Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
File: qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft (raw, json)
Hash identifier: H4HAe0I9i+zYbQAUzfYTOe7d5tlTG8BxvUYGVjNodD0=
Subject key identifier: D2:52:D4:53:16:E2:FA:98:50:14:28:E3:65:9B:13:94:F6:FB:49:62
Authority key identifier: A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
Certificate issuer: /CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Certificate serial: 0197B9D92A94F6E6FAEED383C05A8DC501AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
Manifest number: 10A4
Signing time: Sun 29 Jun 2025 04:01:46 +0000
Manifest this update: Sun 29 Jun 2025 04:01:46 +0000
Manifest next update: Mon 30 Jun 2025 04:01:46 +0000
Files and hashes: 1: qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl (hash: dXec+pg4+gfIq72dD8anGMidcdV2siKz/+AtEbpn9lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:2a:94:f6:e6:fa:ee:d3:83:c0:5a:8d:c5:01:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Validity
Not Before: Jun 29 04:01:46 2025 GMT
Not After : Jun 30 04:01:46 2025 GMT
Subject: CN=d252d45316e2fa98501428e3659b1394f6fb4962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:20:44:49:24:1b:9f:b9:9d:74:f4:d0:a3:
72:74:c8:5d:26:6a:bf:83:40:c6:2a:55:9f:56:31:
a8:0a:cf:e8:de:80:17:55:6a:70:aa:7c:1b:18:4c:
d5:0d:fa:57:1c:74:99:59:63:8d:91:34:fc:26:e6:
a3:26:41:c4:23:e3:78:cd:d6:13:f2:3f:c5:38:4d:
e5:69:de:50:b9:37:42:6e:8e:a6:1b:4f:b0:4c:38:
f8:3f:ea:09:b6:52:78:26:86:99:15:fb:f7:6e:29:
1c:60:43:85:35:3d:22:00:b6:44:8a:82:c0:8b:57:
ed:ea:c5:ef:6b:ef:d0:64:4d:73:83:34:20:49:ff:
66:55:32:04:cd:2e:d8:a5:1c:99:31:0c:e9:ae:a0:
67:12:37:90:bc:3b:a7:15:e9:bf:a6:2a:fc:bd:59:
8f:97:0b:f6:c4:e3:66:5e:93:53:4d:f3:61:26:85:
b5:fd:84:8e:31:94:78:5f:01:36:60:bd:13:3f:95:
6e:8e:b4:12:db:75:89:5d:30:08:3e:72:a1:7a:ab:
89:0e:d2:be:e9:c5:a1:62:38:97:f7:7a:29:2f:d1:
4a:8d:f6:64:b8:4e:e9:53:f1:c9:0f:28:8c:96:8e:
ba:8a:26:d8:a2:ed:73:49:0d:63:e1:72:d0:22:ca:
94:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:52:D4:53:16:E2:FA:98:50:14:28:E3:65:9B:13:94:F6:FB:49:62
X509v3 Authority Key Identifier:
keyid:A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2d:ac:2e:e0:e0:19:d9:e0:2e:cf:09:94:47:28:08:fa:96:
91:a9:87:a3:54:53:08:e4:1b:5c:76:e5:a9:d7:66:56:f3:87:
ce:1f:f6:01:d4:4e:ce:54:00:59:62:25:c0:75:56:37:d5:09:
e2:48:0b:1c:6c:79:f2:11:bb:e7:68:15:b9:1f:30:63:75:4d:
a5:ba:c1:04:40:2c:c3:bb:bb:26:b1:f5:8d:ea:3e:81:2c:74:
8c:db:05:c7:45:e7:17:11:02:83:99:96:54:ae:9f:af:0c:96:
07:9b:dc:4d:b8:01:6e:9d:24:6c:83:7c:51:66:de:2c:f0:c4:
70:92:15:bf:30:b3:e8:87:00:e0:b7:97:40:48:86:fb:af:23:
5f:55:60:e8:64:4d:1d:d4:eb:32:ad:d5:80:ef:91:5a:5e:66:
e9:29:ab:0f:2a:98:81:7d:27:d7:5d:03:01:05:d2:6d:da:b9:
ee:b1:59:a5:0c:b1:38:cf:12:01:0c:0e:e9:13:d9:ff:04:ae:
2c:aa:28:f5:9b:c1:d0:47:a7:fc:a6:84:49:31:7f:63:e6:10:
6d:17:82:a1:96:9f:a6:2d:d4:90:d3:a6:88:cd:08:7d:91:48:
54:e6:be:da:4b:39:ab:d9:f6:bc:be:b7:e3:7e:d0:2d:ed:b5:
f5:6b:11:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:24 2025 by rpki-client