Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
File: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft (raw, json)
Hash identifier: BhBCGLW0tgmiKtyp509BuB84VWRuim3VXOQLmBkrwfg=
Subject key identifier: 12:28:B1:58:FE:19:CC:F9:7D:60:B7:99:B6:E6:B4:FD:73:25:59:DF
Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
Certificate issuer: /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Certificate serial: 0197BA0FB68ED6193B7A302789D6205BD65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
Manifest number: 0E13
Signing time: Sun 29 Jun 2025 05:01:21 +0000
Manifest this update: Sun 29 Jun 2025 05:01:21 +0000
Manifest next update: Mon 30 Jun 2025 05:01:21 +0000
Files and hashes: 1: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl (hash: 74ItKi1krvM7KAhFAqGcwQ5kfjAjC4owSJLhIyAF0jA=)
2: epxu4ldel37euJv5iKK-6i05AIc.roa (hash: 8++9DWFJDI5Z8sw+rLXkJDDM4NKVAVZxp3Q8VNvU1K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:b6:8e:d6:19:3b:7a:30:27:89:d6:20:5b:d6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Validity
Not Before: Jun 29 05:01:21 2025 GMT
Not After : Jun 30 05:01:21 2025 GMT
Subject: CN=1228b158fe19ccf97d60b799b6e6b4fd732559df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:91:c9:bc:d1:dd:8d:7e:c5:f0:5f:c2:d5:
95:c7:59:bf:98:a0:f0:f3:20:da:04:b8:15:30:33:
8d:99:4d:0e:a8:09:ce:cc:15:06:1a:7e:a4:8b:00:
86:5f:be:90:23:4c:1a:d0:ea:5d:58:f1:68:53:7d:
a0:29:a9:e5:1a:45:62:ab:1f:91:d8:2d:25:ac:c7:
18:6d:a7:98:b5:3e:3d:32:b9:ce:e7:5e:69:47:9a:
e6:74:ba:9b:83:77:ae:c7:ea:a8:ea:01:8a:5d:30:
47:93:81:d1:bf:ed:77:46:4d:b5:fb:18:3e:bf:ab:
bc:f4:4b:a6:14:29:2d:ec:05:61:0a:ae:3d:44:25:
de:26:0b:10:c6:67:89:70:1e:6f:cb:1e:ee:bb:c2:
b1:bc:ac:d4:d5:a3:04:d1:14:2e:45:45:c7:1e:f7:
11:3e:34:12:dd:b7:8f:f2:84:92:4a:a4:33:3b:11:
02:6a:d5:da:66:d8:09:0b:3b:e3:b1:6f:bd:bc:97:
d7:2e:2d:76:9c:72:7c:f3:08:06:34:78:cd:fb:09:
74:e4:0b:79:0e:ec:43:be:c4:a5:d7:8f:3b:47:3e:
d1:9c:01:fe:5a:e9:2f:35:f7:05:87:d7:7c:9c:93:
36:fc:cc:22:86:f8:b8:14:cc:67:1e:68:c4:bd:3c:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:28:B1:58:FE:19:CC:F9:7D:60:B7:99:B6:E6:B4:FD:73:25:59:DF
X509v3 Authority Key Identifier:
keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:52:45:fd:4e:5d:37:01:21:60:d2:1c:6b:93:a6:6c:de:d1:
81:85:fe:5f:d7:39:3a:36:a2:b3:3c:58:03:0a:80:9b:f4:ef:
e0:9e:a1:a1:5a:e9:cd:ab:1f:78:8a:56:36:65:69:29:fc:99:
3a:0b:96:89:61:4a:d9:af:c4:7b:d3:c5:af:07:16:ab:f5:cb:
73:68:1d:57:ca:d7:03:4a:23:d7:e1:bc:7f:78:16:1c:46:76:
e3:fb:1c:5d:ce:cf:c4:5c:77:f3:d1:f7:ed:47:fe:2f:7d:0f:
21:4c:36:4e:75:7e:d0:96:ba:cb:96:cc:80:6f:7c:5b:d2:50:
59:2a:95:14:be:aa:e8:4f:01:d3:ac:5b:a0:10:c8:27:09:65:
77:c7:a8:d7:aa:98:07:d9:c9:bb:e8:1e:c5:2d:9c:51:4c:f0:
a4:f9:2f:bc:50:43:c5:8a:13:3c:9c:b3:a6:5f:0b:79:91:ef:
b9:2a:1c:13:5c:8a:6e:ae:57:81:49:0a:aa:ef:32:69:aa:70:
01:f6:47:bf:17:2f:9c:73:5e:b2:21:09:f7:40:73:10:6d:89:
46:29:58:43:76:ea:93:d8:7e:17:67:ee:08:ba:fb:b1:61:3d:
6c:d3:f7:57:fa:13:bb:68:4a:16:0f:b8:0b:d6:30:42:e2:a6:
67:56:f2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:58:28 2025 by rpki-client