Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: naRr90yhmmm/hAGdD4bDpEQNazhrPeb12Cdbrr58eAk=
Subject key identifier: 87:DA:EB:6E:14:50:4A:B7:70:AE:AE:B3:EC:E1:0E:32:25:CC:83:0F
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 0197C6EFBA4FCCF76AA06DBF294B4FF93AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 17:01:28 +0000
Manifest this update: Tue 01 Jul 2025 17:01:28 +0000
Manifest next update: Wed 02 Jul 2025 17:01:28 +0000
Files and hashes: 1: EuVjqybteP4_2uP1qrjFTh6Ex84.roa (hash: VQ7r6aXcK3EoAppW65m/zYlli6sD8iLPznPeACkUL+k=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: 9b1WjJGVqHvQZhg8YfJPwOrvblwguN1KXKsR5EujPXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ef:ba:4f:cc:f7:6a:a0:6d:bf:29:4b:4f:f9:3a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Jul 1 17:01:28 2025 GMT
Not After : Jul 2 17:01:28 2025 GMT
Subject: CN=87daeb6e14504ab770aeaeb3ece10e3225cc830f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:23:84:b4:76:9a:26:44:92:2f:47:e1:8f:
d9:e2:7a:83:62:c0:60:d7:94:ae:1f:96:52:0e:a8:
9c:9e:d5:7f:2a:09:6e:19:8e:85:a5:9a:37:bf:eb:
bc:59:b4:93:b4:41:9e:f3:b0:eb:18:2d:9a:cd:b0:
9a:52:e9:34:b1:62:a5:00:17:aa:f5:54:94:64:46:
03:c7:7f:09:cc:2b:01:03:4d:d5:b9:2f:31:59:d0:
f4:f5:dd:d9:47:c7:f8:8e:25:db:d4:e0:80:c9:a8:
5f:12:a6:29:75:e5:eb:63:3a:32:60:40:c0:f7:85:
56:bf:41:43:83:f2:cb:fd:af:5a:2a:3e:9e:fe:7a:
d8:cb:ef:05:c8:1e:69:5c:cb:56:e2:30:8b:6f:5f:
fc:e1:47:a2:ca:06:63:9b:4d:9c:ae:91:c6:6b:3d:
ff:da:a0:fe:fb:66:00:53:30:b6:a4:4c:71:b4:c5:
61:9d:34:9a:60:49:59:47:8d:9d:8e:4b:f6:08:40:
2f:5e:a9:c1:22:fb:70:36:55:39:7c:63:5c:5a:61:
cd:a4:9b:6c:60:56:3c:95:9b:0d:11:e9:65:26:74:
5e:f6:84:ac:f9:f7:f7:bc:3e:67:c7:84:7a:54:98:
f3:85:44:57:9e:3b:ed:be:29:8f:be:f8:dc:61:99:
52:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DA:EB:6E:14:50:4A:B7:70:AE:AE:B3:EC:E1:0E:32:25:CC:83:0F
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:22:f0:3b:71:9a:f4:84:b0:95:59:90:98:fb:b6:2f:54:9a:
63:f4:5f:96:db:78:f7:51:d4:91:65:1e:84:50:92:d2:64:6b:
49:55:67:82:6d:e9:05:42:c5:42:0b:b7:59:8d:15:8f:62:fb:
23:50:58:27:fa:d7:0d:d8:15:51:b0:45:fb:cc:60:b8:3c:a0:
be:6a:6b:d3:c8:59:57:04:56:d6:8e:f8:92:67:43:86:c5:e0:
14:8a:f8:13:9b:43:e6:ac:64:48:ea:b7:13:59:04:10:cf:22:
9f:3b:32:18:9d:15:88:9a:a4:4b:e2:bd:28:fc:a3:83:e2:e9:
93:c4:5f:01:07:f2:a2:87:35:9e:92:8f:06:47:4f:80:b4:4e:
2d:67:c1:f7:2b:eb:9b:5d:2f:26:e9:e2:67:90:ef:8b:a6:92:
4a:47:b9:80:a5:b5:38:27:32:e2:c6:bf:7f:4f:7d:80:72:b2:
f4:e6:8e:44:a2:c6:83:ae:bf:15:4f:69:de:5c:c1:f8:9c:fa:
df:cd:c1:0f:fe:7c:e2:32:20:63:a8:e5:96:3d:6d:34:0e:1c:
d1:32:13:0b:6f:53:76:15:3b:9a:2a:91:a6:89:44:36:08:a7:
8e:2b:cc:63:06:0d:bd:1c:0a:b1:c8:44:0c:6d:78:80:f3:bd:
1a:f9:04:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:31:39 2025 by rpki-client