Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
File: QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft (raw, json)
Hash identifier: 2zSb4AwxHulgFsfU3/pm/xmXoHNT4OW9GnJC+S/dU7w=
Subject key identifier: 50:AB:91:F4:E6:76:B0:CF:32:2A:65:FA:0D:0A:49:DE:1F:AD:06:FC
Authority key identifier: 40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
Certificate issuer: /CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Certificate serial: 019768F30E4632E63E874725AE4AC11731EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
Manifest number: 0BAA
Signing time: Fri 13 Jun 2025 11:00:48 +0000
Manifest this update: Fri 13 Jun 2025 11:00:48 +0000
Manifest next update: Sat 14 Jun 2025 11:00:48 +0000
Files and hashes: 1: QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl (hash: yxHNar11uEMJ+E53UXsrw4Hhb4Xo9gUxjviUCVmzOs8=)
2: vfjUIsx7CDVuZMrXZKkgTFoznUI.roa (hash: kc2fyWr6FJL7rTi0mPaMQj4eZbP6Y0dyJoouX+alOvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:0e:46:32:e6:3e:87:47:25:ae:4a:c1:17:31:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Validity
Not Before: Jun 13 11:00:48 2025 GMT
Not After : Jun 14 11:00:48 2025 GMT
Subject: CN=50ab91f4e676b0cf322a65fa0d0a49de1fad06fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:39:3d:04:c0:3b:7e:75:f0:c0:91:ff:c4:
2f:d6:32:1e:7b:25:6d:82:30:20:bb:21:54:e7:58:
e8:c6:5e:6d:d6:2e:69:d1:03:e4:84:fb:9a:3a:d9:
7d:b1:98:62:a3:79:aa:60:f9:ac:0b:a2:91:73:62:
47:3c:09:aa:9f:e3:33:85:e4:63:73:16:af:e8:9a:
e4:7f:19:d8:bd:6c:f0:49:fe:41:93:d2:8b:8f:8f:
48:c5:3d:d2:83:b5:84:57:5b:62:a9:91:d3:b9:2a:
60:d8:4c:60:e7:46:c6:d8:82:2b:21:64:c7:83:3b:
7c:fd:95:82:e3:c5:5a:af:ff:10:57:28:6c:fa:66:
32:85:31:d2:0f:2a:3f:d9:91:47:92:c0:fc:cf:1a:
c1:c5:23:c2:7e:67:c1:fb:21:63:f4:9d:cd:a3:16:
48:bb:99:ca:04:7c:a3:87:f5:cb:1e:66:f9:72:e3:
1d:75:ab:31:c5:df:66:9c:66:a0:a3:15:9d:e4:30:
c0:0e:97:fe:f5:35:e8:05:16:72:1f:a1:fe:63:0b:
d0:54:3a:04:95:4c:48:51:1a:53:e4:91:fe:82:dc:
b2:f4:f4:dc:d1:4c:e8:16:91:b8:28:24:cd:11:e9:
0a:e6:85:e3:5d:34:6f:70:9d:c5:92:4f:0c:ba:b6:
31:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AB:91:F4:E6:76:B0:CF:32:2A:65:FA:0D:0A:49:DE:1F:AD:06:FC
X509v3 Authority Key Identifier:
keyid:40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:53:57:e4:1b:91:80:5e:1d:f1:fc:5d:0a:d1:00:9b:cd:6d:
a2:6a:15:2a:28:06:d7:42:57:81:1c:18:5b:b3:86:60:e0:48:
9f:48:ca:22:ab:93:ed:e8:7c:e5:97:8a:c8:ce:de:7f:d2:dd:
83:e9:13:91:cc:1b:ed:ff:96:d1:85:12:fd:d2:0d:5e:8e:78:
f4:22:05:00:1e:62:75:5b:ac:1e:2e:a8:a9:9e:fb:d3:65:e2:
fe:7d:88:2a:e2:e4:14:93:ef:4e:43:68:0c:52:0b:ff:19:06:
2f:8e:3c:ad:84:44:a8:4e:5c:da:dd:8e:fe:ab:67:a4:6a:e8:
7b:d3:ed:ac:42:e3:4f:2e:40:ef:fa:e0:7b:18:87:de:3b:8b:
15:34:06:fb:ae:fc:dc:07:89:e1:71:93:1b:98:46:b7:74:04:
b9:4d:6f:a6:a4:9e:2f:13:66:7d:16:cc:9d:d8:60:cf:18:b4:
1e:77:82:ef:7e:0c:9c:0b:fd:e1:49:67:d9:c9:04:15:28:75:
0e:f4:20:dd:0c:34:14:db:ef:2a:d7:0a:85:11:04:0b:4d:59:
d7:5c:1b:6d:0a:75:aa:f4:d1:fe:21:6c:95:b3:10:57:4a:4f:
19:d5:33:6d:a3:da:6c:4f:f0:8d:1f:ca:f4:03:4e:36:a7:59:
09:e1:e8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:36 2025 by rpki-client