Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: bdF+34v1UeHz/oCP2Ky07uuvve1tDkiwe4chjVeeWYU=
Subject key identifier: 0E:CB:71:D9:81:E9:F1:DD:19:36:E2:52:E5:93:92:9E:0F:0D:7E:E4
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 0197B8212A1FE7E0A9CC9E3E307C6B6927B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 12F2
Signing time: Sat 28 Jun 2025 20:01:10 +0000
Manifest this update: Sat 28 Jun 2025 20:01:10 +0000
Manifest next update: Sun 29 Jun 2025 20:01:10 +0000
Files and hashes: 1: F6ObM6UnximfbwiH1YL38MiUlBY.roa (hash: FMTxgNBaoS8PjWTC2HJz86nipqDf/pRuOEnb+E3AC9c=)
2: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: i7QqXEjpv4VdXpqpiSz+bnT8Ifd1C6zC3/2Y3i/9wXs=)
3: sf13oGu2DAluNtQ_y1zSmgQAeHE.roa (hash: gqTUmbOHfz421/G+vBG6eJTQ7lB+mn9m4coW+T9SV2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:2a:1f:e7:e0:a9:cc:9e:3e:30:7c:6b:69:27:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Jun 28 20:01:10 2025 GMT
Not After : Jun 29 20:01:10 2025 GMT
Subject: CN=0ecb71d981e9f1dd1936e252e593929e0f0d7ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:c9:3b:9e:bf:c9:41:16:82:e7:92:be:ac:
b2:86:3d:6b:71:60:70:8f:fd:96:2c:bf:c8:cd:f2:
e2:e0:e4:38:f3:1e:c7:df:19:62:0f:e5:66:10:4e:
a6:6c:2d:47:9e:a8:20:56:0a:ab:76:ee:73:63:8f:
09:d4:21:15:be:b8:ee:c1:38:04:0c:c3:fe:9d:b2:
79:7f:5d:b2:6a:57:20:df:ea:95:85:2d:20:a1:3d:
c8:5d:b8:a0:85:21:de:9a:35:40:45:0d:96:ab:0b:
e4:35:36:59:43:e5:14:df:3b:26:29:d8:ea:30:7f:
61:fc:cd:d9:6b:3f:81:70:ad:45:03:95:cb:df:11:
82:9d:28:77:5f:d9:77:9e:40:2a:9f:79:49:ee:a0:
f3:e3:c0:1c:00:32:82:30:9e:62:dd:69:74:d0:b5:
e4:c0:84:bd:de:5b:67:2c:fd:b3:25:5b:da:cb:62:
07:52:47:3f:53:c4:bc:76:1c:56:e8:f4:46:8c:8f:
5a:17:9a:b1:81:b6:ab:3c:fc:2d:45:3c:e2:5a:ef:
bb:20:ac:9b:ec:6f:bf:69:23:7f:83:7f:a3:33:53:
88:02:f4:2f:e5:20:a5:7f:a7:b8:e7:28:d3:a2:81:
37:cf:3a:eb:64:4d:eb:87:f9:e2:05:d2:51:78:5d:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CB:71:D9:81:E9:F1:DD:19:36:E2:52:E5:93:92:9E:0F:0D:7E:E4
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1a:ce:e3:c0:0d:7c:0a:3d:fb:aa:42:60:12:b4:24:df:1f:
bc:a6:ad:87:c2:f8:c6:c1:b8:ee:f8:32:49:ef:bd:a9:ba:92:
0b:3b:ee:e1:78:8c:31:f7:b1:5a:87:f6:e1:19:f5:f2:ce:73:
07:eb:20:a5:89:be:0d:31:f3:4c:bc:e6:d4:a4:7b:41:b3:9e:
84:71:fe:36:eb:a3:e6:e8:49:5c:11:8f:f7:06:03:cd:58:d3:
f1:f4:0b:59:82:af:90:44:d9:6f:df:8f:a0:81:8c:29:9d:7d:
64:c7:51:66:05:c4:c5:8c:cb:b4:bd:a2:a0:f0:de:c4:9b:e6:
97:cf:f9:21:0f:e6:10:44:9d:b0:e7:0f:0a:82:ab:91:48:f7:
a6:e9:41:73:31:24:93:39:39:76:46:e0:b4:9a:ea:bc:41:8e:
b5:9f:75:ae:ec:4c:9b:a7:76:26:d5:1e:5f:2c:5c:44:4c:56:
f7:aa:de:ef:15:fd:e2:4c:d0:33:e2:d0:3d:d0:fa:4e:16:ff:
ce:0d:3c:0c:9d:b6:7f:ce:f3:c3:7c:d3:15:c1:70:a3:e5:f0:
ec:f0:fe:eb:b6:6c:48:b3:b1:8b:5f:21:0a:d3:1c:39:ba:1d:
7d:69:bf:a6:13:8b:53:80:f2:85:f8:1d:04:10:00:f4:d5:c5:
fb:75:62:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:53 2025 by rpki-client