Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
File: QbKQBTJFsRKlim1YlN_cf2dCLos.mft (raw, json)
Hash identifier: 40H/AMXVUjksshV9daV5ZMBbYP4edauLue2NN/ecjM0=
Subject key identifier: 65:57:16:96:97:BD:2C:19:18:AE:FE:46:7B:53:72:8A:E2:2B:B3:7B
Authority key identifier: 41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
Certificate issuer: /CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Certificate serial: 0197B88F37150CE7B78F572B22A942B29814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
Manifest number: 09A2
Signing time: Sat 28 Jun 2025 22:01:22 +0000
Manifest this update: Sat 28 Jun 2025 22:01:22 +0000
Manifest next update: Sun 29 Jun 2025 22:01:22 +0000
Files and hashes: 1: QbKQBTJFsRKlim1YlN_cf2dCLos.crl (hash: EFAUls245WKCu1lNfCYOntTXBw7pGTVDvPOqI5wF7lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:37:15:0c:e7:b7:8f:57:2b:22:a9:42:b2:98:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Validity
Not Before: Jun 28 22:01:22 2025 GMT
Not After : Jun 29 22:01:22 2025 GMT
Subject: CN=6557169697bd2c1918aefe467b53728ae22bb37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:31:01:a4:78:c5:ab:e6:3a:17:bb:61:64:
eb:6c:1b:0f:40:ec:a6:e9:66:de:50:4f:2f:66:49:
97:28:d0:34:cd:16:4c:da:91:81:bc:e1:18:0c:18:
e9:13:a0:6a:bf:72:93:75:d8:c4:d4:69:56:bc:fd:
d4:e6:4b:bd:85:11:7f:9f:92:15:83:6b:d5:04:44:
aa:cb:ad:30:33:e5:b0:f3:e2:e5:b1:e7:1e:5f:c1:
ee:81:37:b6:d2:e1:e0:88:6a:4c:5e:2f:48:08:89:
31:77:51:04:1b:9a:8b:00:47:ac:e4:f8:2c:c2:fc:
49:62:56:95:87:8b:fd:ad:4f:de:50:87:be:b8:d2:
61:ec:fd:d7:fd:d0:a5:bc:80:a7:b7:6a:41:34:27:
5a:b8:8b:50:61:97:e4:1b:30:38:37:da:4b:f0:37:
2c:13:5d:13:d8:94:ec:5d:24:07:72:8a:fc:14:53:
65:73:5b:b2:b1:ee:3f:8c:ea:3d:39:bd:89:53:91:
b1:9d:ac:38:b0:7b:f9:26:a7:f7:9a:6b:58:c1:b1:
71:0f:3d:03:c5:b0:47:23:6d:97:0b:a1:5c:4c:5e:
69:2f:b8:08:5d:07:ee:9e:26:81:e9:c4:3a:ad:85:
dd:91:d8:d2:50:06:45:0c:91:22:7e:1f:54:d4:0d:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:57:16:96:97:BD:2C:19:18:AE:FE:46:7B:53:72:8A:E2:2B:B3:7B
X509v3 Authority Key Identifier:
keyid:41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9e:88:26:bb:8d:65:73:0e:0b:95:7e:2b:39:7d:50:78:f8:
ef:44:a1:15:cb:8b:fe:5d:ff:43:55:d7:37:ac:74:b4:2a:16:
0b:10:4b:44:cb:90:5a:e4:bd:62:a0:da:7c:12:5a:f1:a7:f0:
b2:39:0b:c4:07:fd:44:21:b5:09:98:2d:49:85:16:42:1f:63:
6a:52:98:42:58:ba:3a:4c:3d:e1:35:ef:ff:58:cd:a1:98:3a:
b6:31:49:8e:12:55:25:59:d8:ac:0a:2e:9c:d3:f6:c0:73:b0:
5b:29:6e:64:c6:d4:2b:65:04:c5:36:0c:ed:6b:6b:94:f3:23:
e5:f8:c8:53:5b:a5:f5:31:94:7e:22:ad:40:ea:13:3b:68:ce:
21:64:ae:59:ae:0f:80:41:5b:de:67:07:f5:f7:8d:df:33:50:
d7:f0:59:a4:91:7f:91:94:36:9a:1c:a7:cf:3f:83:77:76:b4:
6c:40:6e:ed:5c:f6:26:d2:a0:e2:eb:2c:82:bc:2f:0c:e7:f7:
43:b9:fd:b3:ce:17:c2:7a:06:82:49:2c:38:71:69:1b:b0:ee:
c6:b6:c6:ad:ad:d1:14:0f:d4:74:58:4d:65:4e:da:a7:ec:1b:
09:b0:48:42:22:3f:3e:ba:0c:c7:46:fc:4f:71:d9:c9:11:d2:
dd:d3:9a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:56:26 2025 by rpki-client