Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft
File: Q5OKPegDvWyR8UrZZ71BQbigKK8.mft (raw, json)
Hash identifier: Rx/nHNsh51V/MOogU3IyITUflSN6E8GWzU9HTlkW2Lw=
Subject key identifier: 62:E8:15:73:9E:48:2F:C6:6D:A8:9D:9A:53:2B:97:56:BC:B1:2D:83
Authority key identifier: 43:93:8A:3D:E8:03:BD:6C:91:F1:4A:D9:67:BD:41:41:B8:A0:28:AF
Certificate issuer: /CN=43938a3de803bd6c91f14ad967bd4141b8a028af
Certificate serial: 0197B77C2095A1A473F4ADE1E0E079D0B5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5OKPegDvWyR8UrZZ71BQbigKK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft
Manifest number: 12D6
Signing time: Sat 28 Jun 2025 17:00:54 +0000
Manifest this update: Sat 28 Jun 2025 17:00:54 +0000
Manifest next update: Sun 29 Jun 2025 17:00:54 +0000
Files and hashes: 1: Q5OKPegDvWyR8UrZZ71BQbigKK8.crl (hash: VFZ84tqCpyniXZsm6ct1upd5JKrQmkaGfcqJwEBFlss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5OKPegDvWyR8UrZZ71BQbigKK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:20:95:a1:a4:73:f4:ad:e1:e0:e0:79:d0:b5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43938a3de803bd6c91f14ad967bd4141b8a028af
Validity
Not Before: Jun 28 17:00:54 2025 GMT
Not After : Jun 29 17:00:54 2025 GMT
Subject: CN=62e815739e482fc66da89d9a532b9756bcb12d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:cb:55:1b:37:2b:98:77:57:b7:d2:f5:41:
63:29:b8:5d:37:56:9b:70:df:f0:5f:f1:06:82:b2:
b4:54:4e:4b:7e:d1:5b:f6:cf:9a:ba:43:1e:f2:3a:
97:5b:e6:ed:9a:0d:f8:5e:07:f3:77:b4:be:69:2d:
fa:cb:ed:91:bd:17:f0:ba:67:73:21:d0:cc:78:fe:
32:1c:88:79:e6:43:87:fc:68:b3:a3:70:95:61:8d:
e1:70:92:e2:b2:9a:b1:59:23:51:be:63:07:1f:16:
94:94:78:6c:7d:32:8f:65:9c:a9:d2:82:4d:54:25:
ba:bc:ce:74:c0:56:c6:aa:d8:aa:8e:bf:7c:7b:0a:
fa:52:eb:7f:16:15:6b:01:b2:5e:a5:6c:52:28:ec:
10:5b:c0:1d:2e:00:93:c3:85:61:5f:5e:8e:8a:59:
79:eb:50:0e:f2:50:2c:e0:3e:5e:73:84:06:10:20:
43:14:73:ee:4a:f4:23:01:96:eb:57:97:c2:2f:86:
03:ab:b1:e5:c5:fd:2e:af:5e:e6:88:d0:f9:f9:cd:
7f:7a:e6:75:5c:70:4b:ef:e2:8b:21:08:3f:d2:ec:
7f:82:ea:f9:43:d1:47:41:99:15:30:0c:fc:af:f7:
c7:b3:5c:57:9c:5d:7e:72:37:62:6b:d8:f7:0d:b2:
37:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E8:15:73:9E:48:2F:C6:6D:A8:9D:9A:53:2B:97:56:BC:B1:2D:83
X509v3 Authority Key Identifier:
keyid:43:93:8A:3D:E8:03:BD:6C:91:F1:4A:D9:67:BD:41:41:B8:A0:28:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5OKPegDvWyR8UrZZ71BQbigKK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f8:9c:91:17:9d:cd:ad:9a:cd:46:f9:35:92:ac:6f:4d:0e:
e4:18:fa:d3:6b:9a:55:ea:a9:f3:9b:d0:05:1a:c1:2e:4a:81:
15:a3:74:d2:01:ae:95:14:5b:02:f8:49:79:36:bb:ca:48:66:
4d:44:91:60:30:ed:21:a8:f8:39:e5:0e:1b:1a:0e:e7:bf:b4:
c2:4f:08:2f:72:26:77:ea:3d:54:d5:d6:ad:29:50:fd:07:02:
78:cd:55:db:7e:62:02:3c:23:3f:15:71:d8:4f:86:9f:4b:d6:
4b:95:90:49:40:04:e7:57:ef:d3:58:1c:a8:83:2f:d3:65:26:
8d:0b:16:0d:49:a4:b0:32:e7:bf:3a:c9:70:26:32:96:b4:5c:
9e:cc:a0:71:cd:ab:ac:ca:45:cf:01:04:d5:1e:6d:8c:b0:73:
0d:91:f5:16:7a:47:84:6a:62:d6:db:86:40:8a:67:ba:83:92:
6c:48:34:76:59:59:0b:6c:a6:6e:b9:d9:b2:d4:e6:51:fe:3b:
b0:46:16:76:13:46:f0:40:57:cc:d5:15:a0:14:61:4b:ba:c3:
53:e7:0a:2e:39:7d:f8:5a:93:60:8c:cf:f8:aa:8f:ee:c4:2b:
d8:95:0e:bc:a7:97:40:e6:4f:e9:4b:cb:ad:09:83:9a:eb:58:
4d:e6:6e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:25 2025 by rpki-client