Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: ZthmUULUH0tBWo/0jdKuaiRpC5Tnbcu+0TsZA1cQIvU=
Subject key identifier: 5D:AD:5C:F9:2E:92:77:6F:D1:97:9B:2B:20:24:42:E3:60:4D:20:46
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 0197CBDFB03A7BDC3CAA815764AD6C5F1B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 1582
Signing time: Wed 02 Jul 2025 16:02:03 +0000
Manifest this update: Wed 02 Jul 2025 16:02:03 +0000
Manifest next update: Thu 03 Jul 2025 16:02:03 +0000
Files and hashes: 1: 6ePgS-H7Yzuq3toYao1SpcCwfpw.roa (hash: 6wwpW2bNKeFKmlaR35jx40rgyoKDaJsTG+ac1jtGsgs=)
2: h7iUVsathfWiZn6MUEREGc5Lrns.roa (hash: 6VmzPFIIIU0V6MlQJOV1H1bykzKrpknx8IQ1i3Vq0eM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: xQoGRpZJKVMt/mRkCiAf8LCvCT+AQdDOSVz6xquvxks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:df:b0:3a:7b:dc:3c:aa:81:57:64:ad:6c:5f:1b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Jul 2 16:02:03 2025 GMT
Not After : Jul 3 16:02:03 2025 GMT
Subject: CN=5dad5cf92e92776fd1979b2b202442e3604d2046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:2a:4f:2d:02:df:0a:a6:b5:b2:bc:6f:5d:
fe:e6:4b:1a:a6:0b:2a:7b:e6:47:67:51:4a:3c:ec:
e1:34:5c:e1:6f:68:8a:4a:0b:7f:af:26:5f:35:1d:
04:bd:9a:f5:e5:1e:63:31:4e:b8:ec:3b:fd:17:53:
86:5b:e7:b5:0e:f2:cc:0e:5e:e4:3f:72:65:32:76:
40:7e:45:d7:3f:43:33:b3:ec:56:2f:69:5d:25:0a:
2f:6e:ed:f8:41:c3:24:96:df:a8:07:3c:4c:61:83:
53:be:a8:79:ab:b7:1c:b1:c0:69:c1:6f:c6:79:7c:
fb:e3:97:07:e6:25:9b:fb:21:82:c2:4c:ba:8d:cb:
dc:d7:8c:22:7a:90:18:1d:7b:51:46:7b:04:f7:89:
da:a8:a7:e0:65:92:a6:8c:77:6f:16:e7:7e:54:a6:
ae:59:00:0e:bb:64:b1:3b:00:79:c2:cf:4b:d8:7e:
3a:1d:1f:f7:97:34:8b:39:a1:0e:00:1a:86:fd:a6:
1d:56:b0:90:ab:2b:74:f1:c7:7c:5c:4d:07:93:88:
e4:f2:30:de:08:9f:8d:4f:40:31:c8:90:ab:84:28:
c0:a3:9c:57:df:56:89:06:76:87:56:b5:2a:e4:09:
4e:6a:82:a7:69:8c:03:0c:fb:27:7d:92:ee:13:d4:
9c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AD:5C:F9:2E:92:77:6F:D1:97:9B:2B:20:24:42:E3:60:4D:20:46
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ae:0e:bc:ba:9d:41:de:12:e9:06:87:ba:35:59:c2:a3:13:
33:36:17:a6:96:4b:8f:8c:90:a8:07:5b:86:43:7c:84:17:ef:
ed:61:fc:85:07:a3:8a:b1:8c:e0:d9:1f:f1:06:36:c8:3b:c5:
6d:87:79:c5:3c:c9:90:89:84:56:ef:2d:02:7b:b8:44:46:27:
98:74:80:fe:90:fb:68:2d:5d:ba:cc:a4:b7:37:f7:23:a1:14:
e8:16:49:3f:1c:64:50:83:a3:0a:58:9d:b6:87:ce:76:ad:5d:
d7:b1:61:ab:dd:53:a9:86:ed:78:3d:db:81:72:49:fc:1a:24:
1a:9f:4d:9e:b6:64:10:0d:ef:54:82:54:70:99:1e:c1:70:8e:
84:d1:6e:bb:71:64:23:0d:c3:a2:20:0f:af:46:6e:57:c0:93:
74:8f:36:ac:9a:e3:fe:f3:2e:8e:f5:8d:c5:c6:96:f2:42:4b:
86:65:e5:38:c6:e4:d5:11:94:a8:d0:41:19:06:cc:b3:24:84:
15:36:33:24:50:8f:27:1f:50:9b:a5:e7:9c:f2:7e:ae:a5:41:
d9:02:82:3d:fb:3e:31:2e:1a:b9:19:58:0a:c3:ce:b4:a4:dc:
c7:4a:47:07:b6:39:98:ba:61:62:63:46:bc:fa:2d:4f:a5:9a:
bf:cf:93:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:12:02 2025 by rpki-client