Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
File: QX7UHwrf3xmnFhTjkEwPCEmXklA.mft (raw, json)
Hash identifier: zxAl39IstYfrR0tvT+49c6Ya0odxU6h0BQ/g4JCSE2A=
Subject key identifier: 4C:21:97:2B:87:9C:3C:57:DE:13:31:44:A0:A4:FD:FA:43:8E:95:B4
Authority key identifier: 41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
Certificate issuer: /CN=417ed41f0adfdf19a71614e3904c0f0849979250
Certificate serial: 0197BA7D18B409445715611E099AC27F2204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
Manifest number: 15B4
Signing time: Sun 29 Jun 2025 07:00:49 +0000
Manifest this update: Sun 29 Jun 2025 07:00:49 +0000
Manifest next update: Mon 30 Jun 2025 07:00:49 +0000
Files and hashes: 1: QX7UHwrf3xmnFhTjkEwPCEmXklA.crl (hash: vpVDt8TakHA4Y1aQsQl9WP5LLa9rXCIQinqYL6PvkLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:18:b4:09:44:57:15:61:1e:09:9a:c2:7f:22:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ed41f0adfdf19a71614e3904c0f0849979250
Validity
Not Before: Jun 29 07:00:49 2025 GMT
Not After : Jun 30 07:00:49 2025 GMT
Subject: CN=4c21972b879c3c57de133144a0a4fdfa438e95b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:59:26:16:9a:64:c6:21:f6:be:4c:46:39:
43:ca:d2:12:c0:8b:60:b2:20:70:77:c2:cc:cf:da:
ec:37:bc:18:47:a5:b1:2d:29:fc:8d:5d:cb:11:52:
d4:7b:d6:86:0a:1f:be:06:be:68:9e:95:d1:41:5e:
39:26:06:d9:9c:80:7e:a2:d7:63:f8:53:6f:f9:fe:
0d:cf:62:89:50:22:bb:31:91:24:f5:ec:95:70:6e:
ea:f2:9b:c3:30:07:71:bc:d9:3d:37:14:1f:08:dd:
5f:42:a2:0c:04:d3:80:e0:50:57:88:0c:7a:b9:3e:
cd:be:0d:d2:21:ec:ff:d4:33:c2:0c:f6:55:0b:d6:
48:5e:cf:c2:2c:ce:c4:f5:95:e1:af:ea:25:5f:f5:
9a:e1:f1:c8:a1:13:04:db:04:10:43:92:a4:d1:9c:
ae:38:5f:98:96:a8:31:cd:3e:bf:58:25:58:32:78:
3c:b3:50:af:51:d3:74:65:29:96:72:71:1a:a6:6a:
a8:39:58:c2:2b:e7:cb:76:a0:0e:5f:81:21:21:c1:
55:5c:a1:42:ac:ab:23:05:17:d9:68:05:1f:19:9e:
b7:ad:62:4b:a3:09:21:f8:38:ca:06:b9:43:6a:89:
d0:ec:df:51:c0:16:de:ab:23:64:cb:47:93:29:14:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:21:97:2B:87:9C:3C:57:DE:13:31:44:A0:A4:FD:FA:43:8E:95:B4
X509v3 Authority Key Identifier:
keyid:41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:57:4d:aa:b2:2b:4f:03:a8:1e:40:70:00:79:b8:da:f6:44:
ef:ab:14:83:93:56:11:8d:ae:ca:8f:5f:e7:aa:c5:41:87:57:
e5:30:6d:fe:d8:a8:75:34:83:29:51:1d:8b:d7:89:83:70:86:
7e:17:28:3c:5c:ae:5f:4a:95:b8:5e:72:a4:3f:d6:e2:76:f8:
4e:7c:e3:43:19:f9:0d:e9:3c:62:94:89:34:c6:da:3f:79:68:
4d:28:6c:4e:90:fc:60:b3:c4:c8:d5:2d:38:fd:54:19:dc:f6:
23:69:ce:12:db:75:79:3d:72:21:6e:5f:71:18:8c:af:29:fc:
39:86:13:33:21:76:cf:ad:c8:56:2d:9e:38:65:dc:05:1e:fe:
45:c4:10:f7:e3:93:91:68:8d:90:60:83:d6:0e:73:14:2f:50:
6b:9e:96:44:f0:c4:96:01:96:c4:de:dd:7f:36:5e:fd:2a:0f:
7e:a0:dd:f6:e1:36:4a:41:ce:3d:08:9c:2a:26:8e:35:34:ba:
ff:d7:d2:5e:0a:32:b2:92:c7:28:57:9d:66:68:a8:64:52:78:
62:5e:80:77:6b:28:82:02:2a:97:60:96:99:2e:69:b5:66:c6:
f6:e9:b4:3f:6b:a2:f9:d7:1b:86:10:d0:db:23:a1:ac:dd:c9:
c7:4c:9f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:48:43 2025 by rpki-client