Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
File: QZ_Gk449XguSdHsy9tcP2vDlChU.mft (raw, json)
Hash identifier: h9ViUbtFJ/U0FzAFL2PlwHy9GcjRJyy7A9/7VfLO/sc=
Subject key identifier: 74:BF:4F:18:8B:E7:0E:5D:E9:CA:7C:BD:F5:1A:DD:A5:68:0E:00:C7
Authority key identifier: 41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15
Certificate issuer: /CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15
Certificate serial: 0197B70E571E29E92CF80DAC62CB2B911F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 15:00:59 +0000
Manifest this update: Sat 28 Jun 2025 15:00:59 +0000
Manifest next update: Sun 29 Jun 2025 15:00:59 +0000
Files and hashes: 1: QZ_Gk449XguSdHsy9tcP2vDlChU.crl (hash: S9xroqQ/k/zX75ePE0m9JT1Z7fI5rSlaX+O5bPB33ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:57:1e:29:e9:2c:f8:0d:ac:62:cb:2b:91:1f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15
Validity
Not Before: Jun 28 15:00:59 2025 GMT
Not After : Jun 29 15:00:59 2025 GMT
Subject: CN=74bf4f188be70e5de9ca7cbdf51adda5680e00c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:bd:41:be:b1:5b:1c:da:29:e5:cd:24:b4:
e7:83:46:65:33:dc:6b:88:ed:e5:40:37:b0:e7:08:
46:90:2d:61:df:81:8e:7b:b8:04:0d:69:52:35:a8:
b4:3e:9b:55:f8:5f:59:e0:85:6b:b3:78:06:a6:88:
dc:a3:43:cc:80:e2:a0:fd:76:80:06:18:69:ae:de:
62:36:a8:05:3b:41:a5:74:98:52:16:6e:08:b1:87:
f4:95:f0:0d:f6:43:4d:ed:25:15:db:b9:43:23:3d:
e0:53:0c:39:c4:a8:1b:32:b6:1d:dd:fa:04:66:01:
99:64:70:a9:24:12:ec:fc:c4:d7:a5:81:d9:a3:29:
39:d6:e9:b9:b3:5d:31:5a:d1:1c:7a:06:7f:d9:df:
bf:17:ce:f4:91:20:5f:39:90:21:72:ac:34:f8:d1:
55:fd:b5:d2:d8:30:17:0a:00:68:4f:82:5b:d3:34:
99:f9:8c:c6:20:ef:6d:d9:8d:3b:26:10:df:ca:b2:
07:d3:15:fc:02:36:c3:82:40:47:89:b7:5a:a3:0c:
ef:96:b4:d6:5f:c1:c4:bc:33:d2:06:c5:db:09:42:
14:62:0c:63:d0:7d:4d:ae:34:21:4e:58:e1:16:c1:
f7:3c:15:52:75:5d:46:d5:11:23:3c:52:b6:a3:37:
e2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BF:4F:18:8B:E7:0E:5D:E9:CA:7C:BD:F5:1A:DD:A5:68:0E:00:C7
X509v3 Authority Key Identifier:
keyid:41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:31:79:62:35:5b:6b:f0:e0:77:13:5f:22:f9:74:e8:19:4f:
90:4f:60:71:16:d2:3c:ad:b0:33:12:29:48:ac:b7:33:88:f2:
1d:46:ad:64:75:ee:30:1d:24:a7:9c:6b:fc:45:a6:3a:56:74:
55:93:85:1c:e1:5b:9c:76:78:12:b1:a4:e4:41:59:ae:f1:98:
83:06:64:a2:86:c6:db:59:3f:ab:0d:3d:31:9e:86:3c:d5:d6:
3a:b2:15:ee:d1:0b:53:43:78:f7:72:0a:f3:2e:a6:dd:08:6a:
9c:8d:8a:19:b7:8e:ca:16:7d:9a:d7:4a:a5:6b:ff:12:ad:31:
50:f3:52:fe:3e:a6:bb:90:9c:87:57:37:e2:aa:c9:2b:ca:28:
4e:7f:be:14:aa:cc:2e:cb:5d:9d:38:ac:a1:29:21:e8:59:93:
93:c8:ea:2e:85:6e:4f:6c:b3:33:f0:ca:a1:5b:81:3f:ed:6e:
c9:c6:1d:52:78:64:fb:b3:58:95:68:52:9a:a3:c3:60:ce:51:
cd:13:04:87:85:75:90:10:38:d5:cb:02:02:82:7a:87:43:ce:
57:c7:be:0e:96:12:b1:e7:74:29:ba:f4:7a:a1:17:44:c2:f1:
20:66:7e:4d:dc:fc:12:2b:c2:53:6a:4f:a4:56:d1:95:92:1d:
54:99:55:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:12 2025 by rpki-client