Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier: ANK4OtQk+Z70WO0UwhU9EBY6iR/sWg2gHGIc5pN3eZ8=
Subject key identifier: 30:8B:50:FC:47:F6:C7:1F:5F:BA:D5:2F:7A:7E:B5:88:F5:5A:B8:C9
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial: 0197B9D8A85D3137048D5DDDAF104507492B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 04:01:13 +0000
Manifest this update: Sun 29 Jun 2025 04:01:13 +0000
Manifest next update: Mon 30 Jun 2025 04:01:13 +0000
Files and hashes: 1: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: BO3ba3tzN8aEL12kRPpjd0fRPx0KFZLnlCFoHQ6wPLg=)
2: TfT6AZyh9UGWuKPzLXDw4XK7Cjc.roa (hash: 4OX2vbS8uyBAPoRn5NlTz3A25sxN9Wre4w3pzzWneG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:a8:5d:31:37:04:8d:5d:dd:af:10:45:07:49:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Validity
Not Before: Jun 29 04:01:13 2025 GMT
Not After : Jun 30 04:01:13 2025 GMT
Subject: CN=308b50fc47f6c71f5fbad52f7a7eb588f55ab8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:70:b2:47:98:45:9b:9d:36:9d:14:ec:04:
3a:42:0f:3b:32:04:77:f3:74:77:84:ee:f5:28:4d:
52:11:9c:32:98:2b:5f:f7:d0:89:ad:76:06:b6:01:
62:0a:94:29:d4:3b:db:c3:40:fd:ab:52:1d:37:7f:
7d:2c:67:49:e0:05:f6:f2:fc:7f:df:b4:46:32:61:
1a:3a:db:0f:cd:54:1d:43:96:96:6f:d8:f0:93:f6:
53:ed:c6:7e:d2:d3:62:92:11:e9:43:1c:bc:60:94:
2f:40:72:01:3c:70:56:bb:74:d4:2e:65:8b:b2:da:
d6:f0:cd:45:a2:c2:a6:63:24:10:d9:2b:66:a1:d7:
63:8a:db:11:bf:3b:95:2d:dc:90:14:4c:f2:53:46:
b7:ab:48:c9:a2:ec:92:bd:55:a7:25:49:a2:c2:28:
e0:f2:4a:c2:67:2b:cc:ec:05:ff:30:6c:47:89:f6:
d5:fd:76:81:e4:32:65:79:78:a5:b8:49:1b:8c:a2:
ba:59:05:8b:71:4a:48:6d:21:c1:0c:9c:6d:2b:36:
9e:48:f6:1d:f3:12:51:14:55:68:ac:cd:9a:d0:eb:
fe:15:8d:57:b5:2c:25:02:1d:5c:88:ec:40:dc:c7:
7a:a9:ad:4d:9c:d6:7b:8b:f8:31:b9:a0:5a:94:aa:
62:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8B:50:FC:47:F6:C7:1F:5F:BA:D5:2F:7A:7E:B5:88:F5:5A:B8:C9
X509v3 Authority Key Identifier:
keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e8:ab:b9:fe:d3:6c:dc:45:18:ae:00:b1:cc:ff:a9:ff:de:
fb:4e:f5:85:7e:d6:f8:87:52:8a:89:9c:9f:fa:14:6b:9c:a5:
e2:83:5f:b7:cb:53:1c:52:1e:cf:cb:4f:ca:a9:5d:49:c2:bf:
48:d7:a6:4d:2f:2c:55:66:58:36:2a:8b:36:cd:01:62:4e:11:
38:78:51:09:c8:00:2c:54:16:9d:a8:ed:6d:c2:3c:db:66:60:
0b:99:73:25:1a:6d:88:a2:fe:d6:51:63:66:0d:f0:a9:e9:5e:
da:b7:67:d0:88:81:50:89:90:33:0f:e6:a0:ce:f1:97:d9:c1:
81:3d:df:be:67:cf:b6:21:11:87:a2:72:9b:ec:dd:ca:e3:bc:
ed:52:3c:6b:b2:4b:ff:c8:70:ee:7e:21:01:5f:98:f3:6b:41:
aa:ce:45:40:0b:bb:7e:00:72:f0:97:c1:50:b6:74:07:e9:2d:
6f:94:74:23:7e:46:b9:3f:6e:45:c6:63:14:a7:1e:a3:6b:92:
5e:d0:af:eb:a1:db:51:b4:d5:58:31:8e:3f:d6:65:f8:e4:9e:
77:ba:c3:d9:85:5c:c4:4e:8c:ac:f4:41:1e:db:05:55:79:b2:
09:53:ee:62:d4:ab:5a:04:68:2a:86:0f:1d:e8:6c:6a:37:4b:
2a:dd:d7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:45:23 2025 by rpki-client