Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
File: QMyB_4LO1hrvhHas56DoGLuuj8Q.mft (raw, json)
Hash identifier: YzVxgtLHNseYTQKFCfEdrfCnE9PZtjLGBA+afL0NgJw=
Subject key identifier: 9A:9D:97:DE:03:8A:4B:58:CB:60:64:F2:A6:C9:D6:90:7E:96:F1:5A
Authority key identifier: 40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4
Certificate issuer: /CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
Certificate serial: 0197B6A151F90570900BB568F651FD36C13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
Manifest number: 0C2F
Signing time: Sat 28 Jun 2025 13:01:54 +0000
Manifest this update: Sat 28 Jun 2025 13:01:54 +0000
Manifest next update: Sun 29 Jun 2025 13:01:54 +0000
Files and hashes: 1: QMyB_4LO1hrvhHas56DoGLuuj8Q.crl (hash: TRAHpPJGLuV5eVpGZrr4Vqe27LbgwboWXn2lUinevZQ=)
2: f9PiBsdXGMaiketrG3G5PjbB6oI.roa (hash: OKMBW/Wn+8xzvLZOORxBkZ/Gr6+Ikl3rSLUfT+IRWSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:51:f9:05:70:90:0b:b5:68:f6:51:fd:36:c1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
Validity
Not Before: Jun 28 13:01:54 2025 GMT
Not After : Jun 29 13:01:54 2025 GMT
Subject: CN=9a9d97de038a4b58cb6064f2a6c9d6907e96f15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:f0:a9:c0:fa:66:ce:59:38:48:63:95:8e:
46:46:81:58:78:8b:e4:02:7c:8b:db:e0:c4:4f:89:
7a:0e:e5:da:01:d4:6e:f3:76:c6:02:23:4d:29:ce:
26:a6:ef:af:33:ad:d1:7a:b3:f7:44:48:c9:d1:d2:
22:e7:9d:95:6f:70:bb:51:da:83:2c:17:c5:2e:b8:
d9:b7:a4:55:64:1b:16:36:ef:06:75:68:d4:5c:c7:
41:9d:f8:4f:aa:0a:5b:40:52:ab:34:06:f2:13:d2:
0c:ee:dd:5d:48:42:4e:54:88:1f:bf:f0:32:b0:d0:
e6:be:22:4b:55:e2:cb:03:1f:c1:20:d9:a0:81:0b:
9d:31:ce:46:85:cd:0d:a7:80:46:7e:41:79:c9:15:
59:14:29:98:9b:00:0e:43:df:a3:4d:6a:eb:41:26:
9e:bd:6e:3f:1e:40:31:39:26:1a:77:42:62:8c:e5:
58:37:4e:62:f5:9f:03:51:d9:27:5c:f9:0b:d8:2c:
f4:1f:d8:cb:68:12:d4:24:94:c4:89:16:a1:ef:62:
75:25:46:c8:cb:a1:f9:58:fc:53:6d:d8:c0:6a:72:
d4:0d:cd:94:19:86:d3:86:f2:7e:88:aa:3c:1c:e1:
8f:4a:52:dc:d8:9f:fa:92:9b:cb:36:c7:a8:ae:45:
54:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9D:97:DE:03:8A:4B:58:CB:60:64:F2:A6:C9:D6:90:7E:96:F1:5A
X509v3 Authority Key Identifier:
keyid:40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c5:dc:61:d2:94:27:c2:bf:a8:02:bc:79:f1:49:85:b0:73:
8d:bd:3c:fd:be:67:2f:3a:aa:28:a5:df:b0:97:60:dd:11:a5:
92:14:f2:fb:53:e7:4e:a3:53:85:61:d0:62:a0:48:be:0f:1d:
f8:c2:b9:bf:71:b9:0f:21:21:e4:f5:83:cd:32:28:d3:4d:8c:
43:f7:d8:b9:af:a2:42:7c:19:b7:a9:38:f0:ce:37:e9:e6:00:
e5:9a:b6:f5:e7:f3:da:db:ce:02:b3:5e:79:90:d8:55:90:20:
1c:27:8f:05:da:65:fe:fe:cf:32:dc:92:29:88:90:bc:36:cd:
d3:bc:2d:51:0e:c3:f5:02:7c:e2:9b:69:ca:8d:2d:05:63:67:
2d:7b:eb:02:42:2d:aa:77:4f:3d:84:18:d1:49:bc:ad:5d:c8:
43:83:14:7b:28:b1:4e:97:58:30:6c:ed:80:63:ac:3e:e5:2f:
51:b8:a7:c0:31:c5:55:bf:66:67:c7:e4:26:ec:a9:3c:d5:95:
2a:86:a5:2d:5a:2b:ff:01:d3:cf:d6:88:91:fc:bf:44:9c:1d:
28:9d:05:b5:75:e2:4d:8f:b7:77:06:21:5d:7d:f2:cc:6b:a8:
98:e4:73:5e:3e:8a:ed:cd:47:0c:0f:a1:fa:94:11:57:6b:b9:
6e:aa:94:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:46 2025 by rpki-client