Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
File: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft (raw, json)
Hash identifier: tAg4Te0qhMjvQx8rpfbxWk7b0L99xQJHVFGoCEICYAU=
Subject key identifier: DC:7C:09:AF:5C:87:49:1B:E1:F4:6A:4E:B0:0A:FF:7D:E3:F6:44:E0
Authority key identifier: 42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
Certificate issuer: /CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Certificate serial: 0197B6D78CA6E5DB64E2C08E68AB84E05D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
Manifest number: 40
Signing time: Sat 28 Jun 2025 14:01:08 +0000
Manifest this update: Sat 28 Jun 2025 14:01:08 +0000
Manifest next update: Sun 29 Jun 2025 14:01:08 +0000
Files and hashes: 1: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl (hash: w1P9B+aNU6DcN9zCoa2C98dSpYElUyfR5Pv+MURbLUs=)
2: n0Ip-VL6cLqnuppCWC9aIAGGBVk.roa (hash: Plze8bNi0S5C4H4tkQ3hgwkWsiFwc79XI6iUMh0AEzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8c:a6:e5:db:64:e2:c0:8e:68:ab:84:e0:5d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Validity
Not Before: Jun 28 14:01:08 2025 GMT
Not After : Jun 29 14:01:08 2025 GMT
Subject: CN=dc7c09af5c87491be1f46a4eb00aff7de3f644e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:0c:5a:cf:7b:33:5e:c6:d8:f0:3f:bd:46:
51:27:bb:20:e4:d4:05:2d:ae:2d:1d:64:dc:42:46:
ca:9a:f5:f9:a4:b7:bc:61:b7:5a:41:2c:0a:7a:72:
7f:12:e1:62:b8:68:5f:eb:9e:f0:28:85:04:87:4e:
38:70:39:5b:e2:df:39:a0:93:76:66:76:ed:0f:42:
52:f5:f6:7c:60:7c:55:c3:80:10:1b:6d:b8:57:4c:
13:91:07:92:fc:36:47:ed:a4:03:db:0b:a5:ec:d6:
6e:e4:70:81:e3:f1:be:19:3e:01:22:61:af:63:bd:
6b:e1:97:b3:5f:1a:71:44:7d:71:aa:71:a0:a7:84:
e5:94:c2:74:c3:a2:28:d7:ef:72:65:71:f6:e1:5d:
eb:5f:b6:68:bd:ae:48:90:b9:7c:ba:e9:83:d0:a1:
4d:fb:20:d2:3e:85:b7:df:a9:ae:24:02:ff:a6:e3:
4f:77:65:d5:45:90:b2:ef:a3:0c:80:c8:cd:fc:ba:
9f:2d:e8:9a:7a:a0:bb:7d:19:68:f9:35:29:1e:a8:
54:b8:52:2f:e9:35:7a:ce:27:77:ab:50:90:40:c7:
17:b3:cc:db:29:8d:1c:f4:5b:fe:2a:57:92:86:03:
94:fb:01:01:5d:c2:6d:44:2f:ed:6c:95:06:36:be:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7C:09:AF:5C:87:49:1B:E1:F4:6A:4E:B0:0A:FF:7D:E3:F6:44:E0
X509v3 Authority Key Identifier:
keyid:42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:50:46:91:d9:97:51:6d:9a:b3:32:b7:5b:8d:ad:91:6a:54:
78:98:38:b9:eb:6a:32:8d:25:72:f0:21:9b:1f:18:7b:6a:5c:
e4:3b:ab:01:0a:d4:5a:3a:93:86:55:b0:b7:d3:3a:a4:aa:82:
4b:a6:72:af:a9:ba:35:e6:2f:2c:ab:bd:60:a3:2f:a8:e1:a0:
08:06:1d:6a:da:42:8e:42:70:43:42:e5:2e:67:bf:ed:49:ad:
f9:a2:8b:ad:a5:63:30:88:b4:f5:a1:c6:53:ff:ab:9d:f0:2c:
17:5e:4d:f7:a9:6d:07:90:fc:0d:80:2f:f4:18:39:90:6a:9e:
db:3c:fc:07:10:0d:3e:62:34:ba:c5:be:89:60:2f:7d:65:db:
94:a8:82:3e:f2:5e:6b:d4:6d:69:1c:89:4a:e0:d4:35:04:5c:
e0:71:8d:8f:bf:82:c3:23:48:3c:d6:b7:5c:49:fa:2b:fa:04:
1c:d6:1b:00:9e:92:16:cd:e5:32:37:3d:4f:4f:f7:3f:fa:60:
8c:a9:bc:20:24:23:61:b4:9f:54:7b:e3:bd:ac:51:cf:54:e2:
b9:07:9f:1c:3c:2b:d6:51:af:df:bc:58:1e:57:6f:80:ee:c7:
e2:7d:2c:a7:72:5a:6a:ae:ec:7c:c7:0c:80:a0:92:2a:74:57:
40:68:de:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:42 2025 by rpki-client