Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
File: QdD5FclU2DtKG_GEz7wTjEftpR4.mft (raw, json)
Hash identifier: wDC3denIbzU6H+9VbEQWTbqWZY6+WE83m9+QLRrviUg=
Subject key identifier: 96:23:9C:34:39:2F:8B:C5:BE:BA:AC:CD:0A:0C:C1:E9:40:54:63:27
Authority key identifier: 41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
Certificate issuer: /CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Certificate serial: 01977C79D51650539820CDED4FC44D907ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
Manifest number: 1229
Signing time: Tue 17 Jun 2025 06:00:48 +0000
Manifest this update: Tue 17 Jun 2025 06:00:48 +0000
Manifest next update: Wed 18 Jun 2025 06:00:48 +0000
Files and hashes: 1: QdD5FclU2DtKG_GEz7wTjEftpR4.crl (hash: TIPMr89U2GLqK/clqW8e/VVCddzg2MxM2n+6o4hiOK0=)
2: f6uKeUIzMA-uVptKc1ueYhFBFxM.roa (hash: yRxjbOfn/yIPjsEZSwuKIczmA3RcTEjtjojH+74JQXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:79:d5:16:50:53:98:20:cd:ed:4f:c4:4d:90:7a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Validity
Not Before: Jun 17 06:00:48 2025 GMT
Not After : Jun 18 06:00:48 2025 GMT
Subject: CN=96239c34392f8bc5bebaaccd0a0cc1e940546327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:b3:a9:05:b0:e7:93:5e:27:ce:3e:b8:c3:
f6:04:b7:6a:59:0d:7c:58:78:3b:7c:ef:e2:29:6d:
f5:32:80:38:52:8f:b8:33:92:48:ab:89:6c:a7:78:
b2:63:ef:12:6a:68:45:1d:03:79:87:0d:06:78:5c:
0d:c7:9d:91:69:87:74:b5:81:c0:f4:0b:8a:cf:96:
3a:16:c6:be:58:be:38:75:9e:55:0c:6d:fc:f8:ea:
76:23:99:57:62:3a:b8:6d:34:a7:bd:93:4c:8d:53:
c7:0b:77:02:f2:c4:f6:d9:35:65:6e:aa:13:3a:ee:
a1:b9:c9:01:16:59:35:1f:bc:a3:4b:68:c1:35:0f:
74:29:2c:2d:76:a5:73:38:fd:75:3c:63:4e:5e:ab:
fd:13:bb:d7:cb:23:61:d2:82:9b:28:f2:d3:72:e0:
0e:a7:82:07:a4:1c:9f:88:00:86:65:14:d8:57:ab:
88:b1:c8:4e:4c:f8:bb:64:bc:d1:22:72:6c:b7:65:
25:62:78:66:b5:45:1c:55:85:cf:1c:2f:6c:06:ac:
ec:ce:7b:0b:c6:b9:68:77:c8:f2:b8:57:2a:42:b5:
70:37:83:7e:8a:a9:b7:e3:fd:87:22:47:a5:ec:6b:
31:93:83:a8:c0:70:32:98:fb:9b:fc:23:c0:86:aa:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:23:9C:34:39:2F:8B:C5:BE:BA:AC:CD:0A:0C:C1:E9:40:54:63:27
X509v3 Authority Key Identifier:
keyid:41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:84:bf:54:03:63:71:d9:f9:26:c0:83:6e:04:31:37:eb:53:
15:7a:65:ea:b3:d5:63:d9:f7:79:62:fc:be:78:65:64:f7:e4:
35:cf:1b:6b:fc:76:1e:50:35:0d:56:ed:c8:74:94:35:07:4f:
e8:c7:de:2c:72:9a:d1:33:7f:c4:5a:74:55:7c:ae:c1:a2:c4:
ac:59:65:c0:25:1e:51:c5:10:d3:cc:c2:f6:da:86:90:ea:0d:
61:dd:c5:21:4a:5a:c2:60:92:e1:2d:5e:bd:bb:3d:c6:e0:68:
4a:9e:9a:e3:3a:ab:ef:2e:e6:a1:09:64:02:3d:56:ed:9a:c7:
66:0c:e0:a2:4a:a0:1a:48:a5:7f:15:bb:82:3c:d3:3e:1f:9b:
ad:35:e9:93:bb:b4:df:d1:dd:b4:e6:1c:39:7c:ee:a4:28:3b:
dc:36:0f:06:b2:3d:0a:7a:c3:19:36:e8:14:3f:35:8a:c4:ea:
0d:80:00:db:19:2d:af:4b:04:57:d4:b6:05:c5:4e:94:f9:ce:
0b:07:4b:9d:53:3e:1a:44:10:c3:5c:d3:22:7d:ea:b7:1a:38:
92:8d:22:8c:b2:90:de:13:4f:94:a8:6d:ac:3e:5d:35:7a:76:
6b:e3:ce:4e:c3:20:38:ed:e2:d6:44:e0:0c:b8:be:c2:46:9a:
03:c1:2e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:06:10 2025 by rpki-client