Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
File: QaCIiaXMcoT9MkqZK_qN59bCwYo.mft (raw, json)
Hash identifier: i96y9ochtUvcOM2k7NzalJYBC8PiomkYKND73/Vx2NI=
Subject key identifier: B9:44:D0:15:84:77:94:71:00:FE:B7:C8:EF:F5:AE:87:4F:18:A8:71
Authority key identifier: 41:A0:88:89:A5:CC:72:84:FD:32:4A:99:2B:FA:8D:E7:D6:C2:C1:8A
Certificate issuer: /CN=41a08889a5cc7284fd324a992bfa8de7d6c2c18a
Certificate serial: 0197B58E40BB29281B66573B3A6B3845C227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaCIiaXMcoT9MkqZK_qN59bCwYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
Manifest number: 0511
Signing time: Sat 28 Jun 2025 08:01:28 +0000
Manifest this update: Sat 28 Jun 2025 08:01:28 +0000
Manifest next update: Sun 29 Jun 2025 08:01:28 +0000
Files and hashes: 1: QaCIiaXMcoT9MkqZK_qN59bCwYo.crl (hash: U+rTF0qBlLMFOSb6uli9uyoALD0a8AUH6kjX82n0hmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QaCIiaXMcoT9MkqZK_qN59bCwYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8e:40:bb:29:28:1b:66:57:3b:3a:6b:38:45:c2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a08889a5cc7284fd324a992bfa8de7d6c2c18a
Validity
Not Before: Jun 28 08:01:28 2025 GMT
Not After : Jun 29 08:01:28 2025 GMT
Subject: CN=b944d0158477947100feb7c8eff5ae874f18a871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:af:9c:3a:7a:e5:52:f8:ce:b6:4e:1e:91:f6:
b8:51:d9:f1:10:d1:00:63:94:e7:e7:f6:16:da:19:
51:c3:93:0f:ca:05:d7:95:f1:4e:90:2b:bc:13:94:
ee:a1:d3:82:4a:f4:cb:db:14:20:04:15:2f:1b:a4:
fb:cd:52:7f:3c:44:de:96:32:5b:b1:13:f1:31:4c:
96:87:99:2a:c5:40:18:1f:b0:c8:00:05:65:e9:3e:
58:6b:a6:82:1d:90:c1:d4:fc:51:fd:77:6c:1c:2f:
87:0a:ec:a8:58:62:81:2b:ac:71:6a:01:fe:12:91:
70:ed:b1:31:47:d3:cc:f2:ef:50:18:fc:2d:41:74:
70:e8:cf:80:f6:8c:a7:da:f6:20:30:98:2a:6d:69:
63:b9:f7:8e:dc:41:10:2b:43:97:fd:6c:c2:e5:ca:
b0:62:f0:ab:5d:5f:8a:24:ab:06:db:63:ae:86:d7:
92:52:79:3a:95:47:97:62:c6:73:65:db:4d:0a:27:
4e:09:4d:f9:75:12:70:17:22:b3:f5:d2:0b:93:ff:
de:be:e5:b2:1c:6a:63:ea:41:72:ce:98:df:4d:a4:
e8:0e:17:a4:e7:1a:0c:a7:7f:ef:8f:05:74:e6:32:
86:5e:08:8e:ce:a9:2d:71:14:0d:1b:6d:b0:08:8b:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:44:D0:15:84:77:94:71:00:FE:B7:C8:EF:F5:AE:87:4F:18:A8:71
X509v3 Authority Key Identifier:
keyid:41:A0:88:89:A5:CC:72:84:FD:32:4A:99:2B:FA:8D:E7:D6:C2:C1:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaCIiaXMcoT9MkqZK_qN59bCwYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4c:21:18:7a:6b:3d:4b:c2:60:fe:7a:70:ea:24:54:19:f3:
c0:3e:21:36:e3:e3:80:94:09:db:a2:cc:b5:82:98:30:3e:c9:
52:d9:02:11:4b:15:a0:6e:85:71:6c:2d:ff:2c:c7:e2:cc:96:
4f:8b:4d:d1:d4:35:90:01:b2:34:b2:47:05:f0:97:6f:c2:4e:
01:09:75:d5:ed:44:eb:22:61:53:1a:c3:45:a7:82:28:d1:fc:
c9:76:03:18:29:ad:3b:d2:b0:f0:5d:b3:05:94:77:74:a5:df:
8f:c9:4b:9d:a3:cc:83:f2:fc:96:5b:72:ac:88:3d:74:e1:a6:
0f:38:35:85:ab:16:b8:3e:23:0a:d4:9e:52:3b:a0:25:02:5d:
b0:c6:91:df:54:0f:4d:25:32:00:3e:fc:1b:fb:11:c8:ee:d3:
12:ea:0b:aa:00:56:d4:b2:99:90:75:fb:23:df:e7:fc:ce:d0:
85:f6:03:d1:49:8c:e0:6a:16:6a:08:ef:e9:33:78:78:04:df:
2e:d1:fa:92:3e:bd:c2:c0:8d:b6:84:84:e1:c0:d5:5e:1b:8f:
6a:4b:43:61:59:3a:d1:db:14:83:9d:fd:15:99:ec:38:45:98:
2e:be:74:29:e3:f4:13:f7:e4:6e:25:20:ee:41:4b:82:16:dd:
ab:32:ba:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:51 2025 by rpki-client