Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
File: QYbmudH3jJTWP6yTSrmq3AyW1D4.mft (raw, json)
Hash identifier: jrR86XtG2yeldtqWSRGsx0Qd3lCig44K+AC1FZMEARg=
Subject key identifier: E2:9A:E2:1A:36:53:B1:88:9B:6F:E1:89:EA:26:21:20:62:9B:38:7B
Authority key identifier: 41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
Certificate issuer: /CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Certificate serial: 0197B70E5129EC042B982653BA887CEBE730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:00:58 +0000
Manifest this update: Sat 28 Jun 2025 15:00:58 +0000
Manifest next update: Sun 29 Jun 2025 15:00:58 +0000
Files and hashes: 1: 4siTv1cIQqiRqqbBP3me0G2tMEA.roa (hash: SDh+UpJOyjnagfNdrfriJXPS5zpz808h3YCOrbfCctg=)
2: QYbmudH3jJTWP6yTSrmq3AyW1D4.crl (hash: DbsCOD2t/KGR7Q+wPuFBVuQbPDm9n8TVuYvRe9u43B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:51:29:ec:04:2b:98:26:53:ba:88:7c:eb:e7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Validity
Not Before: Jun 28 15:00:58 2025 GMT
Not After : Jun 29 15:00:58 2025 GMT
Subject: CN=e29ae21a3653b1889b6fe189ea262120629b387b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c4:66:92:68:42:83:2d:ac:8f:6f:eb:35:89:
ae:cc:a6:11:8b:41:d1:74:06:4a:4f:c7:0f:b8:5f:
51:43:cd:ab:ec:f7:c1:a4:1e:e9:13:a3:a7:f9:fc:
15:1c:62:5d:0d:6c:fd:6d:79:44:7e:c3:de:84:0a:
d1:b8:d9:6d:70:bd:27:53:91:89:05:7e:79:29:e5:
33:58:86:8d:7e:0d:4c:f9:20:5f:c2:aa:7a:e6:f5:
3d:75:4b:e9:ae:12:41:5a:c0:2c:3e:58:a5:2b:63:
a8:ef:ac:d3:61:54:70:c6:0f:d6:b7:40:9e:95:ba:
40:4f:9e:dc:7e:1a:9c:ff:05:1d:79:57:4a:bf:ea:
4f:58:ed:3b:0a:c1:71:66:2d:0d:7c:72:0f:57:5d:
ec:ab:46:e3:0d:89:dd:a4:7c:ec:0d:d3:6a:03:31:
e9:45:2d:10:f7:26:f3:9b:3d:31:8b:7f:d0:71:21:
7e:24:76:78:c0:54:55:4f:63:b0:f3:4c:2e:4d:92:
64:23:28:ff:33:e4:83:18:ac:5c:21:b9:45:8e:46:
c8:cc:b6:c0:1b:c7:ed:ab:5f:60:64:16:cd:a2:5a:
2e:2e:ab:f3:3f:a5:70:e9:42:5c:b5:b3:6a:48:94:
62:59:dd:8a:1e:c0:70:45:87:7b:9a:02:a6:74:6c:
75:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9A:E2:1A:36:53:B1:88:9B:6F:E1:89:EA:26:21:20:62:9B:38:7B
X509v3 Authority Key Identifier:
keyid:41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:61:b9:dc:b4:12:ee:48:99:8d:de:f4:2b:fc:91:19:a6:89:
0a:43:a1:90:ce:66:f3:3a:de:54:ab:7c:be:c6:6c:79:ce:38:
ff:33:70:38:42:9e:6f:17:53:b1:28:d2:cc:93:ec:4b:f8:de:
df:cf:5e:74:ab:82:e5:15:4d:85:60:ba:90:01:63:29:71:36:
e1:51:62:67:68:55:9c:94:3d:80:29:03:f5:f5:18:fc:56:72:
77:18:e1:03:65:7e:4a:36:ca:5c:4d:90:c5:fb:85:3e:4a:f9:
bd:42:19:e2:39:60:84:21:b0:57:1b:ea:d4:fa:40:43:38:f6:
bf:12:40:d2:db:13:fc:51:e1:02:b7:b4:55:29:ef:bd:d9:bd:
fa:4d:9e:5c:6b:3b:58:da:26:a6:d6:46:e5:37:8a:5d:aa:ad:
5d:66:e8:a0:5a:7a:47:b3:11:33:3d:0f:31:81:bc:18:a4:d7:
ef:1c:cf:db:58:f5:30:df:40:cd:78:b5:80:07:4e:4c:25:92:
e5:78:86:c9:63:f4:61:1a:90:f4:51:c1:9f:8d:6a:4d:b2:dc:
66:bb:c2:27:31:2f:62:8d:9f:e8:5c:83:f9:14:c9:f4:df:32:
3d:b4:f3:5b:32:fd:71:87:7a:d2:79:bd:81:c1:c8:60:1f:52:
74:b0:9b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:36 2025 by rpki-client