Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: T6lOE16WtfLAuiHWz+Nh4Nf1C/mHbMFZqOA6UyatzIc=
Subject key identifier: 3D:CD:E8:91:54:7D:8F:75:5E:4F:10:9B:67:90:02:11:8A:5A:10:A6
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 0197DA75FD06C3E1E8340AF5C4228724FD21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 14FC
Signing time: Sat 05 Jul 2025 12:00:54 +0000
Manifest this update: Sat 05 Jul 2025 12:00:54 +0000
Manifest next update: Sun 06 Jul 2025 12:00:54 +0000
Files and hashes: 1: 4KqmJoEVUd9bhY-ntnaMTkNmA44.roa (hash: LLo6nOWCS1mxlNIUMzouZjN4HwCv7i5lI/hb4nBjcBQ=)
2: Jw4aASdhNdVI-FplW-882cj74Fw.roa (hash: ewm0/xps8d7RUrK5yQyWODWIjZ5yxmU6C2dpLRlFoTs=)
3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: BG3zNh/Z/aDRfBY295TV2pKnCMd9U8ymvqTQB14p0OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:da:75:fd:06:c3:e1:e8:34:0a:f5:c4:22:87:24:fd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Jul 5 12:00:54 2025 GMT
Not After : Jul 6 12:00:54 2025 GMT
Subject: CN=3dcde891547d8f755e4f109b679002118a5a10a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dc:bc:07:d4:5e:4b:a4:fc:d9:d7:08:d7:f1:
c7:e6:5f:7f:ae:fe:92:6b:4c:52:c6:f6:84:66:12:
a7:7c:20:2e:34:21:71:af:56:38:fd:76:1d:3f:b8:
d1:bb:1b:f5:d5:9e:85:a0:fc:0c:20:e3:c7:0b:47:
f4:8d:84:6e:65:6a:12:67:de:f6:01:65:00:e0:ff:
05:e2:c2:df:ae:7f:e1:11:45:7d:ed:a5:e5:ca:68:
9f:7e:d0:22:e1:4e:35:00:8d:0e:26:94:f5:e7:6e:
0b:0b:f4:ae:94:0f:93:f9:9d:37:36:5a:74:12:20:
61:f2:20:02:aa:fa:e3:bc:54:5b:57:f3:5e:53:36:
ef:29:ff:46:4a:b0:f4:13:33:d5:0d:68:92:96:db:
83:d2:ff:45:51:e4:49:d9:12:94:68:9b:55:84:ac:
f6:27:f6:10:41:b3:ea:3d:ea:5b:1d:0d:0e:60:50:
0b:46:a2:87:09:65:70:c4:98:10:c6:cd:60:c4:9a:
a8:db:8a:a9:4f:14:a1:0f:40:80:fc:58:97:34:5e:
37:44:49:7e:8c:ba:a0:73:aa:6c:f8:36:04:3e:1e:
14:53:56:c0:13:b5:c0:c4:8b:58:01:ea:0b:3e:e8:
bf:c9:ec:34:4f:99:4d:ad:d0:b7:4b:b9:8d:b0:79:
c2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CD:E8:91:54:7D:8F:75:5E:4F:10:9B:67:90:02:11:8A:5A:10:A6
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d2:4b:72:52:c5:b7:ff:01:da:4e:2b:62:d2:3f:85:53:52:
b6:b0:35:2e:aa:7d:ce:72:77:ca:d6:66:4f:db:8a:66:8e:4c:
cd:db:b5:63:40:10:62:73:0a:64:08:10:3b:1c:b9:5c:b2:88:
64:c1:bb:76:cd:82:f7:42:0c:3b:ac:94:11:b2:79:22:97:7e:
db:ad:22:7a:81:9f:db:f9:53:1d:98:9c:04:ff:14:61:f3:f4:
96:62:9e:fa:11:9a:0b:6c:a0:47:9f:b0:a9:41:ad:05:00:fe:
05:30:7f:9d:e4:19:61:4c:a8:c3:59:4f:91:d8:99:f0:1b:a4:
c6:df:61:60:36:ce:88:2a:3d:9d:bd:09:85:3b:d6:0a:82:2a:
c4:4e:bd:43:7b:79:2c:79:d7:4d:61:30:26:99:17:31:bf:6c:
0b:5d:96:6b:be:bd:dc:fb:f8:3c:37:4e:e8:fa:a0:c9:94:78:
73:0d:c7:16:c9:39:92:a4:49:6c:47:9f:cb:92:e4:92:cc:5e:
b6:7e:87:3f:71:f4:20:51:e6:cc:4b:9f:04:8e:d3:5a:b1:5c:
45:a3:e5:90:6f:80:74:9b:34:9d:f7:ef:01:c4:b9:f2:3f:14:
39:1c:5d:d7:eb:1f:02:38:a6:03:4b:ca:68:aa:88:a9:5d:34:
a6:bb:cb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:01:02 2025 by rpki-client