Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
File: QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft (raw, json)
Hash identifier: h6qpSOt4yeOta8DWmvYR0RXeU17+dDnT4abFy8zHknU=
Subject key identifier: 62:64:27:9B:9B:45:A1:8D:DB:30:CA:CF:B8:89:65:FC:34:EF:58:3F
Authority key identifier: 42:13:B5:47:19:66:C2:56:10:D9:5A:5A:2F:A5:CC:06:FC:93:FF:57
Certificate issuer: /CN=4213b5471966c25610d95a5a2fa5cc06fc93ff57
Certificate serial: 019771BF57C17076AEFED9F927980005222B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
Manifest number: 04B5
Signing time: Sun 15 Jun 2025 04:00:54 +0000
Manifest this update: Sun 15 Jun 2025 04:00:54 +0000
Manifest next update: Mon 16 Jun 2025 04:00:54 +0000
Files and hashes: 1: QhO1RxlmwlYQ2VpaL6XMBvyT_1c.crl (hash: kJST85bcgjEQjrgAOYiMkS1w+Nxi759LIuuD/N3PaJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:57:c1:70:76:ae:fe:d9:f9:27:98:00:05:22:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4213b5471966c25610d95a5a2fa5cc06fc93ff57
Validity
Not Before: Jun 15 04:00:54 2025 GMT
Not After : Jun 16 04:00:54 2025 GMT
Subject: CN=6264279b9b45a18ddb30cacfb88965fc34ef583f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:31:0d:31:81:90:5f:e0:8e:26:57:72:14:
c9:fd:83:a7:d8:a3:e9:95:de:45:17:e6:0f:2a:a4:
07:3c:4c:e4:2b:ec:44:27:c1:94:c1:9a:a5:66:06:
f1:6e:f1:a1:24:b8:a5:84:60:a3:b7:c1:f7:0c:63:
e4:ae:ad:ef:5c:c9:6c:9c:e1:73:86:13:58:aa:51:
2d:b4:3b:30:03:0e:20:32:57:80:94:3b:c8:c6:a4:
54:0a:67:4f:b9:77:a6:54:4b:74:9e:bd:f4:47:79:
f7:68:4d:53:7e:26:03:2a:f2:72:28:79:86:37:0c:
e8:87:6f:98:0d:f7:e2:bb:8a:44:db:2d:c1:cc:38:
6b:d5:bd:21:f3:03:12:c0:ab:ea:63:38:12:f0:d8:
47:c3:ae:66:a0:08:e3:db:c9:a6:8a:5e:4a:7a:55:
1e:02:f8:35:23:eb:0e:70:99:a1:92:32:d1:12:08:
d4:e2:92:2e:1a:1b:c4:9b:e6:a3:84:4a:c0:84:71:
06:69:0e:f8:74:05:9d:ae:b5:45:6d:f1:bb:5d:88:
68:4a:c6:85:72:7b:69:03:c4:b9:79:5d:89:9d:6f:
84:57:60:7d:6a:1e:7b:67:97:07:61:06:b7:7e:03:
82:6e:64:af:9e:80:3c:de:02:33:fc:db:ec:1d:27:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:64:27:9B:9B:45:A1:8D:DB:30:CA:CF:B8:89:65:FC:34:EF:58:3F
X509v3 Authority Key Identifier:
keyid:42:13:B5:47:19:66:C2:56:10:D9:5A:5A:2F:A5:CC:06:FC:93:FF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3e:bd:ab:ee:a3:eb:77:ea:74:7f:f2:b3:62:97:de:a5:a4:
82:e4:12:7e:0b:32:c4:f1:86:32:20:cd:96:40:71:d6:3a:25:
2b:ad:1d:db:e5:11:f3:c2:40:cc:8f:bd:0c:1c:4d:9a:84:25:
94:de:1c:eb:ba:a0:24:ad:69:b3:7e:d8:05:3c:74:3e:4e:14:
b5:3f:23:e9:4b:63:66:4a:4c:9a:df:59:82:4a:63:e0:47:ea:
fe:b5:6b:da:a9:ae:58:0a:f8:50:e9:7d:e2:5c:f1:94:5d:2c:
71:01:33:85:66:80:6e:c6:4a:24:2f:35:ac:3e:0c:33:19:1a:
98:70:6a:72:04:21:aa:24:08:5e:02:37:f8:6f:c4:93:c8:70:
38:05:5b:56:46:88:d4:3a:11:cc:2d:77:a0:4f:37:d7:d2:cc:
c8:90:67:5b:57:9f:20:4a:c1:44:fc:74:47:9a:ec:77:8b:e8:
39:6d:db:30:21:c9:86:cb:74:c2:23:4a:fd:ba:b0:5a:9e:ff:
14:2f:d0:61:20:46:ba:83:17:13:88:b4:7b:47:00:be:84:41:
0d:b3:eb:4f:1c:00:10:70:66:c4:a7:ce:76:90:97:48:5e:64:
00:bb:85:81:8e:68:8f:f2:ad:21:b2:78:f1:8f:cc:07:20:24:
21:a8:a5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:17:03 2025 by rpki-client