Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: pHwO22dLIo4u0QIpInzpYio+KPzDYrCv3Cgen18VDYo=
Subject key identifier: 93:6B:EC:07:39:5D:77:EC:F2:36:80:74:6B:9B:BE:AD:63:8A:CE:A1
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 019774894B73D16C066227A528C2D3CE6AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 12CF
Signing time: Sun 15 Jun 2025 17:00:44 +0000
Manifest this update: Sun 15 Jun 2025 17:00:44 +0000
Manifest next update: Mon 16 Jun 2025 17:00:44 +0000
Files and hashes: 1: F6ObM6UnximfbwiH1YL38MiUlBY.roa (hash: FMTxgNBaoS8PjWTC2HJz86nipqDf/pRuOEnb+E3AC9c=)
2: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: AgUZ6f+d1oQwt327R4iexP13mrBZQ5vZiE7tParSIIs=)
3: sf13oGu2DAluNtQ_y1zSmgQAeHE.roa (hash: gqTUmbOHfz421/G+vBG6eJTQ7lB+mn9m4coW+T9SV2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:89:4b:73:d1:6c:06:62:27:a5:28:c2:d3:ce:6a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Jun 15 17:00:44 2025 GMT
Not After : Jun 16 17:00:44 2025 GMT
Subject: CN=936bec07395d77ecf23680746b9bbead638acea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:eb:ac:65:1c:49:1c:93:da:f1:16:1a:74:a2:
08:f9:0c:d4:d7:4c:d6:79:c5:40:62:42:6b:c6:03:
09:59:b3:60:5d:25:90:ff:6f:cf:9d:73:61:24:06:
2a:76:65:d0:03:ff:bd:78:fd:05:ca:e0:0a:7b:12:
3a:18:10:cb:ae:29:e5:64:ee:ae:a7:74:68:59:47:
1b:0e:d1:a2:11:54:57:8f:8b:6f:8c:d2:7d:de:a9:
0f:b7:c7:ae:2e:5a:b4:c0:7d:37:0d:84:d2:46:9d:
a8:55:05:05:42:40:0e:c3:0f:a1:7a:a7:7c:af:5a:
76:4d:5c:4c:f1:55:6a:50:7c:0d:d6:07:a1:0a:6d:
7a:7f:7c:b5:3f:60:c5:c4:92:8e:05:d1:a8:43:36:
74:e5:69:a5:d2:d8:6a:4a:d7:90:b8:b7:62:4d:34:
98:e2:40:76:88:d3:11:d1:ce:ad:1a:35:2c:09:10:
26:62:cd:6f:12:79:64:ea:20:29:44:0e:3a:24:df:
e4:03:e8:a9:d3:d8:df:e1:b0:de:fb:41:30:69:d3:
db:fd:91:6b:a6:90:0f:20:3c:a5:b4:77:4d:01:cb:
46:d6:ec:b4:1b:30:a9:23:8b:ea:9c:8a:66:99:ac:
9c:0a:03:a4:6b:56:39:dd:94:75:2d:98:91:a1:d1:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6B:EC:07:39:5D:77:EC:F2:36:80:74:6B:9B:BE:AD:63:8A:CE:A1
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9c:bb:14:c8:fe:42:d9:f4:db:04:ad:f8:ba:b3:f6:23:f3:
29:2a:63:cf:e1:1b:09:fc:62:8b:22:67:4d:19:6b:90:57:3e:
32:df:30:21:ed:38:c1:63:8b:b8:a2:ab:d6:90:95:67:f7:f2:
7a:22:83:cc:a2:2c:21:53:e3:f2:9f:d6:d8:4a:44:3a:c4:1c:
f4:18:35:47:e8:56:ab:f1:cc:e2:57:bb:74:52:f3:22:a3:0c:
37:68:2d:b1:b0:2b:c4:39:02:cc:84:95:eb:da:84:80:32:59:
93:b9:6a:6f:97:60:f8:69:0f:74:64:4c:37:12:d1:ee:4f:c5:
f2:b7:2a:fd:27:77:73:3b:ec:50:4e:6c:41:de:dd:28:a4:bd:
c7:3a:5d:b6:7a:54:e1:f1:74:3f:a7:20:e9:81:8a:0d:3f:1e:
ab:b7:4b:20:de:ac:93:c3:7c:30:35:7a:29:bc:14:88:17:12:
13:a3:28:1d:4a:93:2d:e1:fd:19:47:8b:57:10:b0:38:a7:5e:
78:51:9e:0d:17:3d:d7:78:d4:ec:de:92:56:5a:80:43:c1:fe:
b7:88:ef:92:86:81:eb:ff:fc:ed:b4:87:b2:f9:f1:e1:79:b5:
d6:2d:bd:51:e8:68:a4:e2:13:a7:b2:5b:23:55:ee:6d:ba:1b:
2f:9c:20:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:08:24 2025 by rpki-client