Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
File: QWkOI5DpC72N5AIYrSIeCTvM7L8.mft (raw, json)
Hash identifier: jEo9V1KNJ6S2NgGNV5bONrI4GN9ijuMbHYpakSd8yyk=
Subject key identifier: E0:06:99:62:09:0E:BC:7F:2B:AB:25:55:A5:18:38:20:92:55:21:E6
Authority key identifier: 41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
Certificate issuer: /CN=41690e2390e90bbd8de40218ad221e093bccecbf
Certificate serial: 0197B6D7274BFC71CA4D685BD5723BCF12B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 14:00:42 +0000
Manifest this update: Sat 28 Jun 2025 14:00:42 +0000
Manifest next update: Sun 29 Jun 2025 14:00:42 +0000
Files and hashes: 1: QWkOI5DpC72N5AIYrSIeCTvM7L8.crl (hash: 1AEsSzTAs2baHbSQzwrchVlXm6oBjPlYzwbDAlBRViU=)
2: nsNEVxRNRAqK4M0HqDeGc01kd4k.roa (hash: u9cSwFwr5XiNLEjBeMMlXHN1pLGlDX3Y3bL8f/eEp3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:27:4b:fc:71:ca:4d:68:5b:d5:72:3b:cf:12:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41690e2390e90bbd8de40218ad221e093bccecbf
Validity
Not Before: Jun 28 14:00:42 2025 GMT
Not After : Jun 29 14:00:42 2025 GMT
Subject: CN=e0069962090ebc7f2bab2555a5183820925521e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:64:05:3e:b1:08:8a:95:d5:e6:0c:14:a5:0f:
47:56:5c:bc:a6:96:7c:5d:ad:62:7e:6b:94:ac:82:
53:c6:99:c6:3a:5c:0c:c5:38:b2:4c:b7:d8:13:db:
95:c2:de:1a:35:70:55:e7:13:5d:48:7f:fc:11:2e:
1a:1d:89:cb:72:f7:4b:ff:b9:ba:e5:7b:60:37:ce:
00:e0:76:b7:d8:f2:b2:63:4a:96:39:68:08:f4:a6:
d5:63:7d:95:7d:11:fd:3a:3f:cc:09:0c:0b:10:2a:
71:3e:51:74:af:99:e0:be:66:13:0f:24:6a:4c:7b:
ca:78:da:70:df:98:f0:7f:10:99:57:8e:e2:5d:2f:
9b:ec:29:3b:ce:9d:23:1c:ca:36:26:3b:eb:2f:28:
79:79:cc:d0:80:de:a9:8d:29:b5:76:43:55:5d:08:
cf:62:c7:1f:87:f7:f9:80:c1:d2:ec:0d:22:10:9d:
f6:29:c2:0c:31:6a:ba:9d:81:ee:18:89:e1:0b:34:
45:af:12:f0:7d:38:b8:5f:56:93:81:d6:b0:84:5c:
04:50:62:39:8f:20:1f:15:e6:24:b7:b3:18:86:8d:
02:92:b7:9f:ba:3c:9e:12:2e:01:f0:bc:a1:65:ff:
fe:b2:6a:b5:f1:b8:6b:8a:55:d1:c9:d2:10:15:b5:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:06:99:62:09:0E:BC:7F:2B:AB:25:55:A5:18:38:20:92:55:21:E6
X509v3 Authority Key Identifier:
keyid:41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:55:f2:92:16:90:a6:52:5c:b4:80:50:07:8d:ac:21:29:c6:
00:74:90:d1:bb:b1:c4:6a:e7:40:8c:6a:f6:4f:3a:df:27:ff:
8c:6e:74:14:fa:a6:fd:a6:25:a4:62:24:d8:b8:4b:39:2d:54:
8c:e7:82:f4:a6:23:75:e1:81:b2:8d:49:65:05:af:5e:86:ac:
34:c5:2d:32:27:5a:9c:31:32:be:98:6c:dd:88:c6:7e:ee:46:
e6:6f:ba:ae:10:f1:3b:47:46:ca:61:78:17:0b:20:e9:4f:41:
29:b0:5d:a5:90:d2:ac:6f:15:a0:58:f1:a1:02:cf:70:4b:06:
d1:b8:a6:6e:f8:a6:52:c9:f4:55:c3:cc:76:af:01:c6:64:51:
41:b8:a8:ce:0d:d8:d2:c5:80:8b:dd:9e:b3:b0:e1:f1:bc:c1:
ce:b5:3b:52:74:f5:63:0a:62:ca:cb:0c:69:09:e3:f2:fb:db:
1e:9c:31:67:e4:07:d4:d7:f2:69:60:60:a3:e9:6b:35:5e:6f:
24:2f:ce:4e:fd:3d:b3:57:58:0b:21:db:69:6b:c8:5f:41:27:
be:be:23:93:68:48:6a:48:32:96:88:ca:ce:ed:54:b3:fb:ac:
91:49:9b:b2:e8:1e:77:4f:b6:ed:e3:de:ea:b2:ba:52:51:c8:
73:55:84:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:21 2025 by rpki-client