Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
File: Qb-tl6WMtQy_yE7IZa89ccixha8.mft (raw, json)
Hash identifier: VMCP9PsAbUqdxs8/FrxEAnPJ4cWXOzPYVOm8LuKShFk=
Subject key identifier: 3D:6F:AB:02:46:C9:C8:DF:64:81:7A:40:66:49:10:D7:71:9F:9F:2A
Authority key identifier: 41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
Certificate issuer: /CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Certificate serial: 0197B632F7AE91D786FE4282BCED6C146DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
Manifest number: 10B7
Signing time: Sat 28 Jun 2025 11:01:22 +0000
Manifest this update: Sat 28 Jun 2025 11:01:22 +0000
Manifest next update: Sun 29 Jun 2025 11:01:22 +0000
Files and hashes: 1: Qb-tl6WMtQy_yE7IZa89ccixha8.crl (hash: dAsHkzhCPwVFRA9b8A7tTXYMoyrKtp493iyvNIDLkJA=)
2: TAMhyO_TxaxCZl8ndF5QQYJ7fSc.roa (hash: fwo98qFwUrEP75fKt0AHaKO4fww5cOw9kGra/QKoqNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:f7:ae:91:d7:86:fe:42:82:bc:ed:6c:14:6d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Validity
Not Before: Jun 28 11:01:22 2025 GMT
Not After : Jun 29 11:01:22 2025 GMT
Subject: CN=3d6fab0246c9c8df64817a40664910d7719f9f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:10:5d:c3:e2:62:c2:6d:45:5f:18:3e:96:9b:
4f:0b:e1:e9:7a:72:60:b5:c5:23:6f:ab:c3:46:7a:
af:fe:4f:5d:92:3c:98:40:66:22:77:2a:1b:eb:11:
fa:af:dc:5a:7b:79:20:1b:e9:03:66:62:6c:f5:55:
11:e8:c6:ca:7e:a9:0e:0b:ab:96:ba:1b:a3:f0:1b:
26:ae:56:b4:80:3c:c2:2f:d2:d7:7e:8a:ee:e9:bf:
eb:06:90:d4:a5:d6:ff:d5:b4:8e:a7:6a:e8:a7:17:
1b:40:39:a0:e9:45:34:ff:d0:2b:02:e7:5d:d9:f1:
04:18:52:ff:d8:d4:a2:66:08:f6:d3:c0:b2:4a:bd:
77:08:5c:5b:20:00:14:2a:c4:64:d8:2e:ee:5e:49:
af:50:9e:80:a5:3e:85:69:3f:9b:6b:33:f3:53:be:
cb:18:5b:21:ec:3c:d2:15:3f:5b:d1:53:40:6f:d7:
56:3f:58:fd:17:88:15:5d:7a:4e:30:58:b7:1d:fb:
6c:be:89:98:51:60:27:48:a1:7f:da:72:87:9a:d3:
b3:84:dc:e8:5c:1b:60:0a:a3:75:6b:03:e3:b3:f7:
97:39:84:74:9d:f4:45:33:4a:06:f4:b6:1e:3c:34:
04:d5:b3:76:57:fd:1d:57:08:8d:2a:25:2e:d5:19:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6F:AB:02:46:C9:C8:DF:64:81:7A:40:66:49:10:D7:71:9F:9F:2A
X509v3 Authority Key Identifier:
keyid:41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a2:9f:5f:2b:a2:c8:f9:73:65:9e:74:a9:45:0e:50:69:ea:
20:6a:ae:26:e2:a9:0e:11:c5:7f:0f:0b:d0:ec:ce:23:02:a3:
40:77:85:40:44:0a:b7:cf:8f:fa:f3:73:06:3b:ae:9e:6a:51:
c4:be:67:d6:a1:81:0e:a0:12:5f:a3:df:14:20:f7:fc:85:a6:
3a:cb:d9:01:14:22:64:ef:ad:7d:e6:e3:d1:da:83:e9:46:f8:
76:71:13:47:77:ee:05:a7:0a:c4:88:36:04:3e:60:29:c5:12:
09:a0:84:62:3d:b8:7f:0f:3a:c1:c8:a4:a3:50:0a:b7:f0:5b:
92:35:f9:a9:6e:2b:d3:2c:02:b2:e7:7f:9c:09:8a:b8:90:34:
22:5d:0e:52:a3:e2:f4:2d:3a:ce:db:e8:73:14:3b:37:87:ce:
1d:39:c8:4c:25:66:36:d5:c0:86:49:ca:7a:05:a0:27:b7:ff:
b2:aa:ec:c5:84:1c:3a:37:56:c7:c7:07:52:ce:b6:d8:1b:15:
2a:0e:b0:69:d9:8b:31:5c:da:0a:57:07:77:5e:43:14:8c:37:
08:43:35:ad:14:55:b1:62:7c:35:84:90:f2:4c:6d:eb:44:b6:
ab:2e:16:20:b6:f2:a7:84:3e:30:7f:02:fa:03:b0:15:8f:37:
87:f7:0d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:50 2025 by rpki-client