Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
File: QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft (raw, json)
Hash identifier: 3M7kvJ2aoVOjtp4+nBJolxjLsZOSFZDGA5yE0DW5f8k=
Subject key identifier: 4E:B8:3B:E1:75:4F:90:D3:2C:39:CE:B5:5D:07:40:CB:87:59:69:27
Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
Certificate issuer: /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Certificate serial: 0197B74513DD7AE49C349167F157A9C17327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
Manifest number: 08D5
Signing time: Sat 28 Jun 2025 16:00:46 +0000
Manifest this update: Sat 28 Jun 2025 16:00:46 +0000
Manifest next update: Sun 29 Jun 2025 16:00:46 +0000
Files and hashes: 1: QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl (hash: FLBCEFVBKh2fxt1nE69qIMqYWRVQ7ZYqln6L65sXo4k=)
2: _1j-vq_YcHaEMFMbb53TSNwHgps.roa (hash: FFNOOLLPGSug4NyRBtLQbxLYgOZN6JLp0mqYGuu/rHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:13:dd:7a:e4:9c:34:91:67:f1:57:a9:c1:73:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Validity
Not Before: Jun 28 16:00:46 2025 GMT
Not After : Jun 29 16:00:46 2025 GMT
Subject: CN=4eb83be1754f90d32c39ceb55d0740cb87596927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:8c:60:ed:f4:e7:16:da:40:e7:16:32:c6:
bc:a0:3f:c0:7b:be:02:d3:d4:bb:d1:5e:66:f4:a3:
49:6f:80:71:38:b7:05:74:8b:da:cb:0c:05:a4:1e:
ee:4c:b8:f4:9c:81:89:c7:7d:63:9f:73:e5:2e:d0:
bd:a9:88:86:34:74:5e:d0:02:30:3a:de:36:6f:2c:
ca:48:be:f2:f7:38:f0:bc:c7:34:d7:ad:ce:ab:4a:
0f:e8:bc:04:4a:a7:4f:1a:ae:f0:c9:44:86:ef:e1:
a6:2f:e1:bf:64:ee:89:80:ea:f7:75:ff:7a:35:5e:
52:9a:a4:06:40:fa:c7:07:37:8e:ff:92:10:94:63:
cb:f0:49:dc:1c:d6:02:33:ff:cc:8f:e3:c3:04:8b:
26:94:fd:a6:7e:b2:bb:38:bd:b5:2d:b9:d3:1c:36:
51:03:b6:ef:4a:81:07:59:6b:8d:70:31:b1:0c:6d:
bf:0a:a2:a6:75:44:bc:58:1f:21:d0:ee:dc:6e:3d:
0d:3c:9e:43:86:f6:74:bb:f6:0f:86:fe:b8:0b:a8:
ea:4d:60:c8:4f:24:09:eb:4c:47:c8:e9:c0:e4:47:
3d:d9:ef:d1:43:12:31:15:71:53:8b:a7:09:70:83:
4e:8b:55:1a:91:70:64:6b:4a:fb:a3:c0:ee:5f:08:
1a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B8:3B:E1:75:4F:90:D3:2C:39:CE:B5:5D:07:40:CB:87:59:69:27
X509v3 Authority Key Identifier:
keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e0:98:4c:80:7f:51:12:b7:7f:5c:10:27:07:e3:b7:d8:17:
ff:9a:fb:3b:c1:cc:fb:8e:5a:d9:5a:8f:dd:a0:82:13:96:e6:
28:72:18:15:04:44:c9:e3:57:f8:b3:f3:d8:74:4e:f4:3d:78:
02:7a:00:b6:d1:81:e9:a2:74:01:03:8d:af:88:ef:46:ca:d4:
48:3e:55:3f:73:d3:7a:91:4e:69:52:43:cb:01:64:68:1b:5a:
12:f3:e4:b8:8f:f7:20:4b:7b:fa:ec:08:6f:cd:7b:26:5e:ea:
2c:25:5b:d7:1a:fc:6e:40:f9:d0:58:fe:ea:0d:c8:61:58:15:
98:63:12:39:8d:43:1f:e3:7d:75:d7:43:05:c0:2f:65:f3:b7:
fd:d5:89:7c:73:5f:74:8a:ce:68:0a:ab:4a:c8:98:a5:92:39:
56:0d:8c:8b:35:63:81:6b:66:d2:f7:fb:21:e4:e5:1c:f1:b9:
db:c7:ac:b4:20:5a:57:e6:92:8a:3f:a2:0b:93:6f:32:a1:1d:
9c:bd:5c:af:ca:bd:87:7f:24:f4:b8:db:2c:ac:90:2e:9f:c4:
2f:e5:99:92:3f:9a:7a:19:77:ae:bb:3e:d5:66:6f:c5:55:af:
48:32:8d:ea:22:03:95:56:ce:0b:0a:85:b3:f2:8e:98:3f:e7:
d9:cb:61:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:49 2025 by rpki-client