Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
File: QIVi4riWGyLinHYtbJkDMbo2Zm8.mft (raw, json)
Hash identifier: tqSN5k8WyQaaZDtuP9TEweLMHSmNzPoieivtn9dhhmE=
Subject key identifier: 14:35:19:5F:31:87:63:C5:E6:E6:1F:79:29:C0:76:39:94:0B:C1:46
Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
Certificate issuer: /CN=408562e2b8961b22e29c762d6c990331ba36666f
Certificate serial: 0197B6D781AFF625F96B6436C138E9B038B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
Manifest number: 126E
Signing time: Sat 28 Jun 2025 14:01:06 +0000
Manifest this update: Sat 28 Jun 2025 14:01:06 +0000
Manifest next update: Sun 29 Jun 2025 14:01:06 +0000
Files and hashes: 1: QIVi4riWGyLinHYtbJkDMbo2Zm8.crl (hash: gTjYQEJaTB39caTdg4B1/sUrb8i8yhTBiAhXORkAL18=)
2: TH3iTyQHdiPtwrxen-ik0aBRXKI.roa (hash: 9e3J8Nl+Dc6K9RH7KE3BYQUYhRYoAJ/tNPR6z9IBOhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:81:af:f6:25:f9:6b:64:36:c1:38:e9:b0:38:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f
Validity
Not Before: Jun 28 14:01:06 2025 GMT
Not After : Jun 29 14:01:06 2025 GMT
Subject: CN=1435195f318763c5e6e61f7929c07639940bc146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2b:15:7b:eb:56:81:23:b9:90:b8:69:a9:4c:
42:55:04:f8:ce:32:42:08:22:56:a0:b7:be:42:67:
6c:82:d4:81:22:ac:57:af:42:91:ae:32:aa:a9:84:
95:64:ed:86:7e:4b:e0:e3:2e:24:d6:fd:be:ef:a0:
c7:bb:9e:0f:c5:73:3a:28:ce:df:c8:54:c9:81:6a:
36:9d:e1:2f:dd:d0:5a:eb:41:09:fb:87:cc:50:74:
2e:3a:72:c5:76:ac:5b:fa:1a:0a:44:aa:26:51:5b:
a5:40:7b:cd:77:1d:a3:e9:07:fe:0b:6d:1f:1d:0c:
21:27:96:42:de:9e:fa:16:b1:14:bd:9f:a6:34:39:
72:03:87:30:ae:f4:66:43:65:29:d7:fe:fa:df:7c:
0a:7d:db:47:92:46:b6:d1:de:3b:a2:5b:5d:a0:24:
26:d6:15:44:b3:19:4d:66:ea:64:54:a0:3a:5f:64:
bc:eb:8d:2e:84:26:90:19:ac:b5:5f:a7:26:ff:1e:
48:78:86:01:c6:39:7f:93:ab:66:55:2f:0e:ca:5d:
f1:60:f0:da:cf:0d:ee:30:8a:bb:dc:42:8a:79:43:
3d:90:89:28:ed:39:e3:b1:65:b5:f8:8f:0a:04:62:
ff:c1:cd:b4:17:7c:bf:b2:99:21:f9:15:10:4f:25:
72:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:35:19:5F:31:87:63:C5:E6:E6:1F:79:29:C0:76:39:94:0B:C1:46
X509v3 Authority Key Identifier:
keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b5:5f:83:6d:8d:d2:3f:99:94:8c:fe:c9:df:48:c3:80:e3:
c0:20:52:4d:1c:8d:28:a0:64:11:fa:bc:21:d0:2c:70:b7:37:
38:49:55:02:75:c6:06:0d:2a:7e:88:17:de:43:2a:bb:bd:40:
6c:bd:de:37:77:da:c5:4a:1a:6a:da:4a:43:2c:89:5d:96:37:
c2:9e:e9:b4:9f:a9:1e:fa:80:65:20:c1:43:64:6b:1e:a5:cc:
ce:05:e8:1f:5e:41:ab:2e:c6:24:14:97:24:62:70:f1:d8:91:
a4:24:58:cb:98:83:80:1b:f6:bf:33:f3:f7:11:2c:74:c5:32:
ea:0b:35:c7:bd:c2:b3:ae:44:c9:cd:6c:08:39:77:e3:eb:a2:
a2:28:30:ca:95:ab:44:4d:4b:60:63:af:1a:da:a4:b0:b0:8d:
70:af:7b:42:b4:25:4c:90:3f:5e:a7:73:d6:b6:57:20:e8:46:
86:34:6d:19:fe:7b:23:dc:d2:2d:4a:ae:bf:97:5d:ae:17:3f:
48:ca:09:6f:e5:b6:8b:fa:44:39:ec:c3:25:3c:a1:aa:7b:20:
32:0f:43:e9:3a:4b:7d:8c:2e:ed:60:28:6c:79:99:49:af:e2:
9e:26:2c:12:28:c7:ba:35:d3:63:72:aa:66:61:8f:28:f0:57:
02:f0:b3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:51 2025 by rpki-client