Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
File: 1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json)
Hash identifier: F44LhLf5nhrwTeQI9Y4hlKM3psF96jSfR4VitazQMHM=
Subject key identifier: 5D:12:DF:85:CA:D7:53:A5:63:8E:65:CA:D0:F4:C1:F4:D2:89:07:F7
Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216
Certificate serial: 0197B7456366765B21254B5EF1E3FB7CB7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
Manifest number: 05F4
Signing time: Sat 28 Jun 2025 16:01:07 +0000
Manifest this update: Sat 28 Jun 2025 16:01:07 +0000
Manifest next update: Sun 29 Jun 2025 16:01:07 +0000
Files and hashes: 1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: ZCUZKxZkOAFsxc7HUJu71GdohrzwgXQWnilc14/8O5g=)
2: hth3rJjFWs6NUkK-o0tTbHyr4L0.roa (hash: Vn4AMxs64boyWbgENvm4Of96GFQtj+G6HAjnQ0teAh4=)
3: lPDpfx3Te7zjZCAdY5UFziIAeNM.roa (hash: 5bkDE5sFGFyGe5UEk23hluwD8i8ffdDbAYDQQoPB27A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:63:66:76:5b:21:25:4b:5e:f1:e3:fb:7c:b7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216
Validity
Not Before: Jun 28 16:01:07 2025 GMT
Not After : Jun 29 16:01:07 2025 GMT
Subject: CN=5d12df85cad753a5638e65cad0f4c1f4d28907f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:47:6d:e5:da:d6:8d:36:6d:12:3d:40:8b:db:
fc:29:be:2b:08:5b:2f:74:61:af:c6:d4:1b:97:79:
cd:5d:d6:dc:d5:f6:7d:65:d3:33:51:70:25:8e:e4:
28:a3:aa:13:b4:51:87:b3:c2:7e:46:c6:d0:54:04:
c4:e1:20:c6:f6:9b:e4:5b:47:50:a7:54:54:83:0a:
0b:98:07:c7:8f:16:3b:f3:59:5e:ae:b5:7f:b9:ad:
50:e4:e1:8f:bc:79:71:45:8c:cf:f2:86:4d:a4:cb:
67:86:f6:c7:06:da:4a:3a:f7:35:02:05:2a:73:c3:
8a:11:8e:7b:96:77:f5:cc:a2:4a:cb:f3:0c:9e:8f:
8b:3f:53:39:19:d7:aa:ca:20:d8:1c:47:a9:7b:70:
6d:33:af:42:9e:1d:c3:0e:5c:9e:d4:52:73:e7:cb:
4d:54:80:67:36:cd:4b:63:8a:44:d5:b7:d6:a8:53:
f9:58:31:20:40:fc:ec:3f:64:ee:9b:c6:fe:28:a9:
8a:9b:53:fc:8f:51:79:d4:9e:2f:97:a3:f9:91:3a:
2d:62:81:71:b9:d4:d2:08:03:25:e2:bc:13:8c:73:
94:36:41:07:ce:b2:d7:55:33:e7:a5:3b:81:35:46:
63:96:dc:29:5a:48:eb:9c:fe:94:fb:3a:06:56:2d:
39:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:12:DF:85:CA:D7:53:A5:63:8E:65:CA:D0:F4:C1:F4:D2:89:07:F7
X509v3 Authority Key Identifier:
keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fa:f9:43:0d:aa:46:f3:53:fb:5d:39:b2:0a:f5:35:af:8d:
99:3d:1c:f8:ab:14:f3:6b:f5:90:1c:f9:21:d3:5c:8e:e9:a6:
78:4f:97:c8:b1:59:fe:4d:b5:83:0b:36:1c:99:be:fc:97:8c:
9d:fd:b6:a5:dd:99:f7:2a:c5:9c:13:f4:a5:e0:cd:d0:da:f8:
94:1b:72:15:60:bd:3d:5b:8a:c4:03:d9:0a:25:3a:f6:d7:85:
7e:33:42:04:24:46:52:e1:1c:46:38:6b:16:7a:99:cd:fd:32:
b9:54:32:20:4f:09:5a:17:47:8e:a4:36:5f:9f:50:cb:1a:ac:
ec:1f:68:07:96:38:21:8a:af:34:cf:cf:77:c8:39:a6:f0:5d:
8d:1d:c3:c7:5d:ed:26:de:b4:55:81:8a:ef:1f:cf:6f:56:27:
ab:91:e8:d7:e2:2e:27:85:bc:57:03:e0:80:ea:8c:8a:24:d3:
ad:b1:6b:41:8b:43:4a:07:12:11:1b:70:f7:37:16:98:21:67:
ff:0f:fe:a3:3f:8f:6e:32:07:d6:a9:f7:3b:c8:2b:1c:fc:82:
28:3a:ca:fc:f8:a6:47:54:71:e3:34:26:84:f8:ce:08:f7:8d:
4a:6c:3a:01:30:aa:69:9b:f0:98:ec:3b:43:51:65:d0:17:3c:
7f:e1:01:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:31 2025 by rpki-client