Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File: QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier: sI+OV+GezD6fLbFHTi7FWtgq7FSFt9d6Gkb/ClE7z/8=
Subject key identifier: 25:95:CA:DC:D7:96:40:F3:D6:02:C9:FF:AD:A8:9C:72:6D:28:35:D9
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer: /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial: 0197B89019D2A80FAC56101215F6F3668C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number: 09C3
Signing time: Sat 28 Jun 2025 22:02:20 +0000
Manifest this update: Sat 28 Jun 2025 22:02:20 +0000
Manifest next update: Sun 29 Jun 2025 22:02:20 +0000
Files and hashes: 1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: NAPeuNFje0WxRt7CC0p7KbIJBuazIMdPEbLWQpPwTCo=)
2: e4JEVh_6cDhCUoHK96y7TvtTEf0.roa (hash: xuBEIWySS4QJ6iOhH7VSUCCJB986bi0LqcmYz8ug3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:19:d2:a8:0f:ac:56:10:12:15:f6:f3:66:8c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Validity
Not Before: Jun 28 22:02:20 2025 GMT
Not After : Jun 29 22:02:20 2025 GMT
Subject: CN=2595cadcd79640f3d602c9ffada89c726d2835d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:42:30:34:1c:12:db:0d:a5:81:79:1c:03:13:
d1:13:d8:99:c2:c2:f0:27:57:d4:c3:01:ee:af:95:
46:ed:ca:25:d3:62:c9:f3:de:c7:a6:10:bc:3c:37:
93:77:83:3e:8d:d7:97:21:95:32:6b:53:2c:a8:96:
2e:28:2e:3f:98:95:6f:08:b0:5c:ef:d8:fb:6f:c1:
7e:9a:1a:f2:2f:a8:24:f5:8c:71:76:6e:2c:f3:d6:
0a:6b:8a:52:72:d9:bb:d4:a2:c8:78:c1:58:4d:e5:
52:39:8c:9f:05:26:3c:de:f0:e5:62:46:36:3d:ae:
bf:5b:89:47:4a:5d:7c:75:d5:67:37:d4:43:03:8d:
a1:80:25:13:67:8f:10:7e:4f:d6:b0:4e:d8:a0:93:
43:83:d8:15:40:e5:c3:af:af:8f:49:c2:20:52:d9:
24:8f:57:95:38:96:79:a3:5b:ce:1a:c1:64:5b:69:
77:e6:44:b9:ef:83:a9:c4:c5:2d:83:cb:48:23:83:
0d:50:13:14:f7:2b:ee:38:7f:e7:93:ed:1e:fe:66:
9e:27:5a:8e:56:2c:07:6b:98:92:01:9d:67:a9:6c:
73:50:99:dc:b1:ca:75:ed:7d:ee:f2:cd:c3:ee:96:
e4:ae:8d:9f:0d:fb:19:28:5a:da:11:57:e8:72:98:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:95:CA:DC:D7:96:40:F3:D6:02:C9:FF:AD:A8:9C:72:6D:28:35:D9
X509v3 Authority Key Identifier:
keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d5:12:79:03:35:3d:f5:83:64:3c:96:8d:5e:03:69:b8:28:
71:2c:e0:3b:18:7b:03:75:79:f9:91:6e:10:49:4a:d8:e5:04:
de:eb:71:26:50:21:a3:ca:a6:c1:6e:40:6a:a0:13:25:f2:d1:
51:b2:f8:9a:df:94:10:25:ab:9c:12:ab:04:73:ac:3d:b9:21:
02:3c:09:83:56:2c:19:64:49:2a:c7:2c:b6:33:f6:94:a2:d8:
b6:2b:41:96:07:c0:8c:b6:ba:7b:f7:0d:1a:4d:54:2f:c5:0b:
66:a6:24:7c:c8:fa:ec:64:7c:f7:af:e3:8d:73:a0:2d:0c:5f:
ec:d4:d4:29:55:0a:18:d2:b0:04:f6:90:30:6c:18:71:8a:4f:
3e:9e:d8:a4:12:05:99:54:88:6f:2d:34:13:82:91:7b:3c:8e:
3d:52:1b:d1:c5:62:28:12:8d:80:aa:24:97:53:b1:11:fc:eb:
60:81:29:8a:60:7e:29:a5:7c:dc:c3:6e:7c:45:4c:54:06:c7:
54:46:e8:36:7e:63:8b:31:47:ab:99:22:21:18:c4:29:bd:8d:
4b:b8:1f:1b:e4:77:b3:c1:77:0a:75:58:f9:fd:fb:16:8a:17:
97:f8:bf:4f:3f:ba:18:49:58:b7:d7:c5:a6:9c:53:9b:04:81:
26:46:c1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:01 2025 by rpki-client