Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft
File: QTJyL2byeskHL9x-kx9uGoUTz8Y.mft (raw, json)
Hash identifier: jw2m8eupNSp0FihGOR2Z6SL4vVilYlsi8EkUEjTKS0g=
Subject key identifier: EA:C1:E8:41:BB:7F:44:14:66:45:91:0F:1D:40:8F:76:AE:09:92:29
Authority key identifier: 41:32:72:2F:66:F2:7A:C9:07:2F:DC:7E:93:1F:6E:1A:85:13:CF:C6
Certificate issuer: /CN=4132722f66f27ac9072fdc7e931f6e1a8513cfc6
Certificate serial: 0197B6A179E85F80CC1EBABBE3EB2C806964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTJyL2byeskHL9x-kx9uGoUTz8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft
Manifest number: CE
Signing time: Sat 28 Jun 2025 13:02:05 +0000
Manifest this update: Sat 28 Jun 2025 13:02:05 +0000
Manifest next update: Sun 29 Jun 2025 13:02:05 +0000
Files and hashes: 1: QTJyL2byeskHL9x-kx9uGoUTz8Y.crl (hash: bnMd+fT3pccxYwwC2V6HNLWMqJDST3Ko6yBbQEosgFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTJyL2byeskHL9x-kx9uGoUTz8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:79:e8:5f:80:cc:1e:ba:bb:e3:eb:2c:80:69:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4132722f66f27ac9072fdc7e931f6e1a8513cfc6
Validity
Not Before: Jun 28 13:02:05 2025 GMT
Not After : Jun 29 13:02:05 2025 GMT
Subject: CN=eac1e841bb7f44146645910f1d408f76ae099229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:81:03:b8:92:52:89:9b:fa:b6:89:75:c8:9c:
a2:7a:42:65:fb:8f:51:40:5f:b8:9e:c9:71:c7:e4:
2d:12:e5:1f:7a:3e:ae:2e:62:c2:97:2e:c6:be:0e:
61:2a:f1:09:61:9f:4f:9c:91:52:24:4d:8a:c3:31:
63:30:d8:89:49:29:16:2a:59:de:46:4e:6d:a6:a4:
08:fd:04:14:6d:e7:32:e3:71:17:2a:21:10:26:6c:
24:a3:cd:72:14:29:03:e3:3c:43:6c:43:63:8f:be:
c0:ed:bc:76:32:13:a1:27:56:d6:b9:06:d3:9d:1d:
8c:20:37:c6:70:61:cb:35:b5:26:4e:97:84:e2:15:
84:cf:9e:7f:19:2c:b5:53:e6:95:cb:8b:28:a5:62:
9a:a3:b1:a2:76:5d:4f:4e:50:cd:f8:f4:fe:56:94:
f1:5a:f0:9f:7b:76:ea:65:5e:45:cc:77:8d:3f:af:
83:3a:7a:8c:39:8c:6e:db:ab:67:3a:58:46:90:b6:
c0:cb:51:6e:fd:09:4c:06:a3:d1:a6:ec:a3:90:b1:
cb:5e:3c:ba:68:a8:33:f2:5b:c9:ea:53:a9:07:32:
5e:c0:db:a8:0d:56:cd:8e:ca:62:23:2e:bd:26:91:
ff:86:b1:12:2b:db:7c:63:be:c5:db:0d:93:5d:21:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C1:E8:41:BB:7F:44:14:66:45:91:0F:1D:40:8F:76:AE:09:92:29
X509v3 Authority Key Identifier:
keyid:41:32:72:2F:66:F2:7A:C9:07:2F:DC:7E:93:1F:6E:1A:85:13:CF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTJyL2byeskHL9x-kx9uGoUTz8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4e:e8:4c:6e:0b:33:d0:20:5f:a5:59:ae:e6:f9:01:f7:9e:
53:86:73:7a:73:b8:15:24:7f:2a:a4:df:4c:34:4e:d3:71:ed:
9d:86:82:ec:81:d7:9b:26:bd:c7:4d:3c:d6:4d:40:e3:97:71:
ca:b4:d9:28:25:14:27:34:a9:fd:47:3c:14:6e:82:14:d0:e7:
de:78:ef:f1:17:49:d8:cf:c0:cf:c8:4f:f1:d5:c2:2d:72:77:
2a:e9:d7:4e:3a:a6:e1:28:4b:b7:67:50:52:5d:7f:72:51:44:
87:5a:d2:8b:0b:f0:48:e2:d3:48:57:2f:51:20:b9:3e:66:db:
97:e4:84:ba:96:f6:d1:4d:55:a4:09:b8:25:cf:63:84:54:72:
b4:64:51:1f:0b:3c:1a:5b:d5:b4:e0:b2:41:c9:c7:4a:68:7a:
f3:a3:29:ec:89:08:76:5e:cd:b0:13:3f:43:ac:75:19:fb:e1:
ee:bb:ce:a9:2f:bb:71:71:c0:61:52:35:c1:0c:7e:58:54:a2:
db:03:ef:95:e3:10:83:3d:cd:18:b7:16:61:76:f2:77:2d:f2:
4f:8f:55:6a:57:9d:26:c6:a8:05:eb:1d:93:f6:a8:8e:2c:fd:
57:3a:f2:14:9c:22:71:84:57:fa:bb:cc:64:6e:0c:ae:4d:41:
8f:83:d4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:35 2025 by rpki-client