Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
File: QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft (raw, json)
Hash identifier: EIgsz9ZYuIYppTKzyXqcTTgGCte65qRVBmepiylzHr8=
Subject key identifier: 35:AE:02:A1:71:FA:4B:17:5A:FB:0F:B4:0D:7D:D9:F2:67:00:4C:5C
Authority key identifier: 41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
Certificate issuer: /CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Certificate serial: 0197B745062C49B07074FCBC007CF33E535A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
Manifest number: 0C9C
Signing time: Sat 28 Jun 2025 16:00:43 +0000
Manifest this update: Sat 28 Jun 2025 16:00:43 +0000
Manifest next update: Sun 29 Jun 2025 16:00:43 +0000
Files and hashes: 1: 2jf60Yjy6HLBv6d8yR7rie7dcvM.roa (hash: KUJJAA4N19gfVcdXpDwoxv1pVLrdLYxvm5tedzjrpBo=)
2: QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl (hash: kEZQwVBEOU4G8x1BYnrIiwzu+SAPdQCgNe7FKAcoHj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:06:2c:49:b0:70:74:fc:bc:00:7c:f3:3e:53:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Validity
Not Before: Jun 28 16:00:43 2025 GMT
Not After : Jun 29 16:00:43 2025 GMT
Subject: CN=35ae02a171fa4b175afb0fb40d7dd9f267004c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:ed:0d:50:6c:5d:99:0f:fc:44:9f:73:8f:
d1:82:32:89:6e:96:43:d1:0d:50:7e:ff:14:ea:d5:
5f:63:2b:69:31:c8:75:e7:2e:b7:bc:90:28:74:c0:
88:c8:47:5b:47:2f:4e:20:e9:d8:65:6c:30:84:fc:
1d:a5:d8:c8:9c:02:15:95:4c:28:3c:fb:1f:7a:d3:
c7:a3:e4:b9:3a:dd:c9:84:e2:b6:b2:d3:39:3b:2f:
1a:64:39:df:fa:89:98:c4:a3:61:ae:88:78:9f:72:
20:cd:0b:8a:77:40:49:2f:ba:fa:e8:5e:22:fb:1e:
fc:95:2d:28:00:74:e3:2b:37:24:7d:b6:28:c5:28:
06:29:59:e3:18:95:e0:67:74:80:67:41:06:ef:18:
4f:b8:84:a9:f1:af:95:4b:a4:c4:8b:0f:c6:60:8e:
f8:d5:1c:85:65:86:e5:73:d2:ee:14:8e:29:7c:9e:
8d:07:29:72:bb:12:9d:b2:52:80:07:4e:eb:ff:4b:
33:4b:9e:3f:3f:67:ec:b3:d8:c4:0c:b5:bc:95:ee:
8c:47:f3:46:c7:27:f8:05:ec:7d:3a:f0:55:76:ba:
8c:e8:31:8f:f4:8a:28:3d:6a:ee:f6:ec:ff:96:ae:
3c:af:22:d7:90:85:02:c1:52:df:d7:2f:6b:2b:c1:
29:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AE:02:A1:71:FA:4B:17:5A:FB:0F:B4:0D:7D:D9:F2:67:00:4C:5C
X509v3 Authority Key Identifier:
keyid:41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:72:b5:79:07:f8:6a:cf:db:a8:5c:5d:00:92:88:a8:95:63:
a1:f4:3a:b2:09:38:33:f3:c4:a1:af:e3:77:91:bc:6a:0c:24:
25:16:41:ed:78:3b:8d:08:78:de:b9:bb:f8:05:ef:7e:29:bf:
31:a2:38:b3:92:aa:19:d0:1a:3f:61:8a:8e:14:f9:66:1d:bc:
ed:61:13:2e:1f:7d:43:e3:5b:bd:a8:8c:16:90:f8:05:61:9e:
df:2b:23:0c:19:1c:42:78:33:59:f5:0d:72:84:f4:be:75:5c:
3e:7b:05:5e:c1:1f:a4:a9:e6:d9:a8:12:5f:ea:0e:0f:85:ea:
e4:a3:8b:63:e4:b0:12:da:51:2a:57:40:b4:82:7c:48:75:24:
79:3a:2a:b9:99:3a:78:77:f3:80:15:8e:87:1d:4b:54:7d:76:
c6:10:44:58:19:0a:43:3c:85:86:cb:8d:9f:20:5c:cf:8e:f1:
a1:f0:82:1c:b4:42:4f:ce:f3:75:8d:fd:f0:26:63:fd:94:0b:
73:9d:51:b0:6e:30:02:8a:0a:9b:bf:47:45:9c:25:91:31:5d:
f8:9b:c0:0c:c4:0d:1f:42:dd:4a:54:39:3a:2a:94:cf:80:37:
1f:91:9d:c4:56:34:c3:8b:8a:c7:92:8b:cf:3b:91:c5:15:37:
de:52:fa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:52 2025 by rpki-client