Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
File: QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft (raw, json)
Hash identifier: Igq3oyvK8M5VcpTxDRr6CoQsEkgguj3nT8cjZwJuDYw=
Subject key identifier: 23:0A:61:B8:36:53:97:56:17:2B:E0:05:B7:04:89:B2:11:5B:6A:C7
Authority key identifier: 41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
Certificate issuer: /CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Certificate serial: 01977B6723E1E7E81AABC855CF395EBB9817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
Manifest number: 0C7D
Signing time: Tue 17 Jun 2025 01:00:46 +0000
Manifest this update: Tue 17 Jun 2025 01:00:46 +0000
Manifest next update: Wed 18 Jun 2025 01:00:46 +0000
Files and hashes: 1: 2jf60Yjy6HLBv6d8yR7rie7dcvM.roa (hash: KUJJAA4N19gfVcdXpDwoxv1pVLrdLYxvm5tedzjrpBo=)
2: QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl (hash: u5wzKSwjPvbagnZLQ5WtXU5KKw8RqDOOFb+3toto1HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:67:23:e1:e7:e8:1a:ab:c8:55:cf:39:5e:bb:98:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Validity
Not Before: Jun 17 01:00:46 2025 GMT
Not After : Jun 18 01:00:46 2025 GMT
Subject: CN=230a61b836539756172be005b70489b2115b6ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:30:19:e5:a8:77:24:5f:c9:bd:dd:4e:d5:
23:9b:b1:d7:19:4c:d5:ae:73:20:cb:d5:c5:ea:50:
7c:52:60:ee:10:04:ba:f6:51:57:d5:d4:63:6b:07:
b5:22:0d:e6:ef:49:44:fa:f2:07:97:a2:f3:be:f9:
a2:cb:02:08:e9:72:06:bf:7f:5f:25:5c:fb:13:db:
e5:ad:91:e8:66:d4:dd:96:86:a5:6b:59:85:7e:ba:
08:ae:26:17:d9:ae:53:de:ac:21:18:d8:1a:7d:7b:
e2:81:7b:aa:30:f3:79:f4:1e:00:3c:87:f0:17:37:
38:b1:d4:56:2d:28:5f:e2:bb:15:59:fc:e4:fc:17:
cf:e7:03:c0:d6:27:72:92:cb:78:cd:6d:a5:40:ea:
00:c5:be:e1:87:62:6a:c2:cf:e5:05:27:88:8e:1e:
cd:bb:43:1b:72:0c:db:4c:c5:eb:c1:0b:ab:45:79:
fb:b7:ed:30:07:bf:d1:74:6a:3b:ee:b3:7e:b1:6d:
7d:a7:03:ed:d6:a7:5d:5e:41:24:14:b9:4e:42:40:
18:d7:0e:34:8c:c1:82:33:9b:3c:bc:97:b0:af:8c:
00:47:1e:e2:b9:a1:9e:d8:1d:2a:29:7c:b6:ce:b5:
57:07:aa:48:d0:b0:04:03:f7:7b:ae:09:0b:43:89:
34:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0A:61:B8:36:53:97:56:17:2B:E0:05:B7:04:89:B2:11:5B:6A:C7
X509v3 Authority Key Identifier:
keyid:41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c5:91:77:56:16:5a:0b:db:bf:c3:93:ff:14:3f:b7:e3:4a:
02:34:8b:b4:b1:eb:12:d0:16:ee:f9:ab:f2:bb:a0:ee:b7:01:
7c:3b:c7:89:15:aa:ff:b1:72:8c:91:7e:54:31:18:2c:86:74:
32:ed:a0:74:33:78:c0:43:14:a6:55:ca:dc:fd:25:c9:6d:fa:
52:87:33:9a:89:f8:af:5c:fa:f4:0d:57:7b:d3:2f:df:a5:56:
7f:42:10:54:24:8a:f6:de:06:a2:1a:80:ac:d1:3b:61:9a:ae:
f6:2e:f3:f7:ad:6b:df:fe:a9:2b:9d:42:74:44:1e:98:ce:30:
e4:f2:07:46:20:9b:f9:83:86:18:0e:06:83:c9:76:85:15:3e:
69:16:60:86:87:cd:71:8b:b6:71:3a:84:a4:0f:9f:94:88:d4:
f6:f0:ae:bf:8a:8b:de:dc:9a:5b:cf:93:9f:dc:06:e9:82:e1:
05:46:1c:24:9f:9d:86:04:d3:5c:35:8a:77:7a:c0:4a:d5:7c:
97:08:7c:ad:cd:52:ed:41:f1:82:ff:93:b6:ff:70:b3:da:85:
a3:95:fb:49:56:b9:ff:49:4b:d4:5e:2e:37:70:1f:67:a8:8f:
da:a9:bc:5f:50:01:73:60:c0:3d:97:2e:38:11:b6:b8:ec:fb:
24:54:b8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:01:52 2025 by rpki-client