Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: eLnpJ0k+jXDDjtIyc8pjriy3tI3JcbZoKP1DP4VSQqY=
Subject key identifier: C9:2C:43:75:95:83:A2:12:78:48:C6:0D:83:A3:BB:87:AF:19:76:59
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 0197B7B364ED8A61C9E3C608876E0C901890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 115F
Signing time: Sat 28 Jun 2025 18:01:16 +0000
Manifest this update: Sat 28 Jun 2025 18:01:16 +0000
Manifest next update: Sun 29 Jun 2025 18:01:16 +0000
Files and hashes: 1: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: WrzcOMz8B6NXb1AhsdGMD1ekR6HFJ8A497AoieAbYLE=)
2: zEBQe0diBcaOVV5htU-MT0YXuxI.roa (hash: vc03WVR1fNObTg7X+wnsDqJFAk1MeivSKBBQ+zB+8LI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:64:ed:8a:61:c9:e3:c6:08:87:6e:0c:90:18:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Jun 28 18:01:16 2025 GMT
Not After : Jun 29 18:01:16 2025 GMT
Subject: CN=c92c43759583a2127848c60d83a3bb87af197659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2e:db:c1:dc:f2:90:c3:51:de:3f:17:ff:f0:
09:e3:ca:1f:4b:79:64:71:f3:ab:f1:90:89:5a:03:
92:ca:c3:bd:db:4f:0e:ee:e1:ba:da:fe:fb:cf:fb:
d2:00:68:ce:db:4c:a2:b9:f8:71:90:19:8a:38:07:
2b:e5:01:36:b4:75:e2:99:40:a3:90:d5:23:5e:f0:
a0:f5:4b:5f:3a:2c:18:14:5b:7f:ee:8c:83:31:27:
95:08:1a:be:f1:28:6b:e6:33:e0:2d:26:6b:9b:bb:
d0:8e:0e:0d:7b:f6:d0:fa:b2:96:8b:7f:0c:bf:e2:
e7:c8:41:40:6a:e9:a4:45:c1:44:7c:2d:4b:46:cb:
cc:f2:3b:6c:cc:ed:69:47:fc:8e:14:8f:4f:95:95:
23:4c:ac:56:ff:ba:42:e9:4c:25:2a:74:f3:7b:5d:
f0:95:77:a0:82:69:c2:9f:37:61:20:c2:49:78:ac:
51:75:fd:e8:c8:53:a6:95:bb:14:8d:8a:0f:58:78:
d6:39:31:bc:6c:fb:9a:bd:5b:ea:e7:b0:58:f3:cd:
96:b2:7c:bc:bf:50:bb:9f:ab:70:38:d4:17:eb:1d:
8c:e8:38:ec:2f:6e:13:50:21:2b:54:71:57:c7:0c:
17:0c:89:08:cc:1c:d6:97:c2:99:31:20:bc:3a:3c:
f3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2C:43:75:95:83:A2:12:78:48:C6:0D:83:A3:BB:87:AF:19:76:59
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f2:87:9b:96:98:cb:11:1f:dd:1c:96:4f:ff:40:63:d4:d1:
a8:e9:a8:f2:d2:28:a3:ef:73:dd:fe:62:f0:e2:a2:cb:b0:e3:
81:8b:f1:f8:00:1e:83:5a:07:11:05:9d:b9:be:7b:a2:f3:58:
c6:d4:d8:86:34:b0:75:3e:64:b2:c4:b8:bb:da:c2:a2:cb:73:
1f:aa:1e:09:b0:6d:09:88:07:72:36:d5:5c:d8:ac:0e:53:7d:
8a:09:fa:13:66:59:f4:b0:a1:75:92:49:7e:db:8d:9a:37:9e:
f1:e7:52:df:b1:75:0b:db:fb:a7:37:a4:b6:1d:f8:69:c5:b4:
88:75:5c:85:df:74:94:7b:4b:dc:16:b1:fd:5d:fe:c3:f3:71:
eb:7b:59:72:91:ff:8d:06:f1:ab:d4:77:d7:90:7e:39:6d:27:
c4:13:bb:f0:f6:ef:7c:18:7c:79:92:1e:c6:53:6d:85:40:b0:
a6:0b:3c:3b:ba:40:c5:de:cc:c4:1e:9f:96:46:4a:4c:0a:bd:
d1:e9:b5:e7:27:81:65:0e:2a:5a:4e:e5:c7:a2:8b:cd:dd:78:
a0:54:cb:37:ca:4f:ed:2b:00:09:ab:08:5d:67:cb:d2:fa:96:
b8:a3:9f:1f:ee:9c:c7:9f:ba:9b:d9:e4:41:da:54:ea:b8:3b:
c5:2e:50:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:39:05 2025 by rpki-client