Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
File: QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft (raw, json)
Hash identifier: JW/wfShVL7RHdH+It2yY4vwwhIrLozcrhZNGgpmf6HU=
Subject key identifier: 39:1E:36:A8:F6:CD:B2:C2:94:93:58:D6:C3:76:A2:59:8D:05:66:9F
Authority key identifier: 41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87
Certificate issuer: /CN=41c4a5644f0429521d1fdc5bbb233a041b200887
Certificate serial: 01977942365F8C9B6995B8FC6E15387C65C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
Manifest number: 1591
Signing time: Mon 16 Jun 2025 15:01:11 +0000
Manifest this update: Mon 16 Jun 2025 15:01:11 +0000
Manifest next update: Tue 17 Jun 2025 15:01:11 +0000
Files and hashes: 1: QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl (hash: 8XLsjS7MYSIMIAH8fd+31Js29d1cpEnX7+nVP1Vv61Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:42:36:5f:8c:9b:69:95:b8:fc:6e:15:38:7c:65:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c4a5644f0429521d1fdc5bbb233a041b200887
Validity
Not Before: Jun 16 15:01:11 2025 GMT
Not After : Jun 17 15:01:11 2025 GMT
Subject: CN=391e36a8f6cdb2c2949358d6c376a2598d05669f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a5:d8:de:a3:7e:87:56:81:4c:99:e7:23:43:
07:b2:20:b4:fc:44:79:13:6f:3b:ae:f0:cc:b3:c6:
99:98:ba:da:e8:75:33:c0:91:67:e3:34:13:b7:ba:
a0:15:83:e1:83:a1:0e:a2:e3:4c:b1:13:e9:50:30:
8c:cf:ae:7a:a6:16:aa:fa:af:84:52:5a:2e:86:7a:
2b:84:35:3f:6b:3b:ee:8c:23:20:f6:1b:78:81:36:
59:6f:f7:78:0f:f4:7d:2b:22:db:96:21:09:bc:7f:
b1:3a:83:21:7f:80:28:86:16:6e:01:20:d2:21:a1:
0d:a7:9e:73:78:e4:c5:a5:7a:f8:43:10:d7:37:d3:
e6:2b:10:2f:a6:4f:ff:2d:a8:9b:6a:35:35:b2:a5:
d3:5b:c5:52:24:cb:32:78:13:3f:4e:3a:5e:40:56:
60:f0:58:3d:80:6f:00:90:26:e2:0c:c3:4c:24:e4:
36:43:96:44:36:b8:de:11:3b:fa:a2:59:83:69:84:
43:c3:c4:07:66:73:99:c7:e9:a1:bc:eb:76:fb:79:
7c:1d:42:d6:15:a8:cc:d3:73:42:56:8e:74:cb:40:
40:22:9e:bf:66:6e:56:38:80:bf:ed:7a:d0:bc:8c:
a1:63:8a:5b:c6:b6:e9:a5:d5:79:c0:7c:95:8b:73:
c3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1E:36:A8:F6:CD:B2:C2:94:93:58:D6:C3:76:A2:59:8D:05:66:9F
X509v3 Authority Key Identifier:
keyid:41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:57:7f:27:9b:cf:ff:d4:ec:47:5b:73:9c:27:b9:09:49:ce:
8e:d3:20:63:07:fd:a7:08:85:19:5b:70:2f:53:4b:8c:3b:86:
49:08:db:d0:e7:d0:c1:ca:58:c5:5f:0a:2d:05:2b:f7:21:8c:
cb:52:b8:e9:47:3f:eb:e1:18:ad:01:2a:82:41:45:21:67:89:
45:7d:72:1c:d8:ce:b8:7a:17:00:ef:48:41:1e:07:4a:ed:92:
37:50:39:cd:33:6d:0a:8c:ba:a1:e7:0e:2a:fe:9a:8d:0a:be:
a7:a2:a8:83:0b:7d:62:c0:de:f4:ca:f1:e5:2f:6b:55:90:3c:
a6:6f:3a:97:2f:2f:c3:59:8e:af:3d:b5:31:c4:1b:7e:f7:cc:
44:b2:38:4c:4d:6b:0c:b2:86:21:f5:00:9d:36:b6:de:8e:d2:
12:56:d6:fa:f8:e8:56:32:b4:7c:41:70:ba:1b:2a:c3:b7:7c:
5e:a0:41:ae:4b:c9:59:28:25:93:56:50:a1:6f:32:3c:c5:c0:
71:b5:4d:8c:4a:9c:48:93:d6:b4:7f:52:a7:05:df:38:55:8b:
9d:b3:98:a3:96:44:e6:25:de:1d:ca:75:bd:70:3c:7b:ca:b6:
20:44:33:5c:57:14:c4:20:4b:13:7d:3e:af:c6:02:9f:c6:25:
9c:fe:2d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:15:33 2025 by rpki-client