Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
File: Q5_i1RcHd00tDCv50SrQercmQqI.mft (raw, json)
Hash identifier: ZFA0yv6Il9P11F3lfdaeMsMDPV9eE6y8O+BFwPHzyvY=
Subject key identifier: 2B:D3:8E:A6:E4:88:38:12:5C:51:1D:FF:DF:B8:FD:10:9C:28:DA:DB
Authority key identifier: 43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
Certificate issuer: /CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Certificate serial: 0197B5FBED055FCCC46E2219863DB438A1E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
Manifest number: 0E19
Signing time: Sat 28 Jun 2025 10:01:15 +0000
Manifest this update: Sat 28 Jun 2025 10:01:15 +0000
Manifest next update: Sun 29 Jun 2025 10:01:15 +0000
Files and hashes: 1: Q5_i1RcHd00tDCv50SrQercmQqI.crl (hash: naSNUe1L4eqkNZUnHnmUwm64fCUzhD8R5v0x5MSLZj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:ed:05:5f:cc:c4:6e:22:19:86:3d:b4:38:a1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Validity
Not Before: Jun 28 10:01:15 2025 GMT
Not After : Jun 29 10:01:15 2025 GMT
Subject: CN=2bd38ea6e48838125c511dffdfb8fd109c28dadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:e9:f4:6a:a1:ca:31:bc:ba:09:de:b6:7f:
ed:41:1a:a4:2f:21:75:49:b8:65:3f:cd:74:40:95:
9a:8c:e7:1e:1b:38:36:58:7c:96:ac:37:33:0b:d7:
1c:15:a2:ca:a3:dd:a4:de:90:dc:90:94:b2:85:ff:
9a:32:d9:d1:e2:01:77:9b:7e:e3:69:ba:be:8b:64:
47:29:5a:6e:cc:1c:8a:06:01:0d:ae:59:31:b8:43:
15:3e:85:0a:d2:7a:71:13:ac:32:71:08:b2:5c:5b:
33:b1:01:9e:7b:3c:d7:bf:50:1f:9b:6f:ba:d8:1f:
e8:e2:20:5a:69:af:69:17:ae:57:80:5a:75:ed:0b:
32:9a:27:0f:03:15:48:b2:3d:c3:e0:3a:6d:ed:ee:
4b:93:e5:e8:0f:da:88:51:e3:0b:64:9b:00:ae:34:
2a:d9:3e:0b:fa:96:b0:57:62:e3:15:52:c4:26:81:
69:0b:b7:eb:57:02:1c:94:47:50:1c:44:9e:ee:34:
df:73:05:f5:99:0f:da:e3:b0:56:14:95:3e:15:e0:
f1:e0:74:82:fa:36:1c:79:3e:53:94:1e:3e:b6:ac:
2d:29:11:1e:f4:31:a7:48:57:74:74:e9:78:71:ef:
1f:90:88:14:14:64:d7:20:a0:48:5f:db:fa:a4:eb:
9b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D3:8E:A6:E4:88:38:12:5C:51:1D:FF:DF:B8:FD:10:9C:28:DA:DB
X509v3 Authority Key Identifier:
keyid:43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:85:26:85:82:8d:ca:e0:8c:c4:ec:09:f5:bf:c7:8c:3c:e4:
d3:52:fb:01:7f:6e:97:e6:77:5f:73:02:b8:c3:3b:48:93:55:
6a:02:2f:ab:64:02:4a:4e:b1:a7:ff:74:d4:0c:c1:9e:14:8d:
db:0d:86:0f:ba:fe:d9:d7:3a:a4:d8:ec:61:ee:67:97:ae:ed:
fb:95:e0:a2:51:a6:f8:ed:08:fe:6c:1d:53:9a:1d:7e:ac:1f:
a4:18:9c:ce:cd:b7:da:85:56:a2:09:54:2a:6b:c7:28:2c:c2:
89:5e:f8:85:3c:5a:0d:bc:3c:e9:b4:29:ed:c1:cd:12:8e:90:
30:4d:91:24:09:93:ca:f9:45:a0:95:a8:7b:8e:7f:da:85:ba:
ae:fe:6c:31:e7:3d:13:fe:82:e5:60:70:31:a2:f7:52:27:3e:
9e:40:b1:7f:1c:ff:8d:b5:0e:91:7c:85:ea:9e:eb:1e:c7:70:
6e:d7:db:c5:13:e2:6e:28:81:90:0e:c0:eb:e2:2d:64:7c:ab:
89:89:19:bf:6f:b9:62:c3:91:4a:a2:01:ea:b0:2a:fb:35:c1:
9c:05:d8:e4:6c:34:06:76:40:0f:3e:37:15:b5:96:7f:d0:87:
34:da:8b:96:9a:c2:b2:5f:4a:85:72:87:5f:bd:d2:6e:ea:42:
f8:6f:6f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:10 2025 by rpki-client