Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
File: QsCVkBFifd0NBX1zHo-lpRApZZI.mft (raw, json)
Hash identifier: 78KkIlX3D82SWZrIiMR9lZeP9Kh2PK+k3FI9xX8riKk=
Subject key identifier: C8:09:D3:B3:9A:1C:15:0B:F7:7A:55:34:76:18:B0:50:ED:C0:31:53
Authority key identifier: 42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
Certificate issuer: /CN=42c0959011627ddd0d057d731e8fa5a510296592
Certificate serial: 0197B8900AB50E8491F1DAFCD64F0A9F0F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 22:02:16 +0000
Manifest this update: Sat 28 Jun 2025 22:02:16 +0000
Manifest next update: Sun 29 Jun 2025 22:02:16 +0000
Files and hashes: 1: QsCVkBFifd0NBX1zHo-lpRApZZI.crl (hash: TwRgYhejJhXhPAl7quJ5t1tAy6xrflHBOavQVCTPqTo=)
2: nqDbjTD7-4bF8APAmv3q39AmNtk.roa (hash: zWbRV6cXuufmhpJUA1tayT8JP8s9Ez0NcmTuvgMXFF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:0a:b5:0e:84:91:f1:da:fc:d6:4f:0a:9f:0f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c0959011627ddd0d057d731e8fa5a510296592
Validity
Not Before: Jun 28 22:02:16 2025 GMT
Not After : Jun 29 22:02:16 2025 GMT
Subject: CN=c809d3b39a1c150bf77a55347618b050edc03153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:97:42:a8:90:51:ca:75:5b:de:71:3d:18:
39:5e:c1:7e:9c:2e:35:53:54:c5:28:6d:21:19:c7:
aa:6a:a8:62:d0:5b:91:17:ea:90:84:16:a7:be:33:
59:b7:67:16:23:a4:29:57:16:eb:ae:77:00:91:f8:
17:bd:cd:78:8f:7c:29:d3:33:fd:02:a7:ee:3a:36:
0b:f5:bf:7f:a2:8a:7c:bd:f0:19:c9:ff:a9:9a:c0:
ce:c4:09:57:66:f0:6e:4c:59:cb:03:a9:46:fe:cb:
bd:da:fb:a4:9f:3e:0d:81:5b:50:0c:bb:9a:6b:c4:
9a:ce:50:d3:7f:d5:46:96:b2:ff:3c:bd:b2:b1:24:
0e:cf:7d:76:22:11:3b:17:76:f7:12:72:b0:66:31:
07:1c:2d:47:4a:d2:51:64:af:ef:6c:cb:b1:65:a6:
9e:e6:20:df:4f:b3:90:e3:cb:58:ae:94:21:5d:02:
1a:dd:70:b3:84:66:dd:44:bb:77:34:87:e2:ca:f5:
48:51:bc:e2:4b:f6:6e:a4:88:10:91:3f:a4:c2:5b:
5e:9f:92:73:50:ad:a5:0a:07:4f:a6:18:a4:2b:df:
05:83:36:85:de:51:6e:73:ed:9c:49:74:83:bf:ac:
ec:ca:76:f8:8b:03:d5:a3:25:d2:42:0a:d6:ed:a3:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:09:D3:B3:9A:1C:15:0B:F7:7A:55:34:76:18:B0:50:ED:C0:31:53
X509v3 Authority Key Identifier:
keyid:42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2e:43:8d:a7:da:ff:cb:76:06:b3:df:c6:7d:2c:a1:dc:d6:
fd:8d:c9:73:57:e9:e3:4a:cd:bc:01:b5:c5:01:a1:a6:d4:38:
e4:75:29:84:eb:47:b7:dc:bb:28:cd:90:b6:5d:05:63:2c:ce:
a0:a2:9f:b8:9b:59:12:4c:92:66:35:76:82:75:9b:5d:de:d1:
63:2f:25:d7:94:d2:a1:7e:aa:ec:f1:70:08:47:3f:32:3b:1d:
9b:1a:5e:e1:69:7a:90:32:2f:e2:57:a9:9d:47:12:3c:23:f1:
c7:8b:c8:6a:08:4c:e4:b0:ea:8d:7a:73:ec:07:e8:c7:72:63:
ba:9a:30:05:42:57:25:be:d3:82:6a:c4:41:8b:e2:c1:c3:eb:
ed:e2:5e:0d:d7:df:73:4b:37:af:ef:9f:52:98:b6:ba:94:61:
4a:be:7f:fb:d4:ce:cd:b0:74:76:35:69:a1:d7:e4:89:8b:a9:
fb:0a:58:a0:75:25:d2:19:79:88:08:4b:52:5d:22:f5:16:cf:
a9:08:e1:30:44:0c:51:30:ef:17:06:07:17:75:0b:9f:b0:ba:
31:60:ff:c4:36:fe:98:96:fa:82:ab:fd:14:10:b9:2a:10:31:
8d:17:1e:96:95:c2:a6:19:d3:d7:ba:2a:58:44:01:b0:04:a6:
b4:cc:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:40:26 2025 by rpki-client