Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
File: QEeepWLdOn0M8qbpeLa783j3POQ.mft (raw, json)
Hash identifier: SIOchCYT5w5+ImlvVvVdL9NaMsaYFpTxdSnbgh3TFAk=
Subject key identifier: 5F:0D:37:AB:D7:CE:07:85:26:C6:5B:92:E4:7D:92:49:B4:16:43:DF
Authority key identifier: 40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4
Certificate issuer: /CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
Certificate serial: 01976FD0CC0D281E867223857B43E98D63C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
Manifest number: 12DE
Signing time: Sat 14 Jun 2025 19:00:44 +0000
Manifest this update: Sat 14 Jun 2025 19:00:44 +0000
Manifest next update: Sun 15 Jun 2025 19:00:44 +0000
Files and hashes: 1: QEeepWLdOn0M8qbpeLa783j3POQ.crl (hash: tBVGe+qQst7vCE7HSubvSZ2aV5EYedTO6PmgItLTHsg=)
2: kDxnmkry6GSjGehsL9ntYXTgGms.roa (hash: wkEfOOZJ9TKbc6rsvn871D/mFlSMnjRucRMB/y4Wzco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:cc:0d:28:1e:86:72:23:85:7b:43:e9:8d:63:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
Validity
Not Before: Jun 14 19:00:44 2025 GMT
Not After : Jun 15 19:00:44 2025 GMT
Subject: CN=5f0d37abd7ce078526c65b92e47d9249b41643df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:4f:5a:f2:72:78:57:b0:8a:9e:fa:c3:2e:
3a:16:0a:80:7e:fb:25:25:f4:dc:f4:42:39:b4:14:
39:56:40:bf:9c:8d:56:45:31:8c:38:5f:05:df:4a:
b7:41:5f:ce:c2:64:27:f4:72:d7:36:38:fe:4a:1a:
6b:5d:3f:e2:75:05:49:0a:0f:f6:b6:79:02:f2:c1:
e4:bd:b4:ca:c9:d8:03:f6:7a:55:7c:4a:43:c5:2c:
9c:eb:3d:6e:a9:4a:9d:54:9f:9a:16:29:4e:eb:eb:
45:58:77:12:66:23:1c:5b:33:c4:3b:d4:39:87:2a:
fc:72:29:c6:58:cd:5a:98:51:df:ed:9d:d4:62:02:
9a:e0:db:43:bc:6b:a7:c4:91:5b:89:5b:a2:c0:02:
69:ff:2f:52:87:6b:e2:77:59:ca:02:58:49:32:76:
81:04:9b:46:18:64:97:0e:aa:f1:d3:f9:85:4e:88:
92:ef:6b:0d:d5:d5:cb:b1:29:1d:6f:0d:56:23:94:
5e:f5:ca:7c:ed:ec:53:2f:ec:d5:ec:ea:5e:c8:6d:
a7:10:83:bb:fb:e6:61:30:84:7e:46:eb:f6:bc:48:
4a:6a:17:44:61:31:c5:75:da:3b:41:d9:65:d0:e8:
e3:ba:2e:c5:b0:82:15:a6:2f:4e:b7:37:b4:43:4e:
6d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0D:37:AB:D7:CE:07:85:26:C6:5B:92:E4:7D:92:49:B4:16:43:DF
X509v3 Authority Key Identifier:
keyid:40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a8:8f:7a:e8:08:07:78:b9:ad:93:ed:0d:ae:01:ab:f7:79:
ce:c4:0b:4e:dc:f2:36:c9:d4:29:d7:5a:77:96:b9:24:39:32:
c9:d0:24:b9:80:d0:e6:e7:cb:78:dd:66:16:62:03:a7:bb:ad:
90:30:4d:c9:f4:2f:5e:1f:d4:6c:cf:13:05:c4:c3:6d:59:24:
e7:94:7c:fb:cf:32:59:67:de:64:c4:ad:e4:b3:90:f7:13:f1:
d7:6b:9f:06:26:d1:02:61:14:80:53:87:11:53:c8:15:8a:66:
a0:fb:99:58:32:91:55:b9:64:19:18:11:fa:fa:4c:57:05:4d:
d2:9b:0d:3c:4b:88:fe:31:26:7b:8e:c6:3f:9d:93:d2:90:3c:
ba:33:77:b6:a5:04:90:46:f2:66:f3:f8:58:21:ef:6a:da:4f:
6c:fc:1c:d4:ee:d4:35:42:4e:72:59:ab:bc:d2:ab:3c:4c:e2:
4b:1d:63:e4:49:e0:b1:ee:30:10:fb:be:4f:0d:d4:1a:ac:b6:
fe:a2:32:ee:5a:3c:08:33:72:73:80:fa:48:2e:bc:6e:d6:1d:
49:5c:39:08:0c:88:79:fd:e4:cf:ee:2d:8e:90:df:22:c8:32:
33:98:ca:e2:a0:7e:c2:d3:98:c1:e6:73:d3:58:08:f7:d6:2b:
d1:e4:e9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:13:44 2025 by rpki-client