Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
File: QC3C-6qj1HWWdqebiv20wiX8BV8.mft (raw, json)
Hash identifier: CF84N/y6eym4FLTHtHOiiApfpDZauG+wwkVbQ91CnKg=
Subject key identifier: 9E:88:E3:FA:5C:6F:20:A8:2C:A1:95:B3:20:0B:96:4A:9B:ED:44:B3
Authority key identifier: 40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
Certificate issuer: /CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Certificate serial: 0197B7EAA64521491FE0D257EFBC8DEFF814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
Manifest number: 023E
Signing time: Sat 28 Jun 2025 19:01:37 +0000
Manifest this update: Sat 28 Jun 2025 19:01:37 +0000
Manifest next update: Sun 29 Jun 2025 19:01:37 +0000
Files and hashes: 1: QC3C-6qj1HWWdqebiv20wiX8BV8.crl (hash: T/bBBxBLgInatJbtCY3QtG84JR1j1gmNkZC3W5VeUck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a6:45:21:49:1f:e0:d2:57:ef:bc:8d:ef:f8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Validity
Not Before: Jun 28 19:01:37 2025 GMT
Not After : Jun 29 19:01:37 2025 GMT
Subject: CN=9e88e3fa5c6f20a82ca195b3200b964a9bed44b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:f4:6c:fc:8b:f4:85:3a:90:95:57:cc:02:
49:a0:10:b2:dc:85:25:ae:10:26:d7:44:a1:df:8f:
b9:71:59:14:c6:f8:63:3d:1e:6a:00:6a:cb:b5:58:
2f:4c:a8:7d:31:52:40:14:21:5e:d9:7a:ca:1a:3b:
3b:38:ef:4a:12:56:20:61:2c:ec:90:2c:73:11:bc:
68:87:91:c8:b1:48:a6:a4:a0:b3:89:44:ad:7d:21:
59:00:cb:67:1f:61:1c:2f:96:5c:21:f5:b9:bf:7a:
9d:68:91:3d:2e:9f:24:eb:ee:23:f2:78:c6:66:5d:
dd:38:fc:f4:f7:4a:dd:d9:33:15:3c:87:26:5f:0f:
cd:e1:df:84:a3:c3:62:58:6d:cd:55:2d:3d:a5:eb:
d1:db:f0:ce:90:08:ff:41:00:37:c0:14:8a:26:e9:
c5:ab:bf:4a:1f:d4:cc:15:2d:5d:ba:47:27:60:41:
d1:f9:b1:c2:03:d7:4c:dd:8b:5a:78:1d:9e:a1:cf:
ad:1a:10:da:13:a6:a6:15:24:38:81:60:46:62:cc:
8d:eb:42:c1:05:3c:f6:ff:51:aa:e2:a3:7b:fa:bf:
e2:e1:6b:bf:c9:d7:00:ce:9f:0c:29:16:be:53:de:
e5:97:7b:10:b5:ea:58:a8:1a:b1:90:41:41:d9:a3:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:88:E3:FA:5C:6F:20:A8:2C:A1:95:B3:20:0B:96:4A:9B:ED:44:B3
X509v3 Authority Key Identifier:
keyid:40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8d:ea:c3:01:8e:d9:40:41:37:95:75:90:2c:05:a4:b2:6c:
4f:a8:83:08:ca:2f:a7:f3:13:4b:df:26:5a:31:dc:3d:7c:4e:
5d:f7:0b:ef:dd:e0:d6:67:b2:a3:51:c0:a9:9b:25:6e:62:a1:
79:34:db:66:fc:03:04:54:b5:91:37:58:fd:78:8d:aa:ee:1e:
a3:76:7a:3c:51:0d:0b:94:cd:bf:4e:21:46:3c:a0:94:5e:2b:
3f:5f:9d:79:6f:69:ac:e3:15:29:3c:9a:87:f1:06:f5:de:07:
c6:c6:21:be:b3:98:9b:78:fb:cb:cf:b0:f8:96:48:66:45:b1:
65:0d:6a:47:66:71:b0:ec:8d:c3:21:ff:be:5f:9b:f6:0a:4f:
a8:53:83:f8:cf:4d:a5:ab:a8:28:ab:23:80:2f:61:57:34:7f:
e1:47:db:fc:61:ad:3b:fe:bc:a8:5d:d5:a9:00:d0:45:f2:c2:
87:ec:a6:3b:c8:ca:d6:b4:82:ee:e8:38:2e:9c:a2:a2:18:13:
50:2a:70:bc:c8:9a:07:83:b4:f6:b8:13:11:00:7f:c1:fe:28:
3d:eb:e7:b9:6a:7e:6e:b9:47:88:64:3d:b9:7d:91:61:96:26:
5b:9d:56:33:3b:de:50:c7:da:21:9c:69:f3:31:25:54:cd:51:
a7:4d:8c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:58 2025 by rpki-client