Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
File: QpBWwzjRbJLN_aHlXQk2givFDNI.mft (raw, json)
Hash identifier: Gz/ZmophbdFsOznhTkgfJ2iPogHYiKcv3nIfH+TN6/o=
Subject key identifier: 75:B7:D2:CB:65:4E:85:8A:70:C0:1F:0A:5B:16:83:09:5D:9B:45:22
Authority key identifier: 42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2
Certificate issuer: /CN=429056c338d16c92cdfda1e55d0936822bc50cd2
Certificate serial: 0197B7453BD60F2A9B0AB299D842574D917B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
Manifest number: 044A
Signing time: Sat 28 Jun 2025 16:00:57 +0000
Manifest this update: Sat 28 Jun 2025 16:00:57 +0000
Manifest next update: Sun 29 Jun 2025 16:00:57 +0000
Files and hashes: 1: QpBWwzjRbJLN_aHlXQk2givFDNI.crl (hash: AijHqCUtYNOMfIr5svysU7IGDRDI1wBQtt+M8wLsM3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3b:d6:0f:2a:9b:0a:b2:99:d8:42:57:4d:91:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429056c338d16c92cdfda1e55d0936822bc50cd2
Validity
Not Before: Jun 28 16:00:57 2025 GMT
Not After : Jun 29 16:00:57 2025 GMT
Subject: CN=75b7d2cb654e858a70c01f0a5b1683095d9b4522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:32:f4:79:33:7f:04:0c:49:47:f6:1a:f7:f9:
bb:9a:af:41:cf:f7:1d:3b:65:78:32:a7:11:44:77:
99:c8:11:b9:9d:c7:4c:d2:55:8a:f0:5f:a3:d4:b5:
a3:2f:5f:69:1a:a6:ab:09:3a:39:77:39:d7:de:a6:
4e:ce:da:16:fa:75:f6:c7:24:20:24:6e:0f:2c:d9:
9e:41:57:e2:b9:09:6a:d1:9e:f5:ec:31:17:0c:3c:
3b:80:55:fd:8d:7c:7b:0a:52:f1:31:cb:de:52:cf:
eb:f5:d9:56:62:a7:5f:ce:4a:f9:7c:73:8d:9a:8e:
19:66:9a:9d:6a:ca:d6:79:10:a6:18:fe:7b:bf:bc:
d7:89:21:82:d5:40:15:cc:58:38:2d:76:72:88:3d:
cf:1f:6d:e5:2c:76:89:29:6e:51:1f:14:f4:fc:ec:
51:d1:9a:2f:25:11:1b:1b:6d:9b:fe:c8:39:d2:b7:
01:4a:8c:48:85:55:3a:cb:8b:be:9c:36:ab:c4:39:
3c:78:67:15:49:86:05:83:c3:f8:ad:76:fa:f0:64:
f3:4d:da:27:27:9e:59:48:bf:ff:19:42:20:f0:86:
19:21:27:bf:41:e9:5b:50:b2:24:57:10:63:58:2c:
81:bd:4c:ad:e2:0c:66:a0:08:4e:33:61:a2:26:7f:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B7:D2:CB:65:4E:85:8A:70:C0:1F:0A:5B:16:83:09:5D:9B:45:22
X509v3 Authority Key Identifier:
keyid:42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b5:f4:82:85:80:b2:11:e5:3c:f2:8e:d4:cc:85:39:76:22:
72:f4:9a:59:42:a9:1c:02:c8:22:74:26:90:68:e0:cd:35:4b:
15:0a:9c:cd:ea:6b:47:94:81:23:94:10:cb:74:f3:fd:66:9f:
f4:b7:c0:fc:95:85:57:3b:fb:ff:50:fa:f8:4a:3b:64:c1:24:
ad:f6:c7:80:58:5a:dd:15:cd:2c:3c:65:5a:5a:7d:e2:99:e6:
3b:bd:43:5e:64:38:b3:3b:3e:49:cb:f5:fb:1c:43:5c:b2:16:
44:3c:b6:86:c1:aa:3a:25:e8:20:9f:77:78:d0:33:16:12:3f:
e1:46:5d:b1:b3:0c:1b:3f:ee:53:2e:74:02:e6:16:99:42:9d:
4c:74:cc:c7:4c:31:04:df:83:b9:fb:c5:bc:c9:fe:2d:9e:d8:
82:9d:a7:97:7a:8d:47:5d:65:aa:39:78:cc:59:a4:8e:9d:ba:
e7:d2:63:72:85:e5:8b:e2:3b:02:0f:77:89:4c:68:14:25:b4:
21:8d:eb:48:d8:ba:2a:b7:a5:a5:6a:74:3c:96:24:e3:b6:ca:
ac:25:ca:e2:b5:29:74:ee:25:88:bd:a9:dd:66:83:02:a3:5f:
4d:56:54:7e:24:7d:aa:65:eb:18:20:62:ac:35:5a:01:72:8e:
a9:e9:2b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:16 2025 by rpki-client