Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
File: QXYebRbr8X5XHGv3fsBr33q2ivg.mft (raw, json)
Hash identifier: 4/WRwUj4wDvlGro7vYBeb/1LY3qdvJbezaz+zZBGKfY=
Subject key identifier: 1A:4E:B4:F3:0D:9C:F8:84:2B:05:21:4D:D6:28:56:7D:87:13:BD:B3
Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
Certificate issuer: /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Certificate serial: 0197B6A0B897B28CA150D7FCB32F7BA9B37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:15 +0000
Manifest this update: Sat 28 Jun 2025 13:01:15 +0000
Manifest next update: Sun 29 Jun 2025 13:01:15 +0000
Files and hashes: 1: QXYebRbr8X5XHGv3fsBr33q2ivg.crl (hash: hin503+U9rXsTLza/a9hGLmj/+SMlCZ0bPsZmIkYwtk=)
2: kDp8o5lwoauyIIWuMVQKzWrOZfg.roa (hash: k1SzOsCV3pSTvUNttrz3FSSmM4yVZTra60XB+dEnFds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b8:97:b2:8c:a1:50:d7:fc:b3:2f:7b:a9:b3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Validity
Not Before: Jun 28 13:01:15 2025 GMT
Not After : Jun 29 13:01:15 2025 GMT
Subject: CN=1a4eb4f30d9cf8842b05214dd628567d8713bdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:49:33:32:56:6f:fc:f8:f2:bd:84:dd:81:
32:cb:e1:d5:c9:56:54:62:4a:2d:42:db:a7:a6:24:
54:e4:6a:2e:d8:80:b8:c1:cc:48:4a:24:ee:39:3f:
25:c2:38:41:59:75:7c:8c:e6:83:03:a0:38:c8:86:
25:7c:29:16:e0:3a:2e:f6:47:dc:9e:59:1e:7b:79:
9c:3b:ef:7a:3d:b7:38:5c:6f:72:26:8c:c5:7d:df:
f6:da:fd:2f:c5:e7:ef:e7:ab:ea:7c:d9:48:b0:4c:
12:5d:81:77:95:03:7f:af:01:54:7a:a8:0c:29:94:
28:4c:4d:41:e3:12:71:73:f2:9d:87:f0:68:b8:a5:
cb:81:b7:9a:2c:a9:21:f3:8f:f1:8e:1c:63:93:e1:
57:17:91:ec:70:8f:a9:51:0c:32:01:5e:ad:ab:40:
54:b2:fc:a2:dd:56:ae:6f:db:06:fb:48:62:04:67:
b2:f5:a1:f3:78:ea:d9:bf:45:34:39:94:95:7d:1a:
ae:e2:24:59:bb:51:f0:a6:37:d9:e8:a4:d5:4b:f5:
b6:af:28:17:78:8e:4e:c5:3b:ef:a3:55:d9:ac:ba:
af:bc:03:75:d9:71:62:d8:72:0d:0e:f3:96:4e:89:
f2:8a:5d:52:41:55:14:11:c5:df:f5:b0:aa:47:56:
e4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4E:B4:F3:0D:9C:F8:84:2B:05:21:4D:D6:28:56:7D:87:13:BD:B3
X509v3 Authority Key Identifier:
keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:67:62:3f:6a:30:0c:67:ff:ab:29:af:e4:6c:34:e4:37:89:
32:5f:22:42:03:65:f1:f9:1e:d1:bd:32:85:9f:c3:c5:b3:5f:
88:09:77:1a:eb:77:4e:c1:5e:82:4d:8d:31:49:b6:06:ec:fb:
d8:05:6e:d6:73:cd:b4:f4:8c:30:77:9d:cc:8a:ca:67:d1:91:
0f:7d:5b:2b:0d:1c:3c:a6:c9:cd:db:8d:70:c8:d2:1e:6c:65:
3b:01:78:66:f1:1e:1e:0a:37:d7:dd:82:85:b0:b3:ec:73:0d:
10:15:f7:fe:bc:7b:b7:a9:01:57:9f:db:c0:09:3c:14:99:dd:
fe:47:41:db:a8:97:81:2a:c3:d0:dc:d4:df:08:07:66:05:ec:
8c:38:c2:c3:e8:97:36:81:ca:0f:ab:55:5a:2d:23:5b:71:22:
17:7d:5a:10:ea:03:29:41:c2:5f:0b:e1:37:c7:5e:d8:53:19:
42:25:ef:6c:8f:d3:fb:67:b9:6d:41:72:0e:c0:ea:09:a9:2d:
aa:c5:2c:69:03:fc:43:d6:50:b9:ac:28:fb:09:71:ac:cc:cc:
a0:35:e5:2e:b4:f5:c9:63:19:0b:69:ea:10:30:2f:81:83:a6:
bf:9a:9d:1f:9e:58:03:87:db:33:c2:e0:c7:e5:91:1a:0f:ab:
3f:6d:7c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:35:58 2025 by rpki-client