Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
File: QlbgyzjNYSXO4U5Jcii4SQodQOk.mft (raw, json)
Hash identifier: CbqROjJmzy/Cm1BVZbV22ubMsuRWfxJynxoZ77H4pPw=
Subject key identifier: 59:1E:A0:62:FC:E3:9D:4E:0C:3E:9C:47:CE:A5:44:09:72:F5:29:0B
Authority key identifier: 42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9
Certificate issuer: /CN=4256e0cb38cd6125cee14e497228b8490a1d40e9
Certificate serial: 01978168F2F3ED55B06DC5826AA3517D6A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
Manifest number: 04F5
Signing time: Wed 18 Jun 2025 05:00:27 +0000
Manifest this update: Wed 18 Jun 2025 05:00:27 +0000
Manifest next update: Thu 19 Jun 2025 05:00:27 +0000
Files and hashes: 1: QlbgyzjNYSXO4U5Jcii4SQodQOk.crl (hash: Jt3ENOtITY38AWEsJDyZv3wWrHOO30fmw6h7LeTlIaU=)
2: ekPIeumjzc0aQ-0qnlrmTiVhDJI.roa (hash: MI/BYhVlkTAuExjmOk0h+DG2/B/CqzwrvfdzA0OS10s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:68:f2:f3:ed:55:b0:6d:c5:82:6a:a3:51:7d:6a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4256e0cb38cd6125cee14e497228b8490a1d40e9
Validity
Not Before: Jun 18 05:00:27 2025 GMT
Not After : Jun 19 05:00:27 2025 GMT
Subject: CN=591ea062fce39d4e0c3e9c47cea5440972f5290b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6e:3c:c2:4b:33:10:36:34:a2:a1:fb:d3:d4:
c8:7a:de:4b:cf:0a:1a:a1:6d:1c:49:d3:6a:bf:8e:
f3:d0:ae:e7:e3:60:e6:4f:79:64:3b:ea:3a:12:39:
f4:1f:66:a8:3f:7c:93:63:7a:ac:a8:e5:4e:31:3c:
ad:32:a1:ec:fa:3d:dd:7a:e9:d3:d9:d3:e4:d8:f5:
b6:9c:83:1b:4d:8a:ac:45:a2:e8:b8:bd:53:72:bf:
c2:34:19:cf:7a:8d:f4:41:d9:26:93:be:33:cc:4e:
1a:45:57:79:e5:f9:6d:b0:63:c6:bc:ed:ac:69:1a:
20:40:5c:3c:84:aa:3d:37:ce:95:4a:8c:d8:c5:5f:
7d:a8:0b:8a:fe:30:ac:f1:64:6e:10:e8:1c:94:1a:
bd:2c:16:04:be:e9:09:9f:40:0e:20:65:7a:f8:4d:
40:2d:14:1a:bb:cf:5d:9b:60:b1:99:05:c1:03:d5:
43:dc:fb:ee:f3:58:20:ff:9d:14:c5:c6:23:84:6a:
48:25:3d:6b:b5:e3:a5:52:2a:2b:3f:78:49:1c:39:
7c:71:d7:d1:d8:5c:7c:ca:cd:48:85:89:0d:df:08:
81:5a:bb:69:45:06:28:87:58:cf:a1:66:ed:bd:a3:
97:28:5e:c2:07:db:7b:22:c4:1f:8e:47:65:68:87:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1E:A0:62:FC:E3:9D:4E:0C:3E:9C:47:CE:A5:44:09:72:F5:29:0B
X509v3 Authority Key Identifier:
keyid:42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:32:c4:8d:a1:77:29:bc:70:98:0e:5d:bb:0e:4a:dd:06:c2:
a9:f9:30:ff:5c:29:11:12:45:ed:72:d7:8d:0b:65:f1:58:1d:
2d:e8:4e:71:60:4e:21:fc:02:84:c0:1b:36:7d:69:d0:39:b2:
09:a7:63:2c:32:5d:34:2a:fd:6a:99:4c:3b:87:27:ef:6a:61:
b7:b7:e4:b5:69:24:04:36:fd:b9:02:08:a7:47:56:e8:e8:85:
62:1b:7c:8c:a4:7a:82:ac:95:95:f1:32:09:08:ef:03:f9:28:
01:52:19:6b:43:a1:52:3b:44:a5:a2:e0:45:54:ee:5d:18:7d:
29:a6:94:1f:67:98:0f:b5:8f:31:cd:36:89:12:1f:63:09:2f:
33:79:65:96:ec:8e:78:39:3c:e6:f5:68:7f:e3:3d:29:c7:5f:
ad:b4:0d:d1:b8:88:3b:db:99:e6:19:3e:18:8a:cf:84:a4:6f:
e6:3f:14:58:6d:c6:bd:3a:0e:9a:6f:f6:a2:88:11:94:1f:af:
3d:09:1d:88:f9:ed:90:cc:6e:31:74:c8:ce:08:a5:6d:a7:bd:
9c:65:7b:77:b5:d2:bd:cd:0e:49:1f:a5:07:82:9a:51:0e:5c:
80:af:a4:62:7d:20:e8:7f:49:ca:cb:bd:1e:6b:34:70:b4:a7:
cd:74:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:11:10 2025 by rpki-client