Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
File: QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft (raw, json)
Hash identifier: 8d71Dt5BMhNgA+sDbbCWh8IjnvHRxI0wj+8Pcm+QVGU=
Subject key identifier: B8:61:65:7C:39:04:DB:BD:09:93:09:99:1B:27:1B:D2:FC:8F:BC:FF
Authority key identifier: 41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
Certificate issuer: /CN=412abb114f32570c5dd52066259bdc80c98768fd
Certificate serial: 0197B8C60383E54803A22B5AB90C3E6B3E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
Manifest number: 0CF3
Signing time: Sat 28 Jun 2025 23:01:14 +0000
Manifest this update: Sat 28 Jun 2025 23:01:14 +0000
Manifest next update: Sun 29 Jun 2025 23:01:14 +0000
Files and hashes: 1: QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl (hash: +tS8SB7NexFwAdTP8EPcWshUZCTNrqMp0BhqyGra9fg=)
2: WjHlxqu14v8phrZRkyuwZHi4tA0.roa (hash: OgrQu5S4ReMsliJzFxYO2+I1LQQpOGuq17K/+Bl2UJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:03:83:e5:48:03:a2:2b:5a:b9:0c:3e:6b:3e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412abb114f32570c5dd52066259bdc80c98768fd
Validity
Not Before: Jun 28 23:01:14 2025 GMT
Not After : Jun 29 23:01:14 2025 GMT
Subject: CN=b861657c3904dbbd099309991b271bd2fc8fbcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:18:f5:86:3f:56:78:d6:90:71:2b:41:ad:ab:
81:e3:58:81:ba:dd:b0:ca:81:74:f7:04:c7:ab:af:
03:2b:e0:59:1d:0f:85:25:4b:10:c3:9a:07:40:35:
0d:03:da:94:7d:7f:c4:5a:dc:ca:e4:79:ab:0d:ac:
36:b6:1d:bd:f1:7e:af:31:2f:f7:fe:95:53:30:50:
29:18:7a:ab:90:f3:44:93:0b:21:3f:ff:89:9d:e2:
88:9b:c7:51:33:60:f4:f3:c1:cc:3b:21:36:e4:f6:
ec:b5:ea:d3:d0:b4:27:19:36:13:9c:4b:63:82:48:
f0:4d:1c:e5:98:c6:7a:1b:01:cc:76:90:38:ba:42:
ab:c7:c4:c3:3d:e0:79:40:08:ce:34:e3:f3:79:cc:
ec:59:8d:32:bf:8f:92:94:15:85:9a:29:eb:88:1b:
e2:c7:e3:0b:77:99:90:24:91:bd:d2:43:18:24:08:
fe:83:51:e1:da:a6:3f:67:f5:a1:f9:9c:72:79:7e:
11:c9:64:fe:51:fd:a3:3a:20:26:cb:d4:87:ae:7b:
13:20:99:a7:bf:51:56:e5:48:a7:c9:d1:7e:52:fd:
98:98:88:4a:81:bb:79:09:b2:e8:ca:61:c0:9e:c5:
0d:ac:e1:9a:39:01:b3:0e:bd:65:a5:6e:2b:60:0f:
43:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:61:65:7C:39:04:DB:BD:09:93:09:99:1B:27:1B:D2:FC:8F:BC:FF
X509v3 Authority Key Identifier:
keyid:41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3d:ab:ef:bb:25:94:9c:4a:9c:d4:51:71:c6:62:b4:c3:05:
5a:4c:b8:f6:f5:64:f8:63:40:ed:9e:fc:7c:b2:7f:1a:ee:3d:
d0:bc:1e:50:9c:22:c7:67:51:0f:5e:2d:a7:bc:58:28:e6:08:
9a:c5:03:ac:32:ab:06:a9:24:e4:25:6d:e7:21:75:fa:73:65:
24:57:a7:b9:22:02:ff:e4:74:3d:3e:4b:44:6a:c7:c9:8f:c0:
be:22:7b:3c:40:ad:08:6e:c6:55:71:ce:59:b5:b1:34:eb:b2:
34:30:2a:09:85:75:bb:1c:14:4b:c6:6e:72:a8:1d:aa:6d:60:
e7:d9:6e:e5:1a:3b:e2:79:e7:d8:99:c0:c1:8e:e2:0b:c6:c2:
86:95:c4:9e:8b:55:e1:38:2a:ed:e5:a2:0c:59:bf:21:58:6d:
ec:2f:76:85:af:19:f8:2a:65:c6:c8:f5:ef:37:d7:3c:fb:fd:
5e:ec:93:3a:ac:9f:f4:dd:c1:48:ed:b5:b5:59:9d:d8:ff:05:
ba:1f:b5:70:e1:2b:6c:a2:68:d6:48:23:a3:5b:62:e1:3d:01:
2b:ff:53:74:27:50:37:b4:49:79:f3:6c:d6:cb:26:08:42:19:
13:0a:fe:6b:7c:2b:a0:d7:57:55:73:ed:fa:d7:75:92:a6:bb:
9e:85:b6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:53:10 2025 by rpki-client