Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
File: QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft (raw, json)
Hash identifier: JrqL+q48h0Gpu/OubozaMaVPiHSzIM53wuMsX/D+lqY=
Subject key identifier: 61:F3:D4:66:9E:21:F7:75:21:1B:36:AA:24:03:D3:7B:32:13:66:30
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial: 0197B5FC04AC09A52593AE3A8E838D1D10F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
Manifest number: 1387
Signing time: Sat 28 Jun 2025 10:01:21 +0000
Manifest this update: Sat 28 Jun 2025 10:01:21 +0000
Manifest next update: Sun 29 Jun 2025 10:01:21 +0000
Files and hashes: 1: FdgrAlXHTUPAeTheMsde8YkawNs.roa (hash: rje6Lwajr0YyCxZcxBMKIrTaIp18lo7SaPvG3dwiyVA=)
2: QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl (hash: uW9/GijKVK6HOvYQWPX5JIs7o1oKTnYZSXzxcExAaHE=)
3: s_2L4K_sJnZRupOisUUmx-pSGhc.roa (hash: WrT7tu8a18enFrkb7Ns9dzR3YzLJ2dPG++PSa/YdVYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:04:ac:09:a5:25:93:ae:3a:8e:83:8d:1d:10:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40254d4a767ad099606e442e092f91241a363670
Validity
Not Before: Jun 28 10:01:21 2025 GMT
Not After : Jun 29 10:01:21 2025 GMT
Subject: CN=61f3d4669e21f775211b36aa2403d37b32136630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:19:14:37:67:dd:9b:01:30:f0:b3:ce:98:
f7:4a:3f:38:63:0a:82:1c:b9:05:0e:2a:44:c8:4e:
cf:e0:3a:5b:35:02:ee:52:c4:3f:17:fa:55:60:bc:
d3:4d:ba:0a:6c:3f:0f:f0:e9:53:a9:12:26:99:dd:
eb:50:c0:dd:fd:be:c0:10:f2:e2:93:22:7b:61:9a:
62:02:05:4f:bd:7b:11:b9:1c:91:ae:68:df:a2:a0:
dc:7f:26:44:f0:3f:f1:2c:30:ee:11:2d:31:79:50:
63:bb:d4:e6:df:8b:09:dc:86:7f:09:6b:bf:8c:0e:
41:12:a8:ad:52:0b:84:a8:46:e1:de:89:3e:ef:fa:
aa:4e:4f:d2:ac:e4:d4:62:a3:bd:a7:eb:7d:f7:cd:
15:d8:2d:68:58:9c:7e:8c:d0:11:d8:6a:21:2a:d7:
0b:3d:ea:51:79:16:20:a8:56:fa:d4:a7:c4:c7:49:
7b:f1:f0:a2:6b:a5:36:75:23:a9:e3:dc:af:c1:a4:
58:78:f4:72:49:c1:9e:12:1d:93:db:b7:ed:f8:c6:
4b:47:92:2e:57:39:05:6c:8d:29:b4:99:31:cb:63:
69:4a:b8:44:0a:89:d9:46:b0:20:d4:3d:5a:87:c1:
d6:76:56:57:9b:08:04:00:24:8e:14:81:99:65:aa:
b3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F3:D4:66:9E:21:F7:75:21:1B:36:AA:24:03:D3:7B:32:13:66:30
X509v3 Authority Key Identifier:
keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:48:53:65:0c:86:8f:10:90:a9:5a:5e:3a:9d:83:2b:41:08:
a9:d7:05:03:b5:42:3b:30:34:6c:d9:27:84:e0:4a:42:74:87:
a0:18:4a:f7:61:a5:bb:68:6c:49:24:45:08:df:ef:92:c7:fa:
68:cf:96:f0:29:82:c6:0a:c4:49:b4:ba:fc:eb:cc:f0:a7:a9:
8e:6b:5e:35:9a:a3:95:30:c5:1c:7b:1d:d6:93:51:74:fd:e1:
47:87:8a:96:03:88:99:5d:1e:fa:d6:77:7d:11:f2:68:ed:aa:
b7:84:41:67:b4:87:5e:99:ef:74:00:5b:c1:cb:0c:61:1f:9f:
b9:97:e2:fe:f0:44:ba:43:74:12:97:b6:e1:29:10:4b:95:0d:
3d:65:84:45:7b:82:e6:28:57:cd:0f:a8:09:d8:5e:d8:5a:a8:
60:68:6f:fb:49:53:63:3c:79:e0:53:bc:2e:60:86:1a:31:bd:
f6:6b:69:9f:7e:09:bb:10:76:e7:39:d0:82:ba:8f:ef:22:ad:
09:60:24:45:d1:e9:a2:b6:11:c1:2b:55:81:ba:0b:a2:1f:ca:
95:58:98:17:e8:6a:2a:4f:56:47:c8:b7:76:7d:bb:86:b5:f3:
8e:e7:e3:ce:84:ab:71:2b:e4:cb:e8:e0:7e:4b:3e:92:af:3c:
2f:cb:af:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:56 2025 by rpki-client