Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
File: QFphtYwdUt5SLgQQCcv80fflK3w.mft (raw, json)
Hash identifier: XTvUrhfDiGSYVL3SgTuyuaPolfUHw8FGE3A/AtWOtjM=
Subject key identifier: 47:A8:8E:3F:B3:80:BD:B5:6A:89:6D:C7:65:4F:19:20:85:CC:60:5F
Authority key identifier: 40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C
Certificate issuer: /CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
Certificate serial: 0197BA7EE6A6E7D8057E51388647C264BBA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
Manifest number: 10B1
Signing time: Sun 29 Jun 2025 07:02:48 +0000
Manifest this update: Sun 29 Jun 2025 07:02:48 +0000
Manifest next update: Mon 30 Jun 2025 07:02:48 +0000
Files and hashes: 1: QFphtYwdUt5SLgQQCcv80fflK3w.crl (hash: Oe6ipAMe+6QXz1nwkowduCWdhR7e2jUa5CyM+TSVaRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:e6:a6:e7:d8:05:7e:51:38:86:47:c2:64:bb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
Validity
Not Before: Jun 29 07:02:48 2025 GMT
Not After : Jun 30 07:02:48 2025 GMT
Subject: CN=47a88e3fb380bdb56a896dc7654f192085cc605f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f1:24:4d:bf:24:27:28:44:b7:9b:e6:d2:11:
78:74:84:5c:30:d6:3c:83:7b:a1:de:3a:01:8a:fc:
0c:da:f6:e3:56:d7:d5:12:3b:5c:a9:26:93:e6:88:
98:49:38:43:17:8a:d0:68:c7:36:53:95:49:f0:94:
9f:38:23:e3:f4:a0:7b:b0:b3:40:3c:53:bb:79:53:
b4:43:55:75:67:69:9b:c2:b4:3b:d5:91:b1:31:dd:
ae:2d:3d:ad:14:b9:38:42:67:cd:97:e5:bb:d0:e6:
53:36:4c:fb:d1:8e:06:93:d8:db:7e:c2:56:f6:33:
1f:57:2b:dc:39:98:0a:de:ce:1a:0b:b9:30:7f:dc:
0f:60:03:9e:4f:a3:be:06:e4:d8:ac:5b:6a:72:86:
67:be:62:96:1c:c9:a8:cd:24:75:aa:34:91:6c:8b:
c8:19:14:96:5a:7a:4a:70:ed:db:68:82:bf:53:10:
0e:87:5f:15:18:b0:08:d8:3a:71:ac:3e:6f:59:3c:
f5:10:4c:dc:0d:d6:21:12:96:d7:c5:3d:02:47:6b:
90:4b:64:9d:76:f5:51:8f:67:93:a1:eb:39:ee:85:
74:2e:bf:85:b7:fc:f6:00:1b:74:0b:4f:63:8a:c3:
be:b1:23:ce:dd:48:35:59:98:b1:46:22:f2:d9:49:
ed:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A8:8E:3F:B3:80:BD:B5:6A:89:6D:C7:65:4F:19:20:85:CC:60:5F
X509v3 Authority Key Identifier:
keyid:40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:af:59:17:a9:4b:8d:94:9b:0c:9a:86:f7:6b:3f:c5:21:e6:
f0:0b:79:d8:ab:39:48:47:a7:0b:10:9a:34:b1:db:69:77:63:
c2:9e:d7:c2:26:1d:d6:f2:f1:5d:17:fa:72:3e:e3:15:b2:de:
78:98:3f:b0:8f:48:fa:23:4e:7d:a2:d9:d2:c8:48:35:c7:78:
8c:ca:66:fc:5a:aa:32:bf:cb:ed:f4:72:c5:6e:70:58:08:07:
5b:30:f0:14:97:46:2b:48:b0:8b:c5:fa:f7:f7:22:d6:13:9f:
c7:f7:46:aa:cf:2c:2a:f3:83:d8:16:5b:ed:75:74:e8:2c:49:
33:d7:2a:ea:52:03:a4:d0:31:0a:2f:5d:9f:49:87:09:37:8a:
aa:87:30:3e:d6:b2:6c:c6:e3:93:a3:13:45:65:25:c1:38:19:
ef:fb:b2:8b:df:f5:e5:29:95:d6:52:95:83:dc:66:4e:6c:79:
5d:d2:75:a9:63:55:f5:4c:53:46:4f:e5:b7:75:06:5b:da:1f:
4f:68:f3:e1:ec:9e:c4:98:7b:49:b7:34:87:5a:fb:12:6b:1f:
5e:e7:90:db:f4:99:05:49:27:db:f2:bb:81:15:85:9b:88:d1:
fc:a0:c7:50:92:3f:e3:6d:3a:af:2c:dc:95:58:57:c8:8b:03:
6b:47:d1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:26:15 2025 by rpki-client