Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier: LGa+qEllp+dQ8yZ3jSV7tQK2+ErbouR3UuhTGmM+wac=
Subject key identifier: 05:11:A6:AC:C9:C4:4D:33:1F:87:29:F5:8A:F4:C5:63:5F:BD:EB:F6
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 0197CC4CA787093378344EF89249B7C3A23E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number: 12A7
Signing time: Wed 02 Jul 2025 18:01:05 +0000
Manifest this update: Wed 02 Jul 2025 18:01:05 +0000
Manifest next update: Thu 03 Jul 2025 18:01:05 +0000
Files and hashes: 1: 7347cFurkIFVNRTShqXtdTwOLOA.roa (hash: 81GL5pa945jQA5j8/X64fsQyRv+u1Eyr3yERMPF2bKE=)
2: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: lJ9Vu0CtfUG2Eb7GGoCVBrAl9D8UaKFMiMcTN6UDU2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:a7:87:09:33:78:34:4e:f8:92:49:b7:c3:a2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: Jul 2 18:01:05 2025 GMT
Not After : Jul 3 18:01:05 2025 GMT
Subject: CN=0511a6acc9c44d331f8729f58af4c5635fbdebf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:9a:a2:9e:a6:f5:8e:f0:9c:5b:aa:65:2d:
3e:43:52:88:c8:96:82:04:f0:1f:0a:8d:9f:37:3c:
d5:52:12:28:ef:30:97:76:9c:40:08:8c:ae:f0:30:
81:b6:46:4a:98:bc:f6:b2:92:c7:fb:36:0a:d9:43:
27:57:77:5b:a9:24:d0:23:6f:f5:48:c0:dd:86:49:
f7:75:b0:fa:3f:b9:6b:16:a0:17:b1:54:ab:b9:b7:
ee:3c:41:e6:94:de:e2:8d:80:5c:01:38:89:68:e4:
fd:23:86:a8:2e:73:fd:a3:8b:69:c4:4c:65:84:3f:
cc:e3:aa:61:f3:02:54:a3:ff:df:97:4f:81:1b:d1:
c0:29:df:58:1f:53:d1:05:de:59:8a:1d:60:46:2e:
9f:27:45:1a:9a:c4:f1:e2:fa:54:d8:98:20:5b:c1:
6b:3d:02:5c:dd:fa:ba:7c:cf:aa:47:16:9d:05:37:
33:fd:a3:16:1f:cf:f6:98:4c:7d:7a:8f:37:d0:54:
7b:fe:61:04:f0:fc:fe:95:b3:15:7e:15:bb:11:7f:
e8:01:b5:07:b6:df:06:67:c4:eb:fb:48:e3:b4:64:
d1:02:68:9b:c4:42:b8:d2:fd:69:13:29:59:a2:5f:
c6:bf:ad:43:0c:9d:5f:d0:b1:12:db:8e:81:e2:0b:
88:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:11:A6:AC:C9:C4:4D:33:1F:87:29:F5:8A:F4:C5:63:5F:BD:EB:F6
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0d:55:b0:4a:a0:e1:e8:fb:43:38:99:15:6b:41:22:98:58:
95:04:44:5d:e1:f4:d2:38:58:d6:55:cd:78:18:9a:0e:8f:36:
3a:38:58:ca:84:74:93:a6:8e:a2:0a:92:7b:ec:2a:45:b6:17:
6a:85:b7:4a:80:84:60:81:59:2c:7d:c4:f1:22:53:5f:78:87:
a2:9d:8c:b2:86:04:5b:74:6b:c5:95:4d:0d:0e:10:eb:5c:f8:
90:74:c9:69:3f:46:78:80:e5:c1:17:c0:d4:a6:a2:ae:b1:85:
84:f1:8c:95:a6:f8:76:1b:e7:02:e6:7a:c6:f0:35:65:18:5c:
19:b7:ef:f5:a4:84:b7:11:a8:05:d1:bf:89:66:00:aa:64:ad:
9e:14:a2:79:57:60:3f:af:9e:71:d4:25:44:5d:cf:80:58:22:
cc:72:cb:1d:6d:90:0b:e4:18:e3:8f:37:87:b1:08:85:c5:f1:
40:9d:fd:e8:6c:02:de:ef:1b:96:cb:2b:23:84:cb:bd:7c:97:
05:e6:25:83:50:2e:10:21:68:ba:78:de:52:7c:11:8c:64:b8:
e3:81:db:78:57:96:34:be:ee:08:22:f8:8b:96:e4:bc:d1:72:
8a:de:b1:0e:ba:e8:12:02:38:85:31:30:61:76:b6:1b:45:1d:
af:f8:ae:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:21:40 2025 by rpki-client