Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
File: 1qcbToaUQX67vPYmi5yPljFwsfE.mft (raw, json)
Hash identifier: Qq+yzD87I0xBwhKKUHL9gTTfi3aDuwwcVR11XwuaP7M=
Subject key identifier: 78:A3:93:29:08:BB:8D:19:B2:39:C9:61:97:F2:B8:87:C3:98:1C:61
Authority key identifier: D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1
Certificate issuer: /CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
Certificate serial: 0197B70EEDAC25BF0CE9973F275EC7B04A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
Manifest number: 0589
Signing time: Sat 28 Jun 2025 15:01:38 +0000
Manifest this update: Sat 28 Jun 2025 15:01:38 +0000
Manifest next update: Sun 29 Jun 2025 15:01:38 +0000
Files and hashes: 1: 1qcbToaUQX67vPYmi5yPljFwsfE.crl (hash: tzLNk+Pg3JqmbpaEHRKdZ3935bnbDnR0OgEvowb/L8M=)
2: cPWanhkOF5JFf7ndWQEsgDaOym4.roa (hash: hNMT1d2ZHlvJJQiGYjNYvL4LotmJH6VgqTxIxCqCmaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ed:ac:25:bf:0c:e9:97:3f:27:5e:c7:b0:4a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
Validity
Not Before: Jun 28 15:01:38 2025 GMT
Not After : Jun 29 15:01:38 2025 GMT
Subject: CN=78a3932908bb8d19b239c96197f2b887c3981c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e8:2c:d8:97:3e:de:2e:06:f9:97:b8:44:9a:
06:33:9e:91:68:94:9b:dc:d1:6f:6c:2b:93:a7:17:
9f:7b:f9:7d:c2:fb:18:65:8e:38:78:0d:5c:1e:97:
2d:7f:1c:34:7f:b5:fc:57:74:4d:9d:44:d2:34:27:
d5:3f:bc:4a:98:b6:3f:c2:1a:15:30:f6:0e:95:a5:
01:ef:73:91:7f:c5:56:87:e2:2d:de:90:b7:1d:96:
0a:22:a2:64:95:1d:cb:67:53:8a:97:e5:b3:ee:77:
85:34:28:44:26:c2:e5:d0:d6:af:80:78:12:5d:8f:
da:0a:67:05:e1:f6:4e:9f:3f:cc:f4:12:cf:cc:77:
c3:9c:f7:6d:70:d0:f9:46:81:c8:06:05:39:9d:99:
10:b9:a2:4e:e1:41:c8:5d:e4:b3:88:59:e5:14:42:
12:8e:9d:05:2b:8e:47:c3:f3:c1:b2:0c:a4:dc:58:
40:e1:05:26:13:92:df:14:59:b3:d8:30:0e:4e:2e:
ee:4d:af:b0:b4:43:67:d0:85:dc:e1:8f:61:31:48:
57:c2:35:08:54:7a:62:7a:19:b4:0a:ba:f3:38:0a:
9a:4f:d4:3b:71:f1:62:a2:24:89:ff:c2:a1:f5:99:
dc:16:3c:6a:7b:7b:d5:14:c3:6e:6b:8e:6f:45:f7:
e6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A3:93:29:08:BB:8D:19:B2:39:C9:61:97:F2:B8:87:C3:98:1C:61
X509v3 Authority Key Identifier:
keyid:D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:21:c7:24:8d:6a:1b:c5:5e:96:e0:76:c7:4f:84:18:e2:c6:
bb:39:b1:cb:d9:e2:a0:e5:5a:b5:b1:b1:16:a2:0c:ea:f9:6c:
3b:79:df:23:4e:05:16:3f:6d:5b:1b:d7:fd:c7:32:5f:16:b4:
e2:cb:b1:68:7d:2f:44:da:7e:91:0d:09:ad:b2:12:60:cf:4f:
52:a1:49:a0:65:e0:16:71:f8:8a:30:57:39:cd:c2:bb:74:4d:
e5:2d:c3:9c:f9:b1:60:e6:64:0f:2a:62:fb:df:85:36:64:c2:
30:0e:a3:1b:1d:7a:c9:2f:b1:63:ee:64:27:08:e9:1d:bd:25:
14:18:36:5f:d4:0f:66:e0:a5:71:c0:3e:ae:01:36:e6:7f:a8:
90:83:bc:64:14:59:5a:09:fd:4b:6f:f4:54:64:14:1f:6e:3a:
c1:94:47:60:08:67:70:8f:bd:15:b8:69:13:1c:31:d1:34:f5:
19:73:6e:92:ea:2d:a7:46:d1:b4:6d:75:ac:01:f6:45:25:51:
84:5e:c9:1d:50:6a:7c:11:b9:d4:77:8d:12:91:3f:70:3d:5c:
f4:2c:ea:ef:2c:0b:a6:e4:65:8d:4f:6d:dd:f7:3e:f3:ef:50:
59:1c:e9:2a:1c:d7:ea:e5:6b:ed:fb:7a:f8:18:a7:e5:b9:12:
31:34:a1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:33 2025 by rpki-client