Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
File: Qe4efs0wuAogBvU4_OY7JCDFe-k.mft (raw, json)
Hash identifier: DbHR+sQft4/JcenMBjyvequeFIb2ybzgeUGxtXkGrqA=
Subject key identifier: 6B:66:61:C8:E4:92:14:9F:DC:93:C2:62:53:6C:F4:AA:FF:91:30:8A
Authority key identifier: 41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9
Certificate issuer: /CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
Certificate serial: 0197B77BFCD8D0E3220F52626C701AC699FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
Manifest number: 024F
Signing time: Sat 28 Jun 2025 17:00:45 +0000
Manifest this update: Sat 28 Jun 2025 17:00:45 +0000
Manifest next update: Sun 29 Jun 2025 17:00:45 +0000
Files and hashes: 1: Qe4efs0wuAogBvU4_OY7JCDFe-k.crl (hash: 1TRgjzS7Z2UHGqSAcZz74LbmDpUKu8BfUGkW33zy+ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:fc:d8:d0:e3:22:0f:52:62:6c:70:1a:c6:99:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
Validity
Not Before: Jun 28 17:00:45 2025 GMT
Not After : Jun 29 17:00:45 2025 GMT
Subject: CN=6b6661c8e492149fdc93c262536cf4aaff91308a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:a8:79:80:3d:9a:77:33:e9:36:6a:2c:fb:
df:9a:8c:b7:68:12:a3:08:3f:17:d5:75:b3:0d:b0:
b5:f8:55:4d:42:d3:d2:d3:f0:64:9d:9e:c5:76:4f:
96:82:37:15:d9:de:87:3c:cf:cc:78:16:eb:85:d8:
ca:de:dc:c9:50:eb:a0:7b:72:31:fa:26:59:59:bc:
98:a1:ba:70:79:ff:85:cb:e5:67:5b:47:c0:59:3c:
4e:f0:80:f9:25:92:53:ea:a9:d0:2a:19:c6:9c:d3:
3d:01:f5:00:7b:2b:60:29:1c:72:b5:75:71:94:94:
6e:fb:66:f8:bd:15:6d:53:a6:f4:82:5f:46:42:93:
61:ce:e3:97:fa:2a:e6:1c:85:31:b0:43:40:1d:db:
7f:ab:20:c2:b6:2a:fb:d1:37:3a:23:45:7a:19:89:
9e:06:a0:ce:10:77:4d:41:0e:c5:db:d8:74:80:5d:
41:3a:97:ad:19:63:cb:9e:0d:83:0c:31:38:3d:ab:
20:5e:a4:8f:f4:22:f0:58:af:08:20:49:45:d7:00:
e4:7b:85:2c:a2:79:a3:4c:00:94:c5:62:2f:e4:a1:
ec:af:97:e1:1b:0e:29:ad:06:c7:4d:da:eb:9f:7a:
c2:a7:ab:c3:6d:8f:e3:df:67:37:2c:f5:27:47:d6:
0d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:66:61:C8:E4:92:14:9F:DC:93:C2:62:53:6C:F4:AA:FF:91:30:8A
X509v3 Authority Key Identifier:
keyid:41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e8:a9:e9:4a:b9:7a:6f:27:76:32:d8:09:85:d6:1d:b9:e1:
26:09:b3:f9:54:02:f7:d1:c3:9c:8e:1a:49:22:d3:aa:9d:e1:
09:da:35:e6:fa:34:15:45:22:82:dd:28:40:83:e3:54:31:94:
3c:28:cb:08:c9:ee:6e:e6:8d:7f:56:43:b9:14:bf:9a:18:7b:
91:6b:c2:0e:8b:62:ba:cb:78:d2:b9:e1:6c:f2:12:e7:3c:2d:
6c:4c:b9:10:4d:87:2a:1c:cb:8e:6a:99:7d:2e:04:09:d1:fe:
4e:bc:9f:15:95:5c:2f:cb:09:34:e8:39:0a:51:3f:2c:29:91:
ba:50:c0:d3:5a:07:08:72:51:ca:45:b5:d7:27:06:f8:45:fa:
0f:bb:97:f7:0a:c7:f8:e0:b5:5a:0e:52:14:43:bf:09:4c:1a:
55:89:6a:45:e0:a4:5a:5d:ec:8e:dd:a3:0c:62:ac:dc:a6:d2:
e7:4a:68:30:01:5c:50:db:ca:fa:f6:fe:1c:72:cb:00:87:e1:
bd:d7:86:3b:18:2c:a1:6d:6c:e8:27:8b:e6:00:5c:1e:76:a0:
eb:d1:bd:8b:94:db:27:45:e0:c9:a6:fe:b9:2e:33:17:5e:04:
ee:5f:d4:69:83:7d:91:24:86:61:07:1b:14:e6:29:62:e8:e3:
9e:e7:af:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:33 2025 by rpki-client