Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
File: QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft (raw, json)
Hash identifier: rwbD8cbqRh1svnW/pjc/0xqkZU5ID72MI4qDM6eLugw=
Subject key identifier: B0:DD:1B:A6:22:FA:21:18:6A:10:BE:58:CF:D2:BC:3A:08:C7:DA:64
Authority key identifier: 42:00:EB:2F:8F:D0:13:8C:43:77:F5:40:00:6C:FC:8B:76:5C:4A:76
Certificate issuer: /CN=4200eb2f8fd0138c4377f540006cfc8b765c4a76
Certificate serial: 0197B6A0FA683CE381C9872770C7C9707DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
Manifest number: 0BB4
Signing time: Sat 28 Jun 2025 13:01:32 +0000
Manifest this update: Sat 28 Jun 2025 13:01:32 +0000
Manifest next update: Sun 29 Jun 2025 13:01:32 +0000
Files and hashes: 1: Pi86dWn6x9Vtc8GH3REzDrMrSX0.roa (hash: geFyDSt8c1EYU/IR6IGQVBM3q8GhN/Mt5BfwBL1upLs=)
2: QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl (hash: dpFbAFIka3JJVsBwLK81MhmU9L99kWVcVRcYtHj65Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:fa:68:3c:e3:81:c9:87:27:70:c7:c9:70:7d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200eb2f8fd0138c4377f540006cfc8b765c4a76
Validity
Not Before: Jun 28 13:01:32 2025 GMT
Not After : Jun 29 13:01:32 2025 GMT
Subject: CN=b0dd1ba622fa21186a10be58cfd2bc3a08c7da64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:9e:cb:3b:53:4d:96:13:5a:06:85:92:42:
56:a8:e7:2b:ca:2c:64:0b:b8:63:05:e0:c1:99:ed:
b4:d8:21:ef:a7:e0:19:61:a5:1b:7c:9e:14:c6:81:
88:70:ad:1c:3a:72:26:57:93:56:b9:5e:62:64:3f:
73:14:54:9d:36:d5:76:f0:2c:5a:2d:18:ba:7d:b7:
3c:29:8a:76:7d:ca:19:49:a3:99:dc:ff:1f:05:b8:
e5:86:9d:e1:7e:f4:2b:9c:c8:1f:a7:cf:4f:b0:9b:
0a:ad:b5:ed:ad:fc:9e:62:93:83:1c:31:45:68:12:
8e:10:c2:2f:65:ef:c0:42:ea:06:86:c1:48:8b:af:
74:77:37:b1:c1:c1:4b:4c:81:b8:76:83:73:f1:af:
6d:61:c4:dc:97:29:75:8a:c2:af:e6:9d:cc:68:99:
c0:6e:ec:14:81:b7:99:4c:11:d2:77:50:3c:a3:fa:
38:db:bd:22:4d:df:96:fa:0c:a0:ef:33:b2:74:65:
fd:ed:83:fb:b1:32:58:30:15:4e:c4:51:da:8d:26:
e6:72:f7:fd:d0:56:10:eb:b8:ab:b3:b8:72:c0:1f:
a8:82:eb:b4:56:9b:6e:bb:35:3d:59:d2:23:93:1d:
81:5a:0b:6b:aa:4c:e7:ef:a6:13:f5:30:45:e8:4b:
ac:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DD:1B:A6:22:FA:21:18:6A:10:BE:58:CF:D2:BC:3A:08:C7:DA:64
X509v3 Authority Key Identifier:
keyid:42:00:EB:2F:8F:D0:13:8C:43:77:F5:40:00:6C:FC:8B:76:5C:4A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:63:be:1d:11:0d:4f:a4:0e:d6:0b:a0:83:0e:50:09:0d:89:
ca:3c:b7:6c:a8:69:94:c2:d6:d2:bc:dd:0d:2d:1c:0b:c6:4b:
b2:44:7f:cf:0e:7a:1c:b1:34:62:89:a9:cf:01:1d:5a:9f:10:
06:13:ac:4d:4f:bd:fc:04:91:11:b2:7e:20:cb:1e:1b:5f:a3:
06:9f:2b:5f:e0:8b:7b:ed:2a:e8:60:d2:0b:28:7b:00:e8:e6:
56:fa:5f:89:da:d7:44:49:f5:5e:51:0e:ad:90:15:f3:b5:33:
ce:6c:5d:01:55:88:ed:c6:a5:50:ed:ba:7e:ee:b2:b7:d0:72:
47:90:32:d5:15:0c:db:2b:1a:a6:3b:34:af:fb:53:6d:c4:d9:
4c:29:d1:ed:ba:f6:44:e0:ef:5b:28:c1:57:90:17:af:18:05:
c3:7f:eb:15:94:f0:91:60:61:81:8e:17:de:e3:51:c4:55:84:
5b:14:f8:ee:7a:d0:00:51:78:07:99:8a:21:ae:a6:f7:b1:41:
db:2b:87:25:c3:a8:b1:d4:8b:c4:83:ef:6a:82:04:f1:8d:5a:
f0:26:0a:9d:3a:21:5a:a1:00:79:9f:0c:c1:28:10:13:14:5d:
4f:93:b9:4c:23:13:98:a3:3f:4c:95:06:cf:1d:25:71:f3:d3:
ca:70:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:02 2025 by rpki-client