Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
File: QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft (raw, json)
Hash identifier: U+8D8Kv+iTKt/PyQbWyd6bMZ7SQjLRUSTnZfbGzgtHg=
Subject key identifier: 3B:BC:F9:BC:92:B0:0D:0F:DB:4A:2F:96:C6:13:EA:5A:F8:9A:E0:72
Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
Certificate issuer: /CN=411952046770f54e8be1fd7d673132265ad70fa8
Certificate serial: 0197B6D7264A1B57981902077E646AEAE5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
Manifest number: 0C74
Signing time: Sat 28 Jun 2025 14:00:42 +0000
Manifest this update: Sat 28 Jun 2025 14:00:42 +0000
Manifest next update: Sun 29 Jun 2025 14:00:42 +0000
Files and hashes: 1: QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl (hash: SIRKmX4yXdiUmcnjw0Xkx1jMt//z/BJF0zQ7XLLWCmY=)
2: Xpf8O2DfxtSRMYLfH4Jhe7jGcr4.roa (hash: mr8J89/SuXN+JPAXQsryCuEFWqmHZudkRiHUpBMVGnw=)
3: qliDDfSLIfyZKuJ9vwyYrHItz_k.roa (hash: D8mFTN20TsuGjGw8I0yHs9/gZXV7jBDiD7YQatfWrpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:26:4a:1b:57:98:19:02:07:7e:64:6a:ea:e5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8
Validity
Not Before: Jun 28 14:00:42 2025 GMT
Not After : Jun 29 14:00:42 2025 GMT
Subject: CN=3bbcf9bc92b00d0fdb4a2f96c613ea5af89ae072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:7d:a2:59:f1:f0:26:ce:c2:7e:f0:bd:74:
4d:85:87:56:ca:98:c1:ed:ed:45:14:99:51:9d:78:
03:81:d3:3e:c7:a3:4e:81:33:77:f2:62:b8:49:ad:
7e:f0:3c:47:4c:c9:1f:cf:ed:bc:84:ce:00:45:f5:
91:59:39:7b:49:e9:4c:5a:ce:a8:79:fe:32:3f:4a:
46:f2:69:5f:e6:c4:44:5a:9c:32:98:89:5d:d6:6f:
bc:23:f8:fe:69:95:a1:4a:06:fc:53:e0:75:10:18:
86:be:32:c1:a6:18:1f:fa:b5:20:11:c4:76:e7:b6:
1a:08:80:96:40:27:80:e8:97:57:01:bf:5f:6b:27:
67:2d:93:91:6d:e3:75:98:e7:9d:fc:d5:2a:03:ca:
ff:34:91:2c:61:a6:ba:7e:70:52:c7:6d:1a:37:35:
ad:10:9a:07:68:1f:b3:27:5a:f7:15:71:10:5e:72:
d2:3a:9c:2e:48:b5:d3:c0:01:b1:92:ad:a3:1d:dd:
ae:61:3e:be:37:ca:86:48:22:47:52:e5:97:51:c7:
c0:eb:ff:1a:43:09:56:73:cf:83:a4:7c:50:7c:cf:
52:92:60:7d:be:b4:70:5e:02:34:f5:8d:34:d4:eb:
68:c4:c2:bc:f2:76:f4:c4:0c:c5:bc:93:3a:7c:fb:
46:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BC:F9:BC:92:B0:0D:0F:DB:4A:2F:96:C6:13:EA:5A:F8:9A:E0:72
X509v3 Authority Key Identifier:
keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1d:6b:da:e3:1e:2c:75:ef:54:02:53:4b:00:10:eb:92:cb:
64:a5:5e:a6:06:1c:dc:0c:47:dd:5a:60:dd:05:44:7a:71:91:
ed:45:39:5d:36:1c:bb:ec:d8:00:ab:02:27:de:07:1a:bf:d4:
fd:71:ba:63:5e:06:4e:84:98:69:3b:75:72:f3:69:06:22:87:
84:5a:09:27:48:11:bf:8d:57:d8:a2:34:14:cb:03:d0:9f:de:
99:df:32:9e:4c:18:aa:d8:c6:db:03:32:83:70:85:9a:02:2f:
64:d9:ca:d5:6d:f7:d0:a5:3d:e3:b7:d1:3f:06:7a:e0:f1:7b:
88:9d:6c:f9:5a:d7:9c:44:c6:a9:0e:ed:28:ac:18:bd:70:44:
58:51:7e:ff:d7:1b:a3:a5:fb:16:84:a8:9e:05:f4:4c:cc:3d:
b7:44:ee:f5:93:5d:59:5f:95:8f:dc:e9:7c:9c:4b:eb:67:00:
bf:99:11:fc:6a:a8:3f:91:ae:bb:5f:de:77:a9:b5:91:c4:3b:
a7:0b:50:33:6c:01:1a:95:9f:b5:15:9a:82:cf:00:21:b2:4d:
ee:22:6a:a5:fe:ca:f4:e7:d6:22:94:9e:2c:79:00:c1:05:e3:
9f:b2:bb:68:5e:74:cb:78:fe:d6:ee:06:3b:49:b9:e1:5e:ac:
1a:4f:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:06 2025 by rpki-client