Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File: q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier: 0pFXLZrlwqB2ND5vF46bDV9MwCAF7OxZ7J6zeVRfP2Y=
Subject key identifier: AD:18:E4:CA:AE:7C:E7:C6:33:E6:09:0B:55:F8:22:80:75:2F:0E:8C
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 0197B88F47F756E46BEBEB937E2172152378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number: 15D6
Signing time: Sat 28 Jun 2025 22:01:27 +0000
Manifest this update: Sat 28 Jun 2025 22:01:27 +0000
Manifest next update: Sun 29 Jun 2025 22:01:27 +0000
Files and hashes: 1: F9Xe_7jgOYvdTNT9YC7uc1m7clw.roa (hash: dbf14IPOhGmAOgdUCZzI8fhPd/ppi3DXyc8q1YDOSJo=)
2: HncO7o0Hx6kmO3BNCUVPbF42-m8.roa (hash: /pA5z2SwqwvGDpyWUHOM2Fy+nufCkYimVU2as7hvZq8=)
3: N5zj-5kvAhoJCItFFzdBa1pYbH0.roa (hash: ypTV2FdvIR6mdrYiLR6I+YqYJsccCY+5Z3r1n8pA0MU=)
4: NiqjOlNTXM20fr7bb_Hu7fNVpnk.roa (hash: WMjXZpt8cy+IOzVtTivSuKAcQFZieAhNSlute/PEdJQ=)
5: VUze8_1n74uVa_uD6F7A6AioYKM.roa (hash: ugq/e8QeF0wIWa9W8bf0Wvpu26TSdCjGX0yCM4f1o1k=)
6: jJkmu95ExwTShGBJvsJR7aBhoPU.roa (hash: nz14VG6Wmam+OFYqgavV7ACmkDO4KpLptIyk8PePgL8=)
7: oFumiBsAWooyBU0TcSWUrXQVV0M.roa (hash: O0f3W53wpKnfJgwZpwBD1xXfrpSbNoYlbIB/lXeKPq8=)
8: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: 7dOcUgHigiF61QKN/Ttk0VkmADmhjmQYNeFt7BGZx3I=)
9: zJzk_tM6gq364ozeInI309dIrxA.roa (hash: Wk+SRLeVkkf92Q0xGlI36RRywoqFOdrDHHnD94zbdGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:47:f7:56:e4:6b:eb:eb:93:7e:21:72:15:23:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Jun 28 22:01:27 2025 GMT
Not After : Jun 29 22:01:27 2025 GMT
Subject: CN=ad18e4caae7ce7c633e6090b55f82280752f0e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9f:c0:db:6d:5f:a0:1f:51:7b:9f:82:9a:41:
78:70:f9:a2:a1:44:0f:57:df:ee:d3:e8:94:bf:c7:
f9:1b:25:5c:bf:90:7a:07:7b:f9:2e:98:36:05:2e:
4c:2b:96:04:bf:33:90:d4:59:95:ab:25:a4:99:53:
48:12:94:70:d8:f0:9f:26:d9:8d:a9:cb:76:b7:2f:
c0:10:0a:e9:02:60:23:a8:1d:1d:57:99:ca:8a:02:
d9:54:9e:18:8c:1c:4a:d8:9b:bc:d5:5d:7f:60:99:
7e:17:fa:f3:02:85:76:17:5c:1b:78:ff:a5:08:3b:
40:0c:9e:cf:ba:a6:6d:9b:9d:29:ea:bd:17:bf:83:
6e:2a:5d:aa:df:c1:34:dc:8e:c3:ff:65:fe:d8:2a:
13:4a:a6:1e:35:1a:06:94:6c:13:0c:e7:37:04:bd:
9f:1b:9b:90:c3:8f:ef:90:5d:d3:7d:81:9a:e8:2e:
3d:8f:a2:2c:5f:92:d2:46:01:cc:ba:29:e9:48:df:
77:91:02:e7:65:1c:ce:f1:77:d3:6f:f0:d3:0d:7a:
b7:64:45:d8:c0:fe:c1:74:7c:50:5c:a6:16:7c:d2:
74:4e:23:54:c7:9a:7c:5d:27:59:c9:bf:2b:39:ec:
fc:58:4c:9a:8d:7d:34:de:e5:fa:78:ba:c4:9a:8d:
2a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:18:E4:CA:AE:7C:E7:C6:33:E6:09:0B:55:F8:22:80:75:2F:0E:8C
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9f:c3:ea:7f:5e:9b:19:3c:8c:c6:b4:29:86:c9:34:7b:45:
99:59:a0:66:c9:37:b5:f8:9a:6f:a5:5d:74:4c:96:d0:35:82:
d9:b2:4e:31:58:0f:1d:fd:a4:d8:63:cb:88:ab:2c:5a:5b:49:
21:a7:d8:23:a6:c8:cd:2f:52:6c:5f:15:15:52:27:33:b3:95:
47:39:15:27:a7:68:ff:87:e3:7c:12:19:f1:75:83:be:9a:2b:
22:41:73:8e:66:35:aa:a6:32:c5:af:c8:83:7e:b1:92:e3:b7:
1a:f4:e7:b4:8b:11:78:f1:3d:f5:45:06:06:a0:5d:be:e3:d7:
a2:54:82:d0:7f:11:62:ec:49:26:4a:4f:44:0d:5a:f3:7a:7f:
a9:08:eb:bc:fc:b7:a9:95:da:cf:98:73:22:df:05:ee:64:50:
b2:48:e5:03:33:ba:61:2e:42:ef:0a:e1:75:21:56:e5:9c:24:
87:b8:28:a0:36:b8:09:1f:37:10:23:ea:28:8d:4e:6b:62:03:
6d:b9:e6:41:37:0a:33:53:51:c5:52:46:18:da:d9:f4:c4:3f:
12:b9:60:9b:32:b1:e5:96:56:84:0c:42:b9:88:5f:aa:9f:ce:
ca:d2:d1:65:92:24:71:23:30:be:0e:5c:b4:bf:d7:38:ce:d6:
bf:3c:64:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:03 2025 by rpki-client