Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
File: QET9GYC6AXiKNTom_viVTtfBH5Y.mft (raw, json)
Hash identifier: 5d64kO02V0DmWXYKlobzFK1JeMJg1/3DROye3xaZiU0=
Subject key identifier: 9A:66:8D:6E:8E:51:15:A6:FF:B2:D9:7A:2F:C8:03:E3:C7:CC:98:B4
Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Certificate serial: 0197B5FC0A43CA8637161A9515F7827E110E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
Manifest number: 0C9D
Signing time: Sat 28 Jun 2025 10:01:23 +0000
Manifest this update: Sat 28 Jun 2025 10:01:23 +0000
Manifest next update: Sun 29 Jun 2025 10:01:23 +0000
Files and hashes: 1: QET9GYC6AXiKNTom_viVTtfBH5Y.crl (hash: kxeUIdMPXVVG5XdckP6DIPAxQLsThcIXF7ZYYLQDFY4=)
2: VF4oENC3ROv0PkRYyOKz5znS7Lw.roa (hash: VANb10DSIL8eOlHbsJ6So28/QiKbnVdpu6HtPHf6lTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:0a:43:ca:86:37:16:1a:95:15:f7:82:7e:11:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Validity
Not Before: Jun 28 10:01:23 2025 GMT
Not After : Jun 29 10:01:23 2025 GMT
Subject: CN=9a668d6e8e5115a6ffb2d97a2fc803e3c7cc98b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:61:90:96:4f:cd:9c:1b:d3:af:e6:d8:a1:
a5:8c:9f:2c:e2:89:1c:0a:9a:8d:2d:ef:83:7f:c1:
4f:bf:be:b0:85:e5:ad:af:ad:a2:e8:a6:7f:d3:28:
ae:26:1a:83:6b:e7:40:a0:e0:b0:ac:68:18:8d:f2:
d1:76:c9:02:1a:9d:0c:ba:7c:27:63:e4:75:f4:59:
e1:76:89:90:3f:82:23:65:e5:5d:75:ce:29:f8:6a:
7c:e2:65:e5:5c:e8:83:c0:d2:32:8f:9a:d2:1c:4a:
70:79:f6:c3:92:42:02:58:3c:37:d4:18:31:d7:4f:
d7:d9:f0:49:10:6f:50:34:e7:3b:4a:85:58:7d:c1:
e2:59:62:b8:76:be:74:de:69:ff:ee:c4:6b:cc:dd:
2b:98:02:27:33:0f:88:2f:7d:5c:16:00:2c:f7:96:
da:ca:85:98:5f:6d:1b:f4:fc:b7:e3:49:91:dc:11:
9a:cb:10:16:7e:0c:86:6b:30:57:0f:7f:bb:b3:b6:
f0:5a:a5:c4:6a:90:6c:b0:e3:21:a0:34:de:35:28:
b8:79:dc:f2:c5:88:27:12:fd:5d:c4:c4:af:73:76:
8a:8c:95:d3:8b:d1:13:0d:27:dd:69:8c:50:6d:c3:
2f:27:1b:da:b1:76:4f:7a:f7:8b:16:57:b4:09:23:
ff:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:66:8D:6E:8E:51:15:A6:FF:B2:D9:7A:2F:C8:03:E3:C7:CC:98:B4
X509v3 Authority Key Identifier:
keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:88:d2:80:1b:54:2f:87:f4:7a:7a:6b:c8:59:e0:52:bf:63:
5a:15:83:40:4e:29:83:81:e4:d1:db:f9:13:76:f3:09:59:87:
63:1c:12:8b:56:64:99:e1:7a:f6:ff:06:83:d0:f2:82:10:c4:
a5:f1:57:60:db:cd:2e:e6:7a:55:3c:05:a7:e6:22:d2:c6:5c:
b8:68:86:2b:ff:f0:2e:2c:9e:cf:cc:53:06:02:41:7b:9c:1c:
5f:01:e1:69:d7:62:e0:ac:28:66:0a:29:1e:91:37:94:8c:66:
cc:d8:81:f8:32:30:21:15:f8:2c:2f:c5:3c:e5:40:18:e0:2d:
c3:bf:e5:89:ef:94:e4:a7:31:a3:9d:ed:69:0f:32:8b:0a:ff:
2c:51:e8:cb:dd:96:fe:fe:e7:f5:98:03:2e:f2:b9:fa:32:7b:
9e:8f:c0:ff:61:14:b4:8f:80:1b:17:f5:eb:25:f4:02:69:c8:
50:72:a3:fb:53:07:cf:ec:3c:d7:65:7a:4b:1d:d9:cc:61:f7:
00:a1:93:76:dd:17:32:27:03:a5:2b:7c:00:77:c8:b8:3d:5e:
8d:bf:c6:c8:60:0e:84:58:a1:3f:d0:64:23:f1:c2:0a:60:2d:
d0:b4:3c:91:c0:11:09:32:c6:5f:b9:c0:dc:d7:90:0a:1d:43:
9a:75:b4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:40 2025 by rpki-client