Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json)
Hash identifier: hi2XS3ZFT+O/XY2ZQbyU9W1lR2x7veTqW0pg01+AFQ4=
Subject key identifier: A7:15:0D:E0:55:D6:B0:53:68:47:D4:8A:30:32:95:A8:EB:2E:0A:DA
Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Certificate serial: 0197CEA913C52C5E4468A7048E28F118AC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
Manifest number: 15C3
Signing time: Thu 03 Jul 2025 05:01:16 +0000
Manifest this update: Thu 03 Jul 2025 05:01:16 +0000
Manifest next update: Fri 04 Jul 2025 05:01:16 +0000
Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: rgi2R4ttqSffz7VLvjYhndokvMGm7cSIYqYc0j+Fn4A=)
2: cjjqef6iWCl_1yFiNx4mwIqngEo.roa (hash: d/pj6gBhpaRW2JX3FWdfa1N0hGZit4d6dbXlFGA0bW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:a9:13:c5:2c:5e:44:68:a7:04:8e:28:f1:18:ac:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Validity
Not Before: Jul 3 05:01:16 2025 GMT
Not After : Jul 4 05:01:16 2025 GMT
Subject: CN=a7150de055d6b0536847d48a303295a8eb2e0ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:e9:df:24:d5:f1:79:be:4d:40:4c:57:de:
cb:43:ca:1a:b7:01:f1:70:ba:81:fd:12:27:6f:08:
d8:d9:71:d1:18:37:55:1a:d4:1c:b4:81:a8:71:58:
77:53:09:6a:2c:97:69:0d:b1:4f:e5:5c:ad:e2:81:
b7:99:ec:ef:83:38:47:f1:ef:4a:36:32:e4:4d:4f:
e3:9b:ee:27:5d:a7:73:ed:d7:9d:a4:b9:56:00:ca:
65:9e:10:40:6f:e6:51:52:90:d1:4f:86:fd:00:8a:
47:59:53:0f:8e:f6:5e:b6:46:12:91:ed:50:7f:99:
83:db:2d:dc:70:0e:1b:93:b2:08:53:af:79:1c:0d:
70:17:ec:52:de:5e:a2:53:e3:5f:26:5c:77:aa:3e:
b3:38:64:f3:30:03:b9:8c:26:51:75:f7:a4:96:fc:
2e:62:56:92:69:17:70:6f:8c:4d:3e:c9:50:76:0b:
68:a6:1b:0e:97:44:38:c8:47:1f:24:b6:c4:b1:a4:
13:79:7e:1b:f1:b9:6c:f1:fb:b8:38:a0:0f:be:9c:
97:b1:98:52:25:c6:a1:a7:e2:ee:d2:cb:cf:d8:1d:
25:9c:05:6a:df:ac:09:c0:f2:25:bb:fa:72:a2:38:
31:23:0e:34:fc:a3:7a:d4:fc:15:fc:62:01:b6:73:
78:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:15:0D:E0:55:D6:B0:53:68:47:D4:8A:30:32:95:A8:EB:2E:0A:DA
X509v3 Authority Key Identifier:
keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:06:e1:48:04:ad:2b:cd:4a:f5:f9:5a:42:80:22:ff:51:cf:
f6:9c:1c:82:91:48:04:c3:05:20:ef:80:41:94:1a:38:a4:02:
ae:34:3a:5d:c5:43:03:af:47:92:0c:05:ea:7d:2b:7b:cb:fd:
bf:1d:bf:2b:cc:88:15:8c:e9:4c:6e:98:1c:d6:a7:64:68:01:
7b:87:93:c8:e1:72:d6:47:e8:c2:a4:2b:34:80:ea:4c:c4:ca:
9e:ab:79:7d:d5:8b:e2:a0:78:c3:47:b9:92:79:cf:2e:15:8d:
f3:b9:fe:32:54:18:61:3a:64:95:b9:bd:b9:4d:11:af:66:02:
70:b6:b1:02:99:9a:b1:65:3d:a8:84:54:6a:16:57:5c:fe:6d:
27:b7:7c:07:89:e9:9a:af:ab:57:01:e7:5a:7e:fe:76:d7:e8:
74:d7:bf:1b:72:a6:29:f7:92:c9:02:38:87:77:fe:58:77:ba:
be:91:64:18:79:38:48:4d:4a:ef:c9:e4:c3:e9:90:04:cb:78:
23:34:8e:6e:dd:d6:f5:a9:c3:f1:5e:5d:0b:74:7f:ea:e3:cf:
fd:bd:af:78:08:71:09:fb:de:d8:dd:a0:da:18:8c:c9:79:1f:
4c:55:e6:24:3f:70:c9:fd:f8:93:70:17:9a:68:88:9e:34:4c:
dd:33:a6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:07:53 2025 by rpki-client