Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
File: QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft (raw, json)
Hash identifier: xQed3I2ob8pS9QpSsaCOMX9U6xLuK01yg47uXFDtfs0=
Subject key identifier: 5A:D2:E5:9D:8F:55:7C:06:78:C9:DC:9F:21:7B:4B:37:7F:00:9B:5B
Authority key identifier: 40:EE:97:65:86:4B:D1:1D:4A:34:94:26:E3:72:E1:1A:94:34:8D:E2
Certificate issuer: /CN=40ee9765864bd11d4a349426e372e11a94348de2
Certificate serial: 0197B6A0B15201167FF92A2DC1C3FC538E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO6XZYZL0R1KNJQm43LhGpQ0jeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
Manifest number: 06C4
Signing time: Sat 28 Jun 2025 13:01:13 +0000
Manifest this update: Sat 28 Jun 2025 13:01:13 +0000
Manifest next update: Sun 29 Jun 2025 13:01:13 +0000
Files and hashes: 1: QO6XZYZL0R1KNJQm43LhGpQ0jeI.crl (hash: 0jpGyMqz9VpxEvsOI4WuW5ttqHgT/VR/6Z4RjnMBu/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO6XZYZL0R1KNJQm43LhGpQ0jeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b1:52:01:16:7f:f9:2a:2d:c1:c3:fc:53:8e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ee9765864bd11d4a349426e372e11a94348de2
Validity
Not Before: Jun 28 13:01:13 2025 GMT
Not After : Jun 29 13:01:13 2025 GMT
Subject: CN=5ad2e59d8f557c0678c9dc9f217b4b377f009b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ae:b8:b7:f2:cc:75:8b:c7:e8:20:a1:93:ba:
5e:c1:5b:bb:70:ea:7f:90:52:d9:b8:01:2e:b0:28:
b8:90:53:0a:9b:b8:d0:d8:1b:bf:50:25:76:e6:98:
8c:84:b8:27:92:f1:b5:07:e8:df:f2:13:56:38:1a:
0f:8a:fe:7e:42:61:76:9a:c6:0d:f3:68:1d:ce:f0:
3e:d5:36:79:6a:35:22:9f:2a:97:1d:30:7f:7a:02:
bf:9e:03:85:4d:64:ec:b2:89:f9:f8:28:c2:c8:c9:
b8:af:2f:e8:af:d2:71:60:68:79:d5:07:94:12:a0:
9e:f0:67:03:5c:fb:98:75:36:92:0b:8f:b5:5e:84:
b5:73:4e:6f:ac:4d:71:fb:db:ed:6b:99:96:84:6e:
fe:f0:09:c3:4f:90:51:56:02:45:73:5a:13:e4:d7:
72:70:3d:bd:4c:83:48:24:bb:08:ce:0a:2c:0d:d1:
a0:a4:50:9a:b2:ec:37:6c:38:6b:12:92:2b:25:da:
c4:7d:dd:3f:3e:33:49:2c:73:60:1a:22:e8:8c:00:
41:f6:04:54:3c:eb:ec:86:85:b6:ab:90:e3:57:20:
69:43:45:aa:bf:65:3e:cd:9f:c9:84:cf:78:68:d2:
92:d6:37:9a:84:1e:5e:c1:a9:ab:a1:14:65:c4:c9:
af:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D2:E5:9D:8F:55:7C:06:78:C9:DC:9F:21:7B:4B:37:7F:00:9B:5B
X509v3 Authority Key Identifier:
keyid:40:EE:97:65:86:4B:D1:1D:4A:34:94:26:E3:72:E1:1A:94:34:8D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO6XZYZL0R1KNJQm43LhGpQ0jeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7f:41:70:96:66:f1:91:32:4a:0c:ba:8c:fc:50:64:d8:8e:
4d:78:5f:6b:b5:2f:41:24:9e:c1:62:18:48:a2:d2:5d:a1:80:
c2:d8:4e:a0:1e:da:d7:33:1e:10:86:2b:67:75:d8:cf:ff:f0:
a3:1d:5c:9d:c5:c5:9c:ae:a6:dd:5e:db:0b:1b:ff:cf:1b:9c:
28:d0:0c:9b:57:d4:17:da:42:00:b7:50:a9:b0:2d:a4:cd:34:
da:11:56:40:5f:3d:0b:dc:f0:56:7d:0c:15:92:05:e1:29:c4:
8b:a2:d6:6c:cf:cf:98:ca:2f:11:da:31:dd:29:14:07:60:9d:
9e:04:d3:55:8f:0f:da:8c:d3:2d:fb:29:b4:41:8c:52:21:b3:
9c:d1:c8:21:17:43:a4:cb:d9:cd:c3:fe:cb:14:5e:d9:2c:9d:
7f:2e:57:a9:2c:1e:b6:95:c4:fe:49:7c:ca:61:75:07:b8:39:
49:d3:9a:14:f1:10:4d:1b:8b:1e:24:7d:4b:d1:64:14:2c:e6:
09:ad:4c:51:9b:29:96:48:a1:ef:58:24:5b:b8:3e:5f:34:2f:
e4:7b:01:90:a8:2b:ac:9f:35:70:db:42:fb:4e:6f:21:a3:5b:
b9:e8:15:69:40:8f:bd:7a:cf:29:06:95:3e:89:4c:41:43:58:
18:62:88:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:05 2025 by rpki-client