Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
File: QGHbehW9JPvKFGzRLMcNQTnIW58.mft (raw, json)
Hash identifier: KbWajfnq+Us9yD59T+YBbxgmQ5coG6OglHFe1evKSds=
Subject key identifier: 47:41:61:45:61:BA:88:C1:F5:C5:2F:6D:2D:8B:74:1A:B0:9C:6C:DD
Authority key identifier: 40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F
Certificate issuer: /CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
Certificate serial: 01976C98F6550B10885B7A228B6FAF31206B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
Manifest number: 155B
Signing time: Sat 14 Jun 2025 04:00:53 +0000
Manifest this update: Sat 14 Jun 2025 04:00:53 +0000
Manifest next update: Sun 15 Jun 2025 04:00:53 +0000
Files and hashes: 1: QGHbehW9JPvKFGzRLMcNQTnIW58.crl (hash: 7G5AQk9XVQ1l63t9dK3SI1/JbvKl9ontJj/ND7zGuHI=)
2: o-ZlaW1WgunU3TjJVwdOR6husz0.roa (hash: 4yZiG/NqXqcKJ1Bdf8yQPmHJloI/I/ZH5JktUOUh3mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:f6:55:0b:10:88:5b:7a:22:8b:6f:af:31:20:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
Validity
Not Before: Jun 14 04:00:53 2025 GMT
Not After : Jun 15 04:00:53 2025 GMT
Subject: CN=4741614561ba88c1f5c52f6d2d8b741ab09c6cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:45:01:f3:10:83:91:70:f0:d2:06:de:ff:1e:
0f:6a:55:61:cb:1e:49:5e:0f:6c:b6:2c:51:e7:b2:
54:cc:fd:67:ec:ec:8d:39:2e:8d:eb:84:ab:ad:f9:
bd:c3:f4:bf:13:a4:03:6e:a5:3d:a6:2a:1a:b5:a8:
e8:bc:30:a8:1c:08:a1:87:da:73:23:a2:eb:d3:5e:
1d:00:f5:7d:a4:2d:fd:d1:2c:b3:bf:43:8b:f6:4a:
aa:a6:8a:fa:7b:93:a4:4f:19:57:e3:62:5d:f8:ba:
84:cf:e0:bc:02:be:cb:fd:92:8c:73:89:a5:d3:50:
08:f0:79:cd:b7:33:d9:8d:2c:43:b7:aa:f7:f8:4d:
31:2a:3f:75:e8:75:9c:9c:20:39:9e:01:45:83:d1:
20:6b:2c:c4:7d:8e:e6:41:57:63:b3:f5:39:bb:85:
88:71:e4:d5:ff:60:e7:fb:a2:8e:83:27:2a:91:06:
95:5f:60:00:22:79:dd:03:02:85:37:84:2f:af:7a:
f3:96:a8:56:6c:b9:1a:35:71:17:4a:48:d4:ef:58:
fa:5f:61:e3:de:ce:d6:8d:9e:ee:ed:e0:91:b8:82:
ab:a8:da:2a:6d:e8:ee:54:e4:06:59:b7:aa:36:12:
f9:41:18:c2:40:31:fe:29:5f:09:b9:e1:21:49:4c:
b1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:41:61:45:61:BA:88:C1:F5:C5:2F:6D:2D:8B:74:1A:B0:9C:6C:DD
X509v3 Authority Key Identifier:
keyid:40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:02:00:41:b4:18:fc:5c:ac:6d:bb:4b:f7:a0:3f:e6:06:b7:
51:56:fc:a5:0c:cb:34:aa:01:4f:31:b8:ec:38:bc:2a:1d:97:
3e:ea:9e:a3:f6:ed:d3:0b:03:ae:e8:a5:3e:0b:56:d5:d1:38:
ef:5a:c2:46:77:68:63:4e:97:47:92:45:56:d8:aa:35:8d:95:
d3:98:7d:3d:59:72:12:16:58:a6:fb:b9:85:aa:64:ed:3f:97:
ee:d4:2d:6e:46:4d:73:e4:94:fe:57:3e:ab:62:72:8c:0e:52:
c7:a2:a1:ca:45:14:7f:0a:72:4e:29:2f:a0:d0:2d:d5:21:79:
3b:0e:e1:e7:3e:b6:7a:a6:a9:24:53:37:e7:df:1d:dc:b0:45:
51:31:f8:c5:ab:9b:99:bf:d7:43:48:94:4c:21:fd:f1:b3:08:
5a:76:80:6f:38:8a:11:2c:20:e3:43:2f:d1:63:46:3d:2c:d2:
93:52:7c:c7:0e:2a:a2:8f:94:11:20:5c:ed:e4:86:94:bd:c1:
39:7c:80:32:7d:b9:ab:8c:30:37:51:1c:ca:b1:f8:e9:c0:7c:
be:11:76:d4:96:b3:34:e9:8d:0b:86:ce:e8:d6:b4:c0:40:10:
72:ca:57:87:50:96:24:07:fc:9f:47:72:3b:11:46:7c:97:82:
75:e1:94:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:17:28 2025 by rpki-client