Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier: nQjjBYvu3SKK/cTkgRKsSir0no4deXJXG2yu0cl6H3c=
Subject key identifier: 45:E4:45:47:4F:6A:BF:12:67:CC:48:32:16:6F:55:8C:38:6A:EA:65
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 0197B70E61FFAE6BBDCF8A417A5AE7504ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number: 133E
Signing time: Sat 28 Jun 2025 15:01:02 +0000
Manifest this update: Sat 28 Jun 2025 15:01:02 +0000
Manifest next update: Sun 29 Jun 2025 15:01:02 +0000
Files and hashes: 1: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: D6fdlmc+/iiyRo2ZZpjWU4cCh6ZGm/Y83sJGOncL6SY=)
2: knkqtZcmX5gSTiCaXxHQZfriQgw.roa (hash: E9ZLKfrMdp8ZIK1kQ0GbAJkgNgAmhxZR6M5lJ1uXi1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:61:ff:ae:6b:bd:cf:8a:41:7a:5a:e7:50:4a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: Jun 28 15:01:02 2025 GMT
Not After : Jun 29 15:01:02 2025 GMT
Subject: CN=45e445474f6abf1267cc4832166f558c386aea65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:11:1d:56:b1:c7:7b:68:76:82:c8:f3:8a:cd:
13:77:1d:c1:32:e7:b0:a9:73:b6:b4:f9:05:42:05:
47:1f:fd:e1:da:cb:9b:b8:b6:bb:48:34:16:35:8c:
d9:20:51:d6:13:28:58:a1:a6:9c:33:d2:08:63:e5:
b5:c7:ea:9a:fd:ab:9d:d6:98:30:fd:10:b5:67:b0:
04:9c:24:7e:31:35:eb:b2:e0:a9:1a:96:b2:db:8b:
be:89:4a:77:e9:04:32:fe:38:4b:e9:72:bb:d5:98:
35:2c:e5:30:5b:33:ed:f8:4e:44:3f:9e:3b:f5:21:
0c:f6:17:0a:cc:72:e5:5a:1e:d6:90:05:b1:10:72:
14:5f:d8:c8:77:c6:c1:85:88:93:3f:6e:da:3b:86:
27:cb:73:83:6d:43:30:03:be:1f:43:ab:57:2c:42:
4b:2e:14:26:4f:ed:a8:bf:74:13:6e:27:46:b3:d8:
e3:c6:86:9e:c4:e3:7e:06:ce:8e:c0:56:b5:c6:66:
e6:4e:88:1a:47:51:18:21:9e:78:38:88:0c:4a:2d:
ee:e0:d8:3c:13:47:95:3a:e6:ce:49:df:89:90:12:
5f:0e:f8:69:7d:34:03:f9:85:2f:92:17:c9:21:4a:
32:d3:0d:44:6e:5c:86:71:ae:e8:40:5c:35:82:a2:
85:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E4:45:47:4F:6A:BF:12:67:CC:48:32:16:6F:55:8C:38:6A:EA:65
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:92:d2:d4:fb:c3:97:98:f3:7c:8c:5e:4a:18:25:fe:44:69:
1e:19:85:64:de:c6:92:be:d0:49:eb:6b:6d:29:c4:dd:62:a6:
36:df:59:f0:35:fb:4d:22:ba:a4:a3:79:67:c9:65:93:fc:26:
c9:ba:66:81:38:35:76:9f:35:41:f7:f5:d0:2f:63:9c:34:53:
d8:f0:75:90:30:f8:ea:0b:65:52:ce:ab:7d:9c:6f:a5:27:36:
de:f4:c9:59:38:b9:7c:4e:28:5e:bb:3f:fa:8a:bf:c1:91:47:
10:32:be:57:8c:d5:04:b2:e1:94:88:15:a9:89:65:a8:e6:6d:
dd:1c:cc:6c:51:79:41:d7:0e:f0:8e:6f:e3:bd:60:fd:92:99:
cd:05:7a:24:8c:c2:d8:1d:75:fb:6a:b3:2f:cd:67:de:d3:e3:
6a:3f:7d:c1:e8:58:c0:15:aa:0a:d7:7f:67:81:f9:b7:3e:57:
db:50:34:f3:da:e5:cd:92:27:69:e3:db:3a:4a:33:25:1b:fe:
d0:ef:bb:1f:b3:45:1c:6b:9c:24:4c:b0:3c:cb:0f:c7:f8:6e:
37:c9:25:38:02:d0:d5:e8:8b:8f:5b:ff:08:69:94:d1:54:29:
03:7a:b4:c4:2c:b6:d6:e8:d7:53:55:2f:7e:1d:6e:70:e0:74:
a3:74:66:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:51 2025 by rpki-client