN=eaac5916629422885842356f6b6e057241895640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:d3:d6:fb:f5:0e:8f:65:bd:9e:8b:30:d5:
fe:f2:90:f1:92:67:a2:f2:36:36:99:52:f7:67:ca:
5e:70:5a:42:bf:9f:63:35:ab:ca:61:26:1f:3b:08:
85:57:9d:b1:8d:ff:b8:cc:50:14:c5:3d:ec:56:dd:
24:aa:10:ef:60:a0:ca:3d:6d:d7:98:4f:bf:82:c7:
7a:1c:36:f1:3c:c5:7e:56:16:77:98:0e:b1:79:df:
5b:9f:1f:83:d6:fd:72:c2:ea:aa:ee:71:0e:87:ad:
d0:48:66:30:96:8b:cf:d7:19:f0:be:aa:76:3f:d2:
2c:cb:7b:31:aa:b5:a5:77:d3:04:e6:ee:81:58:bc:
c2:df:a2:9e:59:d8:30:8f:cd:75:5f:00:b2:c0:87:
52:aa:d4:57:83:0b:e2:4d:ce:5f:5a:3e:b7:da:86:
62:d4:56:1b:9c:45:75:c7:68:6b:53:93:8c:6d:a2:
3d:a5:f2:35:42:6b:98:23:ec:d6:ba:56:54:32:4f:
43:15:d6:02:32:96:75:4d:07:d8:88:4f:3b:5a:1c:
bf:7e:21:2b:66:18:c8:cd:8f:84:55:dd:24:5e:75:
0c:bf:d3:bc:b4:96:85:af:8c:94:b9:fa:7a:f1:1b:
fa:0e:56:fe:e4:8b:25:09:94:aa:ca:ec:27:d1:31:
ee:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AC:59:16:62:94:22:88:58:42:35:6F:6B:6E:05:72:41:89:56:40
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6d:b4:e5:db:01:97:26:69:32:19:71:aa:6e:2a:5e:0a:4e:
a6:f3:57:38:ed:4e:6e:b1:21:13:53:e4:98:c8:ab:0c:35:89:
1f:49:23:9f:f6:a5:87:d5:66:1b:27:53:d4:9f:43:ed:85:86:
bd:53:65:81:29:f6:ad:d9:5f:67:0a:72:d5:f7:93:48:a4:00:
93:61:21:c4:a1:c1:8a:78:88:ae:4f:96:42:50:0e:80:3c:af:
4a:9a:8e:81:97:f7:bb:6f:84:5e:75:9c:a4:ee:14:09:78:26:
a6:f3:4c:ae:73:c5:f0:2c:8d:8b:33:9e:22:63:40:45:bc:cb:
f0:ff:5d:8d:f8:ef:e3:f6:32:f9:8a:0a:e6:7e:47:71:a6:8d:
db:f8:2a:71:7c:e3:63:0e:5b:b6:60:3a:83:a1:a9:05:a4:c9:
2d:49:6a:fa:40:c5:10:1c:f1:52:96:cd:db:4d:eb:ad:b2:6d:
8b:a9:30:73:47:33:b8:d5:6f:cd:46:fc:94:4b:b0:e9:91:12:
63:c3:fd:5e:4e:39:52:5f:33:01:fc:7f:82:bc:7d:5c:5f:6d:
cd:b3:44:7a:42:b3:69:7e:68:d4:77:90:ae:1f:30:18:db:0c:
92:8c:d5:f5:97:1c:d1:11:99:61:42:8f:05:72:e5:04:fa:c7:
6d:7a:94:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:18 2025 by rpki-client