Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
File: qI1YyAfJSdssH18nPx78TfGlxVM.mft (raw, json)
Hash identifier: GK5ruPiv5oQ51geQbjzMeOz6gKJC15id+6BX5OabTEA=
Subject key identifier: 55:02:DE:CB:0F:2B:D8:3B:DE:0E:8D:5A:1B:8E:14:BB:21:AD:F1:50
Authority key identifier: A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53
Certificate issuer: /CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553
Certificate serial: 0197B7EA9D1AFA35C222DC4542656FED6F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
Manifest number: 071A
Signing time: Sat 28 Jun 2025 19:01:35 +0000
Manifest this update: Sat 28 Jun 2025 19:01:35 +0000
Manifest next update: Sun 29 Jun 2025 19:01:35 +0000
Files and hashes: 1: qI1YyAfJSdssH18nPx78TfGlxVM.crl (hash: tWlp8guJNQnhtrruiWT4hr4Z2MxSGdMfKfGwVfq0pY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:9d:1a:fa:35:c2:22:dc:45:42:65:6f:ed:6f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553
Validity
Not Before: Jun 28 19:01:35 2025 GMT
Not After : Jun 29 19:01:35 2025 GMT
Subject: CN=5502decb0f2bd83bde0e8d5a1b8e14bb21adf150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1b:e4:13:b9:be:53:e8:5c:0f:bc:45:87:cb:
18:cd:04:5b:21:33:02:a9:d4:32:f5:9c:84:6d:47:
a3:c7:fd:61:8a:72:ff:c7:05:65:5a:4c:96:42:97:
fb:0c:2f:81:e4:9e:36:fd:5e:0e:6c:88:3f:b8:07:
ab:f2:23:13:ae:73:59:75:57:9a:25:49:c1:22:23:
41:ed:bf:bc:85:5e:9d:f7:d4:70:56:91:83:ac:7c:
7e:fe:f6:85:66:5f:86:48:86:54:80:5e:73:78:d8:
f6:39:54:c2:c2:38:d7:d8:a1:b0:28:7e:c3:d9:35:
be:50:5d:6a:86:f1:b1:49:fa:66:4b:a4:16:92:6a:
de:0e:1f:2e:33:06:2d:50:dc:f7:6f:f5:7d:52:13:
55:86:a9:b9:71:24:a7:a6:7e:29:d3:70:fa:a3:d2:
69:eb:cc:33:5e:ed:b5:1f:2c:c6:a5:17:39:17:79:
4e:ff:04:cd:1a:a2:f2:eb:06:3e:ea:20:07:45:ce:
90:0d:c1:44:19:b4:b1:12:54:45:c7:26:06:da:08:
ee:ca:e0:4b:b4:d6:f2:34:f9:69:91:58:0b:61:42:
cd:65:2d:47:22:b2:22:b0:55:7f:49:8d:e1:b4:df:
cf:4f:8c:9f:db:f6:92:90:15:db:3e:6e:2b:26:77:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:02:DE:CB:0F:2B:D8:3B:DE:0E:8D:5A:1B:8E:14:BB:21:AD:F1:50
X509v3 Authority Key Identifier:
keyid:A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1b:ed:93:3d:73:fd:d6:d7:00:f4:af:4e:7c:e9:9a:dd:8f:
06:0d:db:eb:c9:32:e4:5c:c2:35:50:84:97:a0:f7:37:74:16:
99:31:69:76:87:99:83:61:6f:45:d7:be:f1:95:7b:88:d6:b5:
9e:87:ac:f7:20:b8:96:8a:24:08:5a:13:2f:91:ce:fc:5a:ca:
64:ec:7c:e3:34:56:a0:f5:71:c3:24:9a:cf:9d:6a:2c:7e:cd:
3b:b5:ae:35:fa:de:d8:ee:2d:77:ad:46:05:a3:9d:88:9e:7f:
a6:48:1c:9a:de:bf:53:9d:c1:7d:03:e2:ac:53:80:39:13:18:
03:19:fc:93:5d:ec:3a:88:97:9f:78:e6:f4:57:f5:f3:27:53:
29:0b:98:9b:b2:64:a8:fc:94:8f:db:ff:81:0f:31:23:61:a7:
aa:fb:90:c1:44:c2:b9:94:2c:4f:00:9d:2f:a8:71:8f:60:fd:
74:dc:f2:1f:3a:a0:2e:19:18:73:d9:c0:72:ae:42:d9:f1:0a:
c2:c7:cb:e9:15:40:5a:12:14:81:b4:b4:b0:a5:89:3f:19:7f:
17:fb:2d:bc:ad:0c:94:5c:80:b3:c6:f7:4c:3f:86:e6:10:af:
b0:fe:bc:1c:4a:2a:3e:66:ff:5c:47:9b:b6:3d:8d:cb:8d:e3:
ec:61:a7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:26:25 2025 by rpki-client