Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
File: QnqV1vkbZ2udcauK4RQZQY3jww4.mft (raw, json)
Hash identifier: OP7tJxNlJH9Wkb9wArvqFONhn8/f+XP4juOsgzJipJ8=
Subject key identifier: DA:4D:BC:AF:E9:6B:55:4A:B3:FB:60:97:C8:21:BB:95:E5:C0:D2:AD
Authority key identifier: 42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E
Certificate issuer: /CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
Certificate serial: 0197B7456622ECE87AF21A37CEFD01BCDFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
Manifest number: 10E4
Signing time: Sat 28 Jun 2025 16:01:07 +0000
Manifest this update: Sat 28 Jun 2025 16:01:07 +0000
Manifest next update: Sun 29 Jun 2025 16:01:07 +0000
Files and hashes: 1: QnqV1vkbZ2udcauK4RQZQY3jww4.crl (hash: jv5ybNvrfqlefZETtR5osh3zZGa8NtXQPBheDuzlAWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:66:22:ec:e8:7a:f2:1a:37:ce:fd:01:bc:df:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
Validity
Not Before: Jun 28 16:01:07 2025 GMT
Not After : Jun 29 16:01:07 2025 GMT
Subject: CN=da4dbcafe96b554ab3fb6097c821bb95e5c0d2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:a2:03:f5:fe:ef:24:b0:d0:93:5d:33:06:
86:fb:af:5c:51:e4:de:f4:80:d1:9a:cc:7b:ab:31:
35:1c:c7:0f:81:a2:cd:a8:0f:8e:cc:63:6c:3b:22:
f8:71:35:df:27:2c:47:67:33:53:a7:f3:40:e6:a6:
83:d3:0a:40:10:62:20:23:f8:58:53:6e:71:16:55:
6a:e9:d1:38:95:19:0b:49:36:10:78:09:10:4d:50:
d3:37:e0:07:46:aa:1c:7e:30:8d:6e:4c:5e:0f:bb:
25:67:a3:b3:4d:0e:8d:79:3f:87:34:db:22:6a:d4:
52:db:86:87:f0:17:1f:84:14:68:05:f1:38:5a:18:
93:a2:72:45:a8:74:4f:30:c6:f8:76:62:01:99:6e:
37:3e:3d:31:f9:2b:7d:51:05:f0:30:6f:a4:cc:ec:
16:ce:d2:e8:91:bf:f8:df:9d:5f:da:35:81:88:76:
dc:3c:a1:e9:f0:69:df:1a:12:5d:e2:74:24:f1:60:
24:ec:e9:b6:69:63:70:ef:b2:20:ae:89:cd:ec:cd:
eb:64:1a:c9:72:e8:5e:b9:92:68:da:52:c9:97:7d:
e8:e3:9d:a6:ed:81:e5:f2:30:6c:9b:cb:7e:b7:5e:
df:c9:03:4d:14:5c:61:48:67:0e:4a:e5:c8:c4:f7:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4D:BC:AF:E9:6B:55:4A:B3:FB:60:97:C8:21:BB:95:E5:C0:D2:AD
X509v3 Authority Key Identifier:
keyid:42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f5:f5:72:bd:0d:22:fd:b6:47:03:d6:64:ab:c2:70:84:57:
70:fe:4d:8b:c8:90:72:fa:33:24:57:93:4b:5a:40:2b:2e:94:
05:85:ff:87:ae:66:a9:e8:64:96:e5:f6:f7:91:2a:58:00:d4:
85:1c:04:c6:df:4a:de:0e:56:ea:df:bf:ad:30:05:8b:00:f6:
c3:9d:8a:0e:9c:45:64:9e:39:d6:be:d5:3f:64:83:f4:b7:19:
2c:f7:1f:db:22:ba:a9:21:68:8f:b7:18:14:38:cd:dd:a0:48:
b5:18:d2:98:8c:7a:f4:1c:8b:ba:35:db:a3:4b:d9:65:90:6c:
6e:19:3d:4f:d1:1c:46:95:5e:56:5f:c6:e7:d0:91:e3:b3:bc:
36:84:61:d3:47:88:bd:65:49:71:bb:71:2c:35:33:02:7d:b1:
94:ae:b6:62:58:52:62:4e:d7:e9:bf:6d:9f:34:76:ec:de:cd:
a0:35:36:f4:4d:a6:83:bd:33:59:c3:71:a5:8d:de:b3:fe:55:
2a:d3:2a:09:24:96:9b:bd:e9:04:94:a7:89:9a:d0:5d:0c:2d:
fc:b8:a4:cf:d5:5e:93:54:3c:a3:8b:74:6b:ae:7f:18:ce:74:
00:c4:77:a4:b4:cc:56:38:32:da:d1:65:8c:24:e2:7f:b2:2c:
71:67:89:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:00:03 2025 by rpki-client