Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
File: qyt5QmiS7R2nsuYYZ3DPsErmA80.mft (raw, json)
Hash identifier: ojxI8oTkcZDNcgNzmETNpf+UEAmuDsSzeb7woROCp4g=
Subject key identifier: BD:65:5E:C7:07:2D:E1:3D:9A:F1:87:4B:50:D0:57:65:86:62:12:77
Authority key identifier: AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
Certificate issuer: /CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Certificate serial: 0197B77C5E43C965A2B7138FB4785525E56C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
Manifest number: 085B
Signing time: Sat 28 Jun 2025 17:01:10 +0000
Manifest this update: Sat 28 Jun 2025 17:01:10 +0000
Manifest next update: Sun 29 Jun 2025 17:01:10 +0000
Files and hashes: 1: qyt5QmiS7R2nsuYYZ3DPsErmA80.crl (hash: sxYDUw8NKYq+jbOVFurNSq2baGJhvBz089gp9aOEQ2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5e:43:c9:65:a2:b7:13:8f:b4:78:55:25:e5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Validity
Not Before: Jun 28 17:01:10 2025 GMT
Not After : Jun 29 17:01:10 2025 GMT
Subject: CN=bd655ec7072de13d9af1874b50d0576586621277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:a7:c5:b6:dd:59:b4:cb:fb:1f:6a:9b:5f:
14:2d:5c:7f:b3:2e:f3:7c:2e:8b:e1:e9:9e:80:50:
1b:ac:bc:5b:9f:9e:c3:86:54:53:49:ea:77:6f:42:
5e:9a:85:12:39:5f:9c:f2:41:91:c2:4a:16:93:00:
fb:c2:f6:d7:22:c4:a8:a0:70:d1:19:a1:11:f5:46:
cd:be:13:e5:1c:18:bb:3a:27:8d:c5:df:23:60:20:
b5:55:d4:b3:2d:4b:a3:be:58:43:4c:ec:b7:9e:e0:
52:20:37:9a:71:2a:bf:a3:99:92:ef:83:06:2b:5d:
ad:4e:e1:68:e5:96:64:24:00:10:4d:d0:a5:f1:b6:
8d:8c:bd:46:d0:b3:cb:cb:77:29:43:8e:91:d2:d2:
49:b8:85:51:95:88:89:b4:3d:8b:9a:48:dd:0b:87:
c8:d1:4b:d1:84:28:4f:d3:6e:bf:cf:14:69:8a:c3:
16:72:a8:0c:b1:14:92:17:82:80:68:0b:6e:9a:8f:
f5:3a:e5:26:79:1b:6a:ba:77:c8:c2:5e:c1:4f:e9:
54:a7:e6:db:4d:de:34:d0:01:4f:e6:ee:0f:99:da:
92:93:89:66:61:a7:66:cf:33:a7:31:72:4b:f3:94:
5f:e0:16:e7:46:19:8c:b9:e4:4b:9c:54:b0:06:09:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:65:5E:C7:07:2D:E1:3D:9A:F1:87:4B:50:D0:57:65:86:62:12:77
X509v3 Authority Key Identifier:
keyid:AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:19:90:3d:55:88:6b:c5:ee:be:bb:f3:1a:3c:8d:6d:73:b2:
43:e9:23:7d:3a:cb:d3:b7:f5:d9:28:5f:0a:a8:74:2e:87:d9:
67:64:0d:09:eb:75:31:7a:b6:19:ad:9e:a5:7e:01:0e:66:00:
93:cd:26:29:cb:e9:6b:bc:37:7d:12:4e:51:17:7a:82:6a:c4:
31:36:fd:ee:b4:ab:30:49:6b:dd:31:a1:64:b8:0b:4b:fc:eb:
15:57:6f:c3:b7:ec:99:9b:91:bd:6b:6f:d8:ab:1a:ad:c0:a7:
9c:cc:f6:b8:90:05:d3:6b:64:ee:b2:a7:60:92:a7:b8:9b:5f:
e1:d0:46:a8:d1:6d:88:f2:7d:47:e8:61:bb:94:61:84:3c:40:
d3:aa:94:e7:20:24:b8:f6:5a:4f:4e:19:82:60:43:a5:81:97:
62:5f:78:91:50:94:ef:47:4e:26:3f:67:10:4b:9d:8e:cd:86:
ba:30:92:a6:fb:b7:f6:bf:44:80:a9:8c:ba:b8:ea:cf:ec:6b:
dc:9e:91:83:54:38:7c:36:c0:90:ba:ab:98:5f:5e:c8:48:fa:
f6:f3:75:14:7b:a7:22:a7:98:e0:54:8d:58:d9:3d:44:f8:2b:
09:ee:1e:1a:a6:b8:85:b5:95:c3:0d:26:e8:aa:ef:98:cd:28:
59:15:21:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:26 2025 by rpki-client