Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
File: QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json)
Hash identifier: wYqT1C1ji+JB3LthHx1tMi79xHKOi8sR5uwAQGSaQ/w=
Subject key identifier: C0:1B:48:6B:29:02:E8:BD:D1:61:96:45:A3:4E:71:95:C0:32:88:14
Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
Certificate issuer: /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Certificate serial: 0197B5FC1592932C3E6C7BAFD653440F1FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
Manifest number: 02A1
Signing time: Sat 28 Jun 2025 10:01:26 +0000
Manifest this update: Sat 28 Jun 2025 10:01:26 +0000
Manifest next update: Sun 29 Jun 2025 10:01:26 +0000
Files and hashes: 1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: 8G2rG/BH/ibhsC4vXIj2Yc+oLuveSejGIgcy+4Dh2zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:15:92:93:2c:3e:6c:7b:af:d6:53:44:0f:1f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Validity
Not Before: Jun 28 10:01:26 2025 GMT
Not After : Jun 29 10:01:26 2025 GMT
Subject: CN=c01b486b2902e8bdd1619645a34e7195c0328814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:e2:a3:8d:f7:d8:a0:db:b5:a8:17:11:0b:
22:9d:f0:d4:0d:64:8d:c3:cb:15:64:b4:05:05:3a:
de:8b:88:32:38:a2:3e:10:ab:0c:0a:da:d5:72:7c:
b4:4e:e9:3f:ed:af:de:66:ec:62:d3:ea:8d:e9:ad:
0b:47:c5:5c:65:b0:d4:be:ae:d3:df:5c:9e:89:12:
8b:e9:29:f4:34:b7:58:79:7d:46:ef:3a:3a:ba:43:
b9:e2:00:14:c3:04:8f:3c:8b:41:e7:58:48:a6:f9:
c3:b7:24:34:fb:a9:8d:7f:39:9d:a7:7a:04:00:e6:
d5:9d:02:26:f0:6b:20:06:d7:f0:06:9b:13:92:1e:
88:c1:cc:da:2e:58:13:dd:7d:ca:17:91:7d:bd:e3:
f3:62:72:f2:4e:dd:56:39:12:f9:00:d2:ff:ac:95:
f3:dc:27:28:ea:2d:5c:e5:b9:a9:1b:ec:ad:bd:37:
87:56:94:4d:e3:d1:f4:25:a7:a5:57:21:b1:c4:a3:
fa:7a:53:1c:2c:07:ef:d9:7e:4a:05:09:a8:65:6b:
d9:c3:81:ea:5f:e4:8b:ba:f9:88:17:46:85:a3:79:
29:6b:f2:c9:23:7e:40:47:78:78:00:ac:b2:91:29:
aa:b5:f5:c1:77:57:2c:15:ad:73:f3:d8:bd:2d:d3:
99:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1B:48:6B:29:02:E8:BD:D1:61:96:45:A3:4E:71:95:C0:32:88:14
X509v3 Authority Key Identifier:
keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:96:68:8d:c0:22:82:1b:83:5f:d0:b1:88:a7:88:e7:cc:fe:
e6:f7:17:46:3f:43:f7:eb:ff:53:60:46:66:0c:8b:c9:5f:1f:
1f:4e:30:ca:4a:61:b0:c2:fb:13:f0:82:6c:73:e6:d5:dd:c4:
e8:8f:93:f0:d2:6f:b3:c1:2d:89:d0:7f:ea:0f:8b:48:34:79:
44:c8:14:7d:11:94:c0:df:83:7b:96:c8:b6:7e:28:12:34:f5:
a4:a1:9c:11:5e:f9:b5:c9:1e:ed:3f:fc:b4:ea:8b:80:9d:f8:
4e:5a:9c:97:37:d3:84:e5:3e:c5:43:ab:03:95:74:2d:35:34:
a7:76:c2:af:69:dc:24:6d:b8:7f:9a:ab:d2:ac:a6:b5:75:ab:
f5:d4:e7:7d:1f:14:66:fd:18:82:82:3e:6e:35:84:a8:65:17:
5f:aa:53:bf:4b:ae:de:d8:f3:b5:b7:5f:b0:75:3e:9e:5c:b8:
8d:4d:98:27:4a:40:1c:4f:9e:10:6d:86:60:00:1c:c3:33:bd:
2d:fa:2c:37:36:81:a8:65:19:6c:63:a4:e3:43:da:97:bd:e0:
3e:1d:53:9a:27:f4:49:2a:3a:b0:ca:0b:c3:dc:0f:a2:54:cb:
98:60:a1:15:b0:a7:48:79:b2:cd:17:fd:86:59:40:33:0a:23:
cd:00:3f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:02 2025 by rpki-client