Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier: nniJYSP5QRwIDaPpqNeEgOZTXNweBjDtchzcirdB98g=
Subject key identifier: D5:66:FB:76:B1:DE:CB:1A:D5:34:C1:12:95:18:43:4A:6F:5D:99:BC
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial: 0197B6A2503823E88EE265E8472FD61FFE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number: 55
Signing time: Sat 28 Jun 2025 13:02:59 +0000
Manifest this update: Sat 28 Jun 2025 13:02:59 +0000
Manifest next update: Sun 29 Jun 2025 13:02:59 +0000
Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: UD/J8JT4IDnCgaoi7mam+qasFF1wekJ2TIIsTjQWOJc=)
2: is8rJFkIshJvtMPQsNBVoFxTKBY.roa (hash: eXPJhyZn1FuLC+ECVYIsChabU+UtFgCuyBkgvqoFbIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:50:38:23:e8:8e:e2:65:e8:47:2f:d6:1f:fe:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Validity
Not Before: Jun 28 13:02:59 2025 GMT
Not After : Jun 29 13:02:59 2025 GMT
Subject: CN=d566fb76b1decb1ad534c1129518434a6f5d99bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:48:22:ea:3d:20:16:07:60:a3:4b:ef:d5:
94:32:37:43:1e:dd:4e:9c:a3:5c:6c:d0:3f:2b:64:
c3:28:64:f9:fa:b4:75:a9:ae:ef:86:d2:c1:6d:f6:
04:1e:a4:8c:ce:39:60:66:01:5b:43:e0:6e:23:ed:
67:04:ef:bb:ec:42:fd:92:97:db:19:f3:3c:fb:8c:
85:9c:43:b7:4e:54:81:a0:f5:93:bc:6f:7f:61:c6:
97:6d:9e:51:b8:6f:9f:08:ce:2d:b8:58:3b:3f:a5:
e6:51:ec:fc:45:46:37:68:5a:e0:78:96:0e:b4:fd:
71:be:bc:4d:77:5a:92:08:b7:1d:e6:67:0d:ea:14:
58:5f:6b:81:38:24:99:04:58:4f:66:85:12:5b:fd:
de:f4:ff:65:2a:61:ef:66:0f:6b:50:19:89:d4:57:
b3:e4:dd:07:3b:8d:6f:94:77:50:2d:59:52:bc:8f:
ba:e7:1e:ab:df:a0:0c:b1:a7:ce:48:3a:52:28:c3:
6e:69:2d:58:5a:e2:72:b2:cd:77:23:0a:9e:d3:2d:
c4:3b:3f:46:d6:2e:0d:10:1a:25:38:bf:0c:0a:24:
ef:59:07:74:59:b9:7a:aa:0b:a9:b8:cf:8b:85:ac:
6b:34:99:e8:82:7e:4c:1f:1a:72:9b:54:0b:cf:2b:
21:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:66:FB:76:B1:DE:CB:1A:D5:34:C1:12:95:18:43:4A:6F:5D:99:BC
X509v3 Authority Key Identifier:
keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:dd:55:c5:6c:7f:8b:3c:85:7a:fd:fc:cf:1e:66:b1:1f:3e:
72:67:ba:b4:7d:15:27:e9:b0:e7:b4:2d:d6:32:0e:80:57:26:
c5:61:97:07:fe:8b:22:c6:ef:c0:53:0f:01:6e:af:df:a7:d8:
1b:8b:7c:e4:9e:c5:9c:36:ff:8d:49:f4:a5:94:11:e1:70:e8:
12:eb:30:fb:d6:e1:b0:57:30:ec:a5:fd:1b:29:c7:b3:a1:05:
fb:2f:b5:31:f6:f9:b0:d0:a0:ba:ce:d2:d3:dc:cf:78:9f:54:
71:40:d9:17:24:2e:be:51:02:6a:72:24:b8:77:a2:6c:1c:b3:
8b:46:10:7a:10:3f:c4:48:f6:38:c9:a2:09:f0:6d:4f:bd:b1:
f4:c0:b1:b1:aa:88:74:eb:51:f3:ed:2c:63:f1:dd:ce:0e:c1:
1e:39:8f:ef:4a:15:cf:4d:15:61:9a:e0:40:d6:79:55:0a:17:
b0:7f:74:b5:0f:a8:6c:8a:fe:e6:e7:ff:5b:7e:07:b3:86:3c:
b7:4f:08:b6:ba:22:98:2d:11:02:29:83:08:92:2d:ea:13:a9:
a1:87:74:35:7a:96:81:a1:e0:fb:5d:e6:74:fb:80:8b:7f:30:
d6:49:d1:35:70:dd:3d:a7:c7:8b:02:5f:d7:02:c4:d8:10:ee:
84:5d:4e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:11:20 2025 by rpki-client