Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
File: qrHbDgCCCHbfogvsm3Gap5Wswd4.mft (raw, json)
Hash identifier: fqnGh7wX0rXQWzlWs/eef4EE3Y/p6GiS1o2lBgvvMEs=
Subject key identifier: A7:FD:9C:57:45:9D:62:BA:8E:C3:A9:67:E3:AD:E9:83:3C:0D:74:FA
Authority key identifier: AA:B1:DB:0E:00:82:08:76:DF:A2:0B:EC:9B:71:9A:A7:95:AC:C1:DE
Certificate issuer: /CN=aab1db0e00820876dfa20bec9b719aa795acc1de
Certificate serial: 0197B820D1A9FA4016C9FF513E8F9FA51750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 20:00:47 +0000
Manifest this update: Sat 28 Jun 2025 20:00:47 +0000
Manifest next update: Sun 29 Jun 2025 20:00:47 +0000
Files and hashes: 1: qrHbDgCCCHbfogvsm3Gap5Wswd4.crl (hash: G/FQrm4N1hNRkhhYCYPBMp3pL2YzKtodoZkr2Qu2I/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d1:a9:fa:40:16:c9:ff:51:3e:8f:9f:a5:17:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aab1db0e00820876dfa20bec9b719aa795acc1de
Validity
Not Before: Jun 28 20:00:47 2025 GMT
Not After : Jun 29 20:00:47 2025 GMT
Subject: CN=a7fd9c57459d62ba8ec3a967e3ade9833c0d74fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dd:06:e1:54:99:a3:93:27:44:37:dd:5d:74:
ce:4f:f5:90:38:41:9d:ef:9a:c3:9b:40:c2:8a:10:
db:8f:7d:8e:00:01:40:9f:5e:e9:59:8c:d1:7c:fb:
31:29:df:3c:b6:9a:8f:96:69:3a:fd:22:0d:a8:b1:
67:8d:37:a7:bf:2e:e0:13:4d:f8:51:2f:2c:ec:fe:
0c:ce:90:c0:fd:cc:af:9a:b4:29:39:16:41:45:ef:
0d:c7:ef:45:bf:2c:d6:28:50:a6:01:0c:9f:ec:c6:
97:b3:d8:4d:3c:4b:47:17:27:ec:d3:a6:4a:61:03:
2e:03:18:06:5d:08:b9:9b:59:51:3a:ec:96:87:6f:
4b:5e:db:3a:62:43:02:6f:6c:27:2f:6e:ff:52:d3:
c8:af:af:6f:c2:2f:7f:74:75:fc:79:c4:62:0e:6a:
0c:d8:79:fb:35:07:41:a7:0a:6d:cc:79:ec:49:51:
ba:01:69:03:36:8c:e3:3f:41:ca:1a:21:ef:a5:1c:
70:e0:b2:a9:2f:69:23:2d:e8:39:ac:58:31:40:48:
a3:bf:69:39:12:de:3f:90:30:1a:41:6f:3b:a2:52:
41:3d:f5:74:a6:5c:c6:cd:26:ca:ca:06:e9:6c:cf:
c4:fd:9f:da:4d:48:01:70:af:8a:70:29:35:69:07:
d5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FD:9C:57:45:9D:62:BA:8E:C3:A9:67:E3:AD:E9:83:3C:0D:74:FA
X509v3 Authority Key Identifier:
keyid:AA:B1:DB:0E:00:82:08:76:DF:A2:0B:EC:9B:71:9A:A7:95:AC:C1:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1e:c5:2e:27:4c:1f:96:e7:d8:17:ef:96:73:14:87:fa:5c:
25:51:7d:d3:17:57:e2:e6:10:ce:4c:39:c8:72:8f:bb:e2:83:
d0:a1:dd:19:7f:53:22:95:dc:2c:8a:62:cc:d8:51:3d:92:53:
2b:bd:ab:fb:ba:e2:56:f7:45:8a:ec:89:03:2e:14:cd:ad:e2:
0b:09:86:34:ea:b4:48:cb:6e:ac:85:42:08:51:e7:8e:0a:7a:
1d:a5:b6:5a:bd:9c:48:9a:48:ed:90:68:b6:28:ac:20:04:31:
f4:ec:03:ed:59:d1:ce:c0:3a:4c:61:c2:31:17:05:32:53:a4:
8e:0d:eb:8f:6d:df:bd:4b:97:46:5f:8c:64:1a:cf:62:3d:47:
d4:bf:2f:e8:0a:8a:63:27:d0:dc:f3:8a:de:10:21:7d:71:60:
d0:56:9a:65:bb:7b:4d:2c:b5:ad:2a:5a:52:e2:71:ae:ef:52:
0a:4c:cb:ce:6f:45:65:ba:24:84:ae:15:25:67:ce:f3:f2:17:
df:01:2f:77:3f:de:d3:29:cb:84:ef:07:01:75:13:ec:0a:07:
f6:bf:2e:bd:fd:a8:88:8c:de:dc:c7:c5:ec:9d:fd:96:5d:8e:
a2:4d:2a:c9:83:01:de:e9:f2:d3:ee:de:27:09:a1:68:ac:37:
96:84:ff:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:25:41 2025 by rpki-client