Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
File: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft (raw, json)
Hash identifier: l0cPEKilPYWp6A3jp73YtVqaNTVXVv7iFvNefWcfG0I=
Subject key identifier: EA:67:F0:4B:3D:F0:CC:66:BE:A2:88:47:E3:8C:5A:D8:95:A7:83:CD
Authority key identifier: 40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
Certificate issuer: /CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Certificate serial: 0197B8901ABB89085A384E5E6624D66912BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
Manifest number: 1509
Signing time: Sat 28 Jun 2025 22:02:21 +0000
Manifest this update: Sat 28 Jun 2025 22:02:21 +0000
Manifest next update: Sun 29 Jun 2025 22:02:21 +0000
Files and hashes: 1: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl (hash: B4srRsj2zZTNrCIxrkzza0npazvDRgaA+/m8ynNbntU=)
2: fSiDlWwoGniklT0F1na2YoYly6g.roa (hash: jQShuABqrNJ6xVnXKO1phumkAcZdn3LFktiTS8/eFss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:1a:bb:89:08:5a:38:4e:5e:66:24:d6:69:12:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Validity
Not Before: Jun 28 22:02:21 2025 GMT
Not After : Jun 29 22:02:21 2025 GMT
Subject: CN=ea67f04b3df0cc66bea28847e38c5ad895a783cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f0:2d:a2:c4:37:b5:77:cb:2f:cb:18:bb:5d:
90:33:b6:09:56:5e:fb:bb:20:de:f5:61:7c:1d:6b:
87:8d:8c:68:e5:1c:d2:d2:68:78:21:29:aa:f7:c1:
0a:e4:1a:5a:aa:1a:5a:18:86:52:f9:92:45:0a:5c:
62:f7:22:37:59:b8:13:03:8f:8e:f0:4b:74:70:ea:
59:fd:22:73:9a:e1:9a:e7:0d:37:bf:77:3b:08:f4:
34:1d:01:c4:f7:1b:db:4f:c1:b8:dc:e7:99:90:57:
84:9c:8d:75:dc:02:b6:4f:eb:ac:b7:f1:0f:cc:8b:
71:b5:77:7e:60:49:ff:96:9b:a9:1f:21:f1:65:58:
88:7f:b9:9e:0d:4d:8d:15:d2:d0:02:bb:66:ae:da:
ab:0e:f9:1c:86:fb:2a:66:dd:e5:34:cd:30:7f:b5:
1d:18:30:57:8d:e8:f3:32:45:b6:c7:ff:9d:ae:e6:
16:51:af:01:94:66:0d:f2:9f:c5:b2:76:da:c3:a7:
61:17:fc:1e:5e:cf:f2:75:0d:43:af:4d:43:17:7d:
b5:c9:81:50:0f:5e:ef:fd:10:97:4b:e9:bc:eb:bc:
d0:f0:aa:df:56:f9:60:45:48:a4:3f:df:db:dc:cf:
a7:71:9b:b9:01:40:e8:25:5f:91:a3:33:1c:b5:db:
7a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:67:F0:4B:3D:F0:CC:66:BE:A2:88:47:E3:8C:5A:D8:95:A7:83:CD
X509v3 Authority Key Identifier:
keyid:40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9a:f8:7f:b0:0e:06:a2:e6:77:5e:5f:71:69:27:f9:38:7b:
78:8c:26:7a:3a:4f:8d:ea:49:a8:78:19:fe:53:6a:7e:75:88:
97:35:42:51:68:2a:6e:4a:5b:e9:13:78:c1:c4:be:a4:9c:c1:
1d:38:cf:3e:e7:85:93:f7:4c:47:ee:ec:66:11:0e:f4:11:f5:
a9:7a:6c:6f:bb:c4:19:fa:01:27:d5:80:41:74:09:48:da:47:
8d:0e:79:54:f7:9b:45:02:12:0f:87:59:c3:11:a5:97:73:24:
8e:ab:88:82:ff:25:53:aa:8b:7c:b8:c7:27:87:12:a3:f9:d7:
91:13:7a:80:8e:cd:e2:62:dd:17:39:3c:e0:83:a8:96:d4:85:
2a:e5:bc:5c:8a:ac:7e:d8:9d:29:41:c0:f0:e5:88:2c:f2:38:
93:ba:e7:84:40:8c:1e:b1:60:3f:d5:7d:75:32:bb:58:b9:2b:
bb:e9:19:e8:39:8f:bb:8b:30:d2:14:40:26:00:76:9b:36:09:
a3:9a:d3:67:74:5e:ba:92:c5:f5:16:e1:a7:b3:14:f3:cd:0c:
65:1f:eb:01:f0:68:5e:6b:fa:80:29:de:2a:a5:69:40:1e:c4:
db:e9:e3:e6:46:f2:63:52:42:53:7a:bc:c6:75:a0:fc:a4:d8:
f4:a2:fd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:49 2025 by rpki-client