Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
File: QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json)
Hash identifier: EGIagLEt71KEJpHi3K178em7UUKzPoZ8CelXs7kv8UU=
Subject key identifier: 3F:EC:60:17:0C:B9:58:A7:16:DA:57:9C:A4:03:AD:3A:9C:55:C6:87
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial: 0197B632C7E7E7572357499E0EF2A1FE7136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
Manifest number: 0210
Signing time: Sat 28 Jun 2025 11:01:10 +0000
Manifest this update: Sat 28 Jun 2025 11:01:10 +0000
Manifest next update: Sun 29 Jun 2025 11:01:10 +0000
Files and hashes: 1: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: smdtG2V0jn/fwQbGhTTG86SvkniueHJWT1r0jg2rQrY=)
2: WCgPWBd35wh97MLu1FH7BL7RkHc.roa (hash: 4LSeeV2arU0BH2mW0bKarXB0zBUuhKYPFKDtO5BDvYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:c7:e7:e7:57:23:57:49:9e:0e:f2:a1:fe:71:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Validity
Not Before: Jun 28 11:01:10 2025 GMT
Not After : Jun 29 11:01:10 2025 GMT
Subject: CN=3fec60170cb958a716da579ca403ad3a9c55c687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a4:71:27:a8:50:a0:63:3c:f1:ee:0a:10:e8:
22:28:ba:59:fb:9b:0d:1a:1a:56:89:2a:0c:dd:34:
e5:13:2a:c3:4a:be:5e:5b:d7:10:82:25:5b:87:b2:
ad:3a:fe:4b:d9:12:0b:47:69:52:89:a5:87:cf:66:
6e:3e:b2:64:35:35:36:10:d8:22:14:38:1a:2e:bc:
d0:60:2b:ad:bd:2c:94:e2:0c:6a:d8:27:9f:25:18:
1b:e1:8c:30:0b:4b:e4:30:18:43:fe:54:16:fb:b2:
19:25:47:3d:0f:7f:3b:fd:25:cb:e5:9a:aa:a2:26:
1d:ea:7e:27:2f:53:13:13:b2:ad:87:a8:7b:6a:20:
75:ab:4c:d8:90:fa:0e:7b:ee:71:de:c1:16:dc:31:
02:b9:47:f3:2c:4a:53:57:17:a9:ae:c3:76:d2:82:
e1:c1:3b:b1:fc:90:59:2f:c1:89:9b:f1:b0:2b:4a:
df:6f:28:0e:76:37:be:bb:c4:bd:89:c3:0b:1a:14:
fa:ba:d7:71:2c:1f:f0:6d:e2:a7:e5:77:b2:a8:0f:
1e:0c:0c:a1:d9:92:6c:93:c8:69:07:bf:a9:ed:04:
85:c8:aa:ee:65:ab:5a:2b:a9:fc:8f:1d:70:55:67:
00:47:87:a4:2f:17:a0:35:de:78:a7:1e:79:d2:fa:
b4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EC:60:17:0C:B9:58:A7:16:DA:57:9C:A4:03:AD:3A:9C:55:C6:87
X509v3 Authority Key Identifier:
keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d4:f8:1a:5a:12:bd:7e:8c:0a:f4:61:f9:7c:8d:65:de:9c:
85:76:40:48:7e:09:66:5e:87:cd:45:97:b8:74:38:80:8e:15:
48:f1:16:cf:e4:a2:c7:63:b3:4a:ff:b2:b8:33:22:af:e8:18:
07:7a:36:07:2c:d6:7f:f5:d4:66:db:c5:22:e0:59:de:66:e1:
99:93:f6:4b:60:7b:ab:ef:61:1b:ac:da:c3:a7:66:55:ce:c8:
96:b3:a4:a1:aa:a2:80:fd:d0:5c:a0:4d:07:57:e6:90:a9:80:
bf:b8:59:29:44:90:c6:77:ee:b7:70:96:41:52:e1:0c:e3:e1:
97:b2:15:59:81:50:0e:17:a8:77:62:12:8c:24:a4:da:3a:32:
83:a5:aa:ca:2a:81:f8:6e:71:ff:b6:33:6a:c1:6d:47:cc:d0:
91:03:ad:ab:e8:92:44:ef:bb:df:87:28:1f:50:31:f7:bd:52:
d5:a8:73:81:f5:fc:4c:53:28:03:a2:19:5d:0e:dd:7d:57:55:
2b:d6:6c:a6:26:88:b0:1a:6b:b1:bc:98:17:a1:20:75:5a:13:
72:01:13:3b:4d:5f:6f:12:ac:20:57:05:23:3c:be:0a:b7:86:
0c:0f:80:82:ab:1b:11:4c:70:74:96:fb:73:b0:3e:2e:86:9b:
bf:61:c9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:25 2025 by rpki-client