Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
File: qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft (raw, json)
Hash identifier: 5SMi4fEMS257V9iKzpN2agHP3FnoEV04Th4ebMb2geg=
Subject key identifier: C8:2C:4D:53:20:3B:26:B4:79:26:54:E7:BE:F0:F5:B5:5F:C9:5D:51
Authority key identifier: AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
Certificate issuer: /CN=ab344b32f58b564c897a1ffa6967089198f2c822
Certificate serial: 0197C6823BBE262B030708DA9C808DF0ED75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
Manifest number: 03A9
Signing time: Tue 01 Jul 2025 15:01:53 +0000
Manifest this update: Tue 01 Jul 2025 15:01:53 +0000
Manifest next update: Wed 02 Jul 2025 15:01:53 +0000
Files and hashes: 1: gS2YYEML9M4UNWK3VVDTZTM54bA.roa (hash: mr7+UlZRci6ZTeqcdGCeGzmY9P3YX+uy/+4p1bdlnM4=)
2: qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl (hash: K0CUCVdb6UMj20bsGTxXBHsCOt2bhVeTwnGTLNc7j4s=)
3: tSdceX3_WKYPOSqNpQt9_4TBFn8.roa (hash: zZjSigYgJ8knWkj4u0ar/HI7QTSKBL8PUuzQf8DJQWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 15:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:82:3b:be:26:2b:03:07:08:da:9c:80:8d:f0:ed:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab344b32f58b564c897a1ffa6967089198f2c822
Validity
Not Before: Jul 1 15:01:53 2025 GMT
Not After : Jul 2 15:01:53 2025 GMT
Subject: CN=c82c4d53203b26b4792654e7bef0f5b55fc95d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d9:1e:28:c8:bd:0b:f4:2d:4f:8c:36:b6:1b:
be:c9:3c:9f:b4:5e:81:4a:96:b7:d0:89:82:e6:7b:
aa:a6:c3:ee:49:da:13:3c:31:fa:b7:99:ac:7d:e1:
28:30:3d:7e:05:74:60:95:0b:a8:83:e3:a9:8d:4c:
bd:d9:f2:3a:10:19:65:1c:6b:4f:62:37:b6:69:17:
27:6f:75:36:70:75:25:68:a8:6d:4e:b3:72:4f:e6:
87:dc:99:47:b3:54:c3:dd:f6:55:f4:13:e8:e3:91:
9e:c3:e2:a9:ca:54:59:af:71:75:59:37:d6:1f:8f:
b6:d7:85:dd:7d:a3:c4:78:22:aa:3d:72:1c:6a:fb:
9c:4f:f8:87:45:59:fa:2a:72:81:f7:dd:db:29:09:
91:40:67:d0:55:3d:a5:e4:e9:11:96:e8:fb:5c:4b:
42:af:15:67:74:97:32:ee:d8:cb:be:be:f9:e7:a6:
6d:71:b7:d2:f5:56:64:d7:26:f1:6d:06:36:09:4d:
df:e6:69:da:a0:81:53:af:ba:c5:11:50:a1:78:56:
9c:f3:40:99:73:af:46:6b:fe:cc:90:38:3f:c8:05:
ae:f9:ab:5d:33:c8:3f:e3:97:24:2a:b4:d5:01:cb:
ec:5c:b4:65:a3:5e:12:e8:8a:57:b6:65:88:b3:78:
08:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2C:4D:53:20:3B:26:B4:79:26:54:E7:BE:F0:F5:B5:5F:C9:5D:51
X509v3 Authority Key Identifier:
keyid:AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:bf:99:25:69:19:93:76:f6:cc:9e:00:02:6e:c7:c4:38:9a:
00:aa:c1:c8:74:3c:bb:ab:46:e5:bb:dd:3c:b3:ff:a8:e4:31:
9e:58:c8:ce:66:e0:2e:f2:5c:7c:2f:ca:e6:c9:0f:c0:97:86:
93:78:23:41:5d:96:fe:b0:eb:7a:f5:52:e3:38:89:db:24:3f:
af:47:1a:73:a7:0d:67:7b:59:c6:69:ff:7f:aa:58:c1:6a:15:
c2:31:91:7d:b8:c3:91:de:b7:60:ae:f8:b3:9e:34:21:c3:ee:
9b:6c:41:d9:15:fa:97:b6:19:35:8f:54:51:43:bc:2c:fc:5a:
1d:61:01:17:a9:ff:f6:a4:ba:d8:9b:b2:ac:13:0c:63:b7:b5:
81:69:83:1f:56:91:43:37:9a:6a:ee:3d:e4:a4:a9:f1:fd:1d:
51:4e:a4:8c:97:34:8c:d4:d7:d4:e6:8b:c4:9c:da:9c:eb:a9:
92:31:7b:cf:86:8d:4c:ff:d6:fd:46:8c:8d:6a:25:95:ba:26:
12:b3:27:a0:df:f7:06:ab:d1:77:ea:09:ae:bc:ef:89:9d:46:
0a:59:2f:74:3f:67:84:d2:9c:0d:02:89:08:f1:03:b9:5b:0e:
c0:7a:e2:7a:83:63:38:07:54:72:83:af:7e:8e:67:22:81:3f:
c8:58:57:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:23:48 2025 by rpki-client