Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
File: QsjW8uHBvt_nu4z3nbKMjvP7d28.mft (raw, json)
Hash identifier: kXF9jXGvWlzHcRZAlAAiDQtGf3uPydWs4V+xWGSUFgo=
Subject key identifier: 65:66:D2:9B:15:03:54:7E:BE:F3:50:5A:22:EF:3C:69:A8:C4:BC:52
Authority key identifier: 42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
Certificate issuer: /CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Certificate serial: 0197B6A0D1FC4E583123640CF7EC4DA04B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:01:22 +0000
Manifest this update: Sat 28 Jun 2025 13:01:22 +0000
Manifest next update: Sun 29 Jun 2025 13:01:22 +0000
Files and hashes: 1: QsjW8uHBvt_nu4z3nbKMjvP7d28.crl (hash: exGWfT/EqMfRzrzz30380/R40pYXUduzA/9T1pJo/XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d1:fc:4e:58:31:23:64:0c:f7:ec:4d:a0:4b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Validity
Not Before: Jun 28 13:01:22 2025 GMT
Not After : Jun 29 13:01:22 2025 GMT
Subject: CN=6566d29b1503547ebef3505a22ef3c69a8c4bc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9e:2f:71:11:ad:4f:e4:7b:ab:d8:b9:35:17:
53:50:29:04:7d:a2:94:25:d3:92:a2:2b:8c:5a:60:
3f:6f:c5:da:52:e0:fa:31:e3:d6:d2:32:28:a5:69:
b4:91:0c:6b:dd:9e:95:d5:8d:c8:42:85:6a:e7:10:
2c:df:56:b6:5f:8c:08:e8:64:46:27:00:80:1b:dd:
67:bd:c2:47:bd:9d:7d:5e:08:a5:37:4d:63:84:c0:
26:b9:91:96:f7:0a:bf:09:d7:af:4a:b7:80:af:53:
c8:de:33:1b:ad:9a:93:34:44:f2:7b:c2:cd:76:d9:
25:aa:d2:05:ae:61:76:88:ae:72:4c:a0:5f:5a:3c:
84:cd:37:f2:fa:f5:0f:c4:e2:5c:47:e9:5b:67:ef:
d6:36:b8:cd:b9:83:7e:81:42:05:0c:0a:ba:03:a2:
0d:37:a1:66:0a:24:fd:dd:14:39:03:3b:85:30:0f:
d4:ac:ef:14:73:a4:04:12:ad:fe:0f:47:33:6c:23:
30:3e:2c:fb:10:5d:50:a5:85:7c:d2:19:a0:39:cc:
fa:f5:a9:69:13:be:e6:13:5d:d9:ec:38:00:f4:8e:
69:fb:bc:f1:14:3d:96:d8:17:f2:f2:c7:d3:26:22:
54:bd:3f:04:24:03:b3:a1:db:1a:c0:94:10:6e:c7:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:66:D2:9B:15:03:54:7E:BE:F3:50:5A:22:EF:3C:69:A8:C4:BC:52
X509v3 Authority Key Identifier:
keyid:42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:20:d2:1c:b2:18:a9:9a:0e:8d:88:95:55:27:bf:e5:5b:5d:
78:c8:4a:ab:b8:fd:92:03:2b:59:06:39:8e:f8:3a:26:04:cb:
a3:05:6a:9a:68:83:53:39:72:bc:00:d1:34:1e:e2:e5:6e:aa:
89:8e:c4:73:80:85:99:0b:e5:55:bc:5f:99:14:e2:cb:e2:9e:
74:7d:98:e4:df:b6:4c:c0:c1:69:c5:eb:da:d5:61:e1:9a:b9:
14:ac:82:bd:f8:6e:90:19:e6:d7:c2:02:73:7b:8c:82:57:59:
aa:5c:20:ea:55:d9:8c:61:0b:d3:fd:84:c0:17:84:f8:52:ad:
22:6d:ad:68:6f:5c:01:bd:ad:d7:f0:d0:c2:b3:46:17:5c:78:
5a:2c:e9:4c:c7:32:f5:3b:e0:5c:b9:84:c7:d6:d8:f3:a3:ca:
3f:77:19:22:25:97:26:f4:ec:16:ec:ee:a9:97:87:e3:df:99:
3c:ca:d3:cf:f3:c6:0d:08:78:b9:30:7e:1f:3a:30:00:43:32:
1f:62:7e:90:50:17:6a:42:f3:0d:a2:43:ca:fc:c0:d0:22:b0:
83:9b:a4:82:41:26:1f:3f:8a:00:3b:4b:0d:3a:3a:ea:23:f6:
00:7c:e1:70:b3:91:09:65:5c:a5:17:c3:b1:51:99:8b:74:f6:
aa:81:37:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:06:05 2025 by rpki-client