Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier: 1cH+DSKwlGuc3jvBHTEgrXT/viyrI/qe+xKLRyZ2zlA=
Subject key identifier: 4F:73:53:A5:99:45:B7:CE:18:6C:65:1E:D7:55:81:46:A0:A2:CC:52
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer: /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial: 0197B6D7AC77D54B3756D2379829CA0839D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number: 0A47
Signing time: Sat 28 Jun 2025 14:01:17 +0000
Manifest this update: Sat 28 Jun 2025 14:01:17 +0000
Manifest next update: Sun 29 Jun 2025 14:01:17 +0000
Files and hashes: 1: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: iEjDQmRY4iVPMwe0oXfwG9Gx57KNrUwU32Q+xOThHO0=)
2: Y5evNC6nSTbaw2HNqlP-IIa_w8w.roa (hash: bcLU6wxFqb3pGDabhdJfOsSNGRX1c39YDi9EFe9onLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:ac:77:d5:4b:37:56:d2:37:98:29:ca:08:39:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Validity
Not Before: Jun 28 14:01:17 2025 GMT
Not After : Jun 29 14:01:17 2025 GMT
Subject: CN=4f7353a59945b7ce186c651ed7558146a0a2cc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:93:d8:c9:a4:79:93:9a:eb:03:e5:0c:7a:
00:ad:49:9b:1a:b6:a3:81:71:c3:5b:01:0e:03:11:
e5:87:90:55:29:0c:71:9c:03:32:cf:1c:7c:8d:d7:
ae:2e:43:40:d0:6b:c2:58:43:cb:a5:81:85:a8:1f:
0a:d1:16:36:db:57:1f:2c:de:fe:2e:91:b3:1f:a6:
b2:f4:cc:88:7e:3e:20:c0:d2:0d:5f:86:89:cb:9b:
dd:99:c9:82:da:02:09:63:5d:10:d0:26:5e:2e:e4:
13:e0:87:41:b0:8d:b0:15:ed:15:b3:b9:ca:3b:36:
fb:98:da:6f:3b:5f:d8:cb:c9:f1:6d:b6:3d:2f:71:
d1:e3:f5:82:9a:48:85:2b:3e:b2:ba:fa:70:01:f2:
e8:42:54:95:36:60:68:58:5e:26:4f:1f:ca:44:de:
ca:74:9a:11:09:5e:31:18:6a:60:2f:b8:10:63:41:
1e:e7:10:1a:24:a4:d6:0e:30:df:71:f7:56:74:fb:
9f:5d:c9:76:24:72:63:95:63:08:51:8a:c3:20:e1:
b7:b1:74:a6:2b:61:67:44:97:14:7c:d1:a8:cc:53:
8d:1a:19:ae:54:2a:df:e6:e3:9a:90:ac:53:d2:fe:
6f:aa:c2:f1:95:63:b5:54:0b:f9:36:d8:48:0b:e0:
ae:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:73:53:A5:99:45:B7:CE:18:6C:65:1E:D7:55:81:46:A0:A2:CC:52
X509v3 Authority Key Identifier:
keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:81:9a:22:ed:a2:50:70:bd:db:7a:70:43:a5:ea:e1:e8:04:
25:0c:cc:d5:44:2f:4d:ef:60:80:b6:a5:1e:f0:e0:06:22:05:
f5:d8:f5:30:19:b2:79:11:b4:7f:67:ee:07:d1:d8:2f:4c:3f:
de:25:18:41:fa:23:15:10:1f:3b:1c:5d:50:4e:72:9b:56:17:
44:ce:8b:6f:32:4f:fa:1e:9c:87:f6:cf:68:35:3d:65:93:bd:
a1:5f:4d:33:d2:79:53:ca:05:4a:45:bf:5d:75:7c:37:19:6f:
c1:31:0d:29:d4:8c:9d:1d:cf:d0:4d:ce:cd:d9:59:6f:50:ce:
ef:78:de:10:bc:b5:5b:3c:0f:30:1f:f5:75:9c:47:9b:74:38:
dc:09:29:3b:4f:70:e8:1f:01:b2:47:9e:3e:c4:c9:48:43:5f:
0b:1e:04:20:ff:39:3c:78:ca:e2:0e:83:e5:31:b4:cf:7d:6a:
f7:e2:fb:74:86:f1:1a:bb:92:a4:19:80:63:8c:b9:45:0e:40:
e7:d0:84:7d:b2:79:3f:a1:b3:01:d2:f3:cb:27:75:7d:51:2c:
b7:ea:14:80:0f:c6:a4:d7:73:fd:72:54:a0:74:5e:f0:b7:68:
7a:cf:f3:f6:fc:ee:4e:4b:91:7b:da:e5:cb:b8:4a:5d:02:ff:
bd:7e:ac:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:14 2025 by rpki-client