Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
File: Qfg9IXNOBVXHoTxIVhygt3V6ago.mft (raw, json)
Hash identifier: 8NhVNF2zEhfcTe9N6KLPbTWLZUBxvLmQC3vDPOtX7aU=
Subject key identifier: 5E:9A:70:2B:A1:DD:7C:10:DF:7F:39:FA:A2:C1:D3:0F:E8:7E:23:00
Authority key identifier: 41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
Certificate issuer: /CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Certificate serial: 0197B6D72EFD0B402C1D8ABFD6B6A5ECF7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 14:00:44 +0000
Manifest this update: Sat 28 Jun 2025 14:00:44 +0000
Manifest next update: Sun 29 Jun 2025 14:00:44 +0000
Files and hashes: 1: Qfg9IXNOBVXHoTxIVhygt3V6ago.crl (hash: HHzCzPSCvSEUMVNWOLblJ0TP5LEiZnXIOBda6+ka26I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:2e:fd:0b:40:2c:1d:8a:bf:d6:b6:a5:ec:f7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Validity
Not Before: Jun 28 14:00:44 2025 GMT
Not After : Jun 29 14:00:44 2025 GMT
Subject: CN=5e9a702ba1dd7c10df7f39faa2c1d30fe87e2300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:0a:82:94:e0:da:ee:41:b5:af:52:d1:64:
0e:1b:a9:d7:c8:58:ad:48:07:98:dc:2b:14:6b:15:
9f:c3:85:34:70:81:f0:fc:ea:45:54:1d:c1:28:58:
e7:b2:d3:cd:18:7c:e7:8e:a6:f4:99:b0:ca:62:24:
e0:55:c8:ad:cd:25:f1:99:61:9f:9e:11:2a:ef:37:
da:e2:fa:52:02:4a:2e:84:15:99:c6:81:d3:96:f7:
5c:d3:90:8d:3e:7a:ff:7e:0e:06:9f:40:7a:bd:89:
2f:d5:6f:ea:d6:ff:a7:72:8a:c7:22:43:44:9c:86:
e7:a3:a9:fe:e9:f5:5f:52:4c:94:a8:86:33:27:e7:
0a:2b:0c:69:87:c2:ee:c3:41:d9:bd:9e:cb:4c:3d:
c0:73:5d:46:1e:01:d9:e7:0b:c5:cb:23:3f:03:fd:
fc:3a:b8:39:f3:52:36:99:98:82:44:53:c2:c6:a7:
96:88:59:26:62:63:6d:2b:ab:e7:c2:03:f1:f3:d3:
16:8e:9e:16:40:b8:8f:5f:b8:0a:e7:09:e5:ed:d9:
dc:2b:6f:ab:91:5b:9c:a3:4c:34:0e:cb:8b:4a:70:
81:21:97:8d:93:08:5f:c6:02:fa:cf:b2:ae:6f:93:
c4:96:46:99:a2:aa:52:75:82:40:b5:26:1f:2e:75:
9c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9A:70:2B:A1:DD:7C:10:DF:7F:39:FA:A2:C1:D3:0F:E8:7E:23:00
X509v3 Authority Key Identifier:
keyid:41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f9:0b:6d:a6:8c:07:35:88:ed:d7:82:3b:db:be:03:41:f5:
d9:df:74:ad:13:a0:f7:32:9c:16:94:79:22:70:04:67:18:78:
f4:0d:23:2f:39:e7:8d:0d:f0:3e:69:6e:99:84:1f:ad:39:03:
bb:63:ca:1d:cc:c2:81:56:9d:af:59:b3:ae:fe:51:7d:bd:82:
66:ba:4a:98:11:10:47:1b:11:83:d2:a8:37:a9:c2:60:f8:35:
37:68:bc:3b:ae:f1:d1:cb:1c:6e:ac:63:03:0f:cb:fa:e1:d6:
01:cd:f2:ab:a2:55:06:4a:fa:5b:fa:61:9f:72:0c:86:62:09:
b8:c4:69:88:b3:d9:80:66:fa:1b:b8:3b:9e:ba:7e:3a:e1:e8:
72:43:ea:ff:71:c4:67:89:fa:3f:1b:9d:e3:0f:5d:2d:0c:db:
57:86:df:0a:08:dd:5d:95:23:e5:6f:57:c6:b0:22:e1:4f:87:
35:d0:02:67:5d:c7:85:1c:61:51:fe:06:93:97:6c:4b:84:b7:
80:b8:d0:fa:e5:e0:b3:bd:c5:bb:b9:36:9b:70:d0:de:ed:60:
59:1e:0a:35:8b:b2:b9:d3:9e:16:b6:da:e7:51:ba:3e:f2:d7:
08:27:47:09:32:28:61:d0:95:f0:cd:cf:8d:9c:1c:8c:7b:5d:
2e:02:5d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:08:57 2025 by rpki-client