Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier: 8D/wiA8SYBFkpE/oszk/kbUvtPHHUFzT1hfeh1JymRE=
Subject key identifier: C8:9B:B6:09:FF:82:7E:9D:BB:FB:47:B9:B3:DD:65:31:2F:36:C2:F0
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial: 0197B7455CFDA64861F598AEA4F9C980FD0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number: 14A6
Signing time: Sat 28 Jun 2025 16:01:05 +0000
Manifest this update: Sat 28 Jun 2025 16:01:05 +0000
Manifest next update: Sun 29 Jun 2025 16:01:05 +0000
Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: 9HoGvc8N1RZSYkrAKwK8ue6lh3Gd63pHCr0gj8YylnI=)
2: hyIZ79qkrdHzxjA2nqjpWKRJazw.roa (hash: uN3TIUn6uJGV9mne7uVtH2Vshh9cYXISPUulyaHzlUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5c:fd:a6:48:61:f5:98:ae:a4:f9:c9:80:fd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
Validity
Not Before: Jun 28 16:01:05 2025 GMT
Not After : Jun 29 16:01:05 2025 GMT
Subject: CN=c89bb609ff827e9dbbfb47b9b3dd65312f36c2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:68:f3:05:91:72:9c:a9:81:7c:20:2e:df:
af:6b:1d:af:e5:f5:71:1a:f5:e1:fb:21:78:76:a7:
f1:d8:34:6a:8f:21:ab:9e:ee:bf:0f:fd:55:12:24:
4d:80:6b:d8:ff:11:aa:a1:e7:7c:3b:76:b1:9a:19:
65:ce:ce:cc:35:a0:07:2a:4f:a1:f0:79:3f:7a:2d:
5e:10:6b:b5:57:89:63:6c:f6:57:04:e4:07:bd:b2:
47:7a:45:6b:af:88:ce:40:b7:1e:a0:27:93:87:fa:
02:55:83:1b:45:f5:fa:b6:7a:31:3a:b3:35:e1:3e:
62:10:bb:ec:ca:e9:63:f7:06:9f:49:6c:16:72:c7:
cb:b2:8d:9a:6d:f9:8b:69:da:b4:98:18:c4:e2:1b:
02:16:f4:85:c4:a7:26:03:6f:0b:b7:86:89:29:b5:
1d:26:a3:69:a7:f5:92:68:ca:98:8f:b0:5b:58:60:
61:1e:da:44:07:ef:d6:8b:bd:14:a5:90:f1:7b:c7:
70:f8:c9:af:d1:af:48:cd:15:50:06:cc:45:68:74:
10:71:d7:b3:35:e4:d4:06:f9:b9:95:de:e1:29:46:
ed:cf:9e:6c:53:af:80:4e:d8:e0:45:47:b4:4c:fd:
23:b6:8a:12:a7:ca:43:cd:18:ea:f1:32:54:ed:4d:
b4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9B:B6:09:FF:82:7E:9D:BB:FB:47:B9:B3:DD:65:31:2F:36:C2:F0
X509v3 Authority Key Identifier:
keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a3:6e:37:dc:74:53:62:db:1c:f8:71:47:a4:47:b3:c7:79:
d4:73:43:26:2e:66:42:75:ab:08:d7:86:22:b3:c8:55:dd:25:
05:bf:0a:51:e4:67:cc:a1:5c:24:76:ef:97:44:c8:9a:0c:b3:
9f:b5:3f:34:9a:43:64:32:ef:f0:b0:bd:95:63:d9:76:c9:b6:
70:0c:2d:48:7a:c3:3c:cb:5d:65:a1:8c:05:0a:7d:0e:fa:99:
5e:7c:f7:d3:6a:7a:cf:79:46:af:a4:91:e1:58:76:ca:10:17:
c2:9a:fb:a0:bb:fd:45:48:29:e1:7c:c4:84:f5:0b:6b:88:fb:
cf:44:79:68:ee:e0:d6:f1:03:ef:5a:b5:7b:66:e3:b9:cf:14:
41:49:42:41:49:dc:55:7b:b1:84:42:e2:5c:b8:62:2f:d1:57:
48:c3:8b:a0:ef:2f:1c:3c:29:e1:78:21:96:bb:65:78:5d:4f:
82:81:e5:da:5f:ab:ab:37:3f:fc:96:59:38:e3:c3:97:f2:be:
e1:45:cf:b6:61:6f:a9:97:2a:c6:f0:a2:01:ff:c3:8f:a0:d1:
92:97:8d:f3:fb:cd:49:02:75:7f:fa:da:ff:2e:16:52:aa:4e:
27:b8:9a:a6:a2:31:ee:ec:78:ca:55:70:df:a9:2f:5c:1b:49:
5d:a1:2c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:25 2025 by rpki-client