Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
File: QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft (raw, json)
Hash identifier: ord7hvegdvs9L7IUxyGEHYf35r70bgu9RtM5vW5UigY=
Subject key identifier: 76:F8:4D:B9:90:E8:34:73:D6:E4:66:12:CF:38:51:85:BB:4B:6E:0B
Authority key identifier: 41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
Certificate issuer: /CN=419a82be1e16422f9a88549af6d542481d691ac9
Certificate serial: 0197B6A1AA424A321092BE8B280CBDA35AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
Manifest number: 04A9
Signing time: Sat 28 Jun 2025 13:02:17 +0000
Manifest this update: Sat 28 Jun 2025 13:02:17 +0000
Manifest next update: Sun 29 Jun 2025 13:02:17 +0000
Files and hashes: 1: QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl (hash: umU1Xj0YQSzq5vRVjT0qrDNM+VQdLBKh5Uo0In3EqkM=)
2: ixxoDXsLiKFHG8cJ3pni9CuIWeY.roa (hash: e7F9bx5lz4I+jxRKeA3TL2cV3HxTGyF8ndmJymIUkLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:aa:42:4a:32:10:92:be:8b:28:0c:bd:a3:5a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419a82be1e16422f9a88549af6d542481d691ac9
Validity
Not Before: Jun 28 13:02:17 2025 GMT
Not After : Jun 29 13:02:17 2025 GMT
Subject: CN=76f84db990e83473d6e46612cf385185bb4b6e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:06:2a:63:87:39:44:5e:44:9d:ba:4d:2c:
e1:59:64:56:ed:d3:82:ef:16:ef:f0:75:65:1f:36:
76:be:23:cd:36:4e:1a:fd:03:b7:a0:c2:21:e8:17:
2f:07:4d:4f:a3:71:2a:4b:41:7e:46:de:d2:21:21:
85:4b:60:7e:66:63:d0:9d:d3:00:fd:a0:60:04:67:
70:3e:67:be:f0:bd:51:ae:7e:b0:da:e9:7f:dc:83:
44:b9:04:bf:54:61:9e:44:4f:ca:2d:96:b6:1d:aa:
f2:0e:12:35:0b:d6:e6:02:5d:4e:69:af:63:6d:4e:
27:c5:05:c7:bb:08:8d:07:f1:d5:bc:0d:09:5e:43:
e8:11:f5:b6:51:c5:4f:7a:f3:22:56:3a:19:11:46:
39:93:b8:9f:98:ef:e9:ec:60:31:03:f3:dc:5c:38:
ed:7d:75:8f:56:64:99:0f:48:f5:02:a4:b0:37:e0:
b6:8e:41:42:ea:09:8c:cf:73:ee:82:0c:b0:fc:c2:
7f:6c:a5:ab:f2:7d:2a:0c:bc:84:f5:4a:7e:82:4b:
14:96:9a:69:f0:3f:14:a8:ee:64:e3:56:11:3a:75:
a5:c5:78:4e:ab:0e:71:b8:87:4a:00:a8:48:c8:e0:
89:3e:a8:2e:c5:e7:14:94:70:73:26:fb:76:15:5b:
0a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F8:4D:B9:90:E8:34:73:D6:E4:66:12:CF:38:51:85:BB:4B:6E:0B
X509v3 Authority Key Identifier:
keyid:41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2a:cb:95:c8:4d:9e:4c:f7:0e:6c:12:7e:67:ef:63:38:ce:
95:3f:99:51:9d:9a:45:b5:f9:0d:a2:41:65:16:2c:cb:06:27:
da:be:49:ef:f7:5c:57:8e:f5:39:30:dd:e7:01:af:01:54:9b:
c5:f9:22:78:a2:e6:08:9f:5f:0e:78:16:c0:7e:2c:24:04:9b:
74:0b:4b:d6:b3:d0:f8:93:fe:36:06:01:41:6c:3f:4a:39:96:
08:74:a5:4b:ad:07:b4:79:7a:24:5c:d5:3b:35:fc:18:a8:e8:
34:1f:eb:56:ad:c5:5d:21:01:2f:87:f4:10:1e:58:3a:49:21:
1e:ea:17:1a:75:09:df:f1:29:21:60:bd:cd:3b:a6:b4:31:cf:
56:e4:0a:01:29:8a:ef:9e:dc:c6:64:f0:27:c7:f7:5a:c6:8d:
d1:77:4c:27:f8:f9:54:4e:dd:52:76:30:86:1d:8a:20:53:15:
32:7c:1f:8e:c0:4d:18:52:d5:31:0e:5b:fd:94:c8:29:7e:21:
e2:1e:90:88:b3:0a:87:4d:25:11:7b:a1:5e:00:dc:6c:58:47:
50:60:6e:3c:36:5a:5d:93:c3:6d:5b:33:92:e6:82:2f:06:e0:
19:a0:9c:cc:bc:9d:6d:13:ce:ae:2b:b3:bf:5e:2c:57:22:94:
3d:ee:40:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:43 2025 by rpki-client