Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
File: QsjW8uHBvt_nu4z3nbKMjvP7d28.mft (raw, json)
Hash identifier: OZhWGH7t8XoeV0JUtMekxxawkUT2uY/BxgWi3ajsfe8=
Subject key identifier: CD:4D:ED:26:D3:70:A9:DA:26:0C:35:D1:0F:2D:CF:5F:07:BA:23:7A
Authority key identifier: 42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
Certificate issuer: /CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Certificate serial: 01976F2BD6D762FFA37BE97F652675F30F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 16:00:33 +0000
Manifest this update: Sat 14 Jun 2025 16:00:33 +0000
Manifest next update: Sun 15 Jun 2025 16:00:33 +0000
Files and hashes: 1: QsjW8uHBvt_nu4z3nbKMjvP7d28.crl (hash: yOmTCbW/EJvx6So/DVqsQp+aWJ7MAp8iKeWxlIV2UTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:d6:d7:62:ff:a3:7b:e9:7f:65:26:75:f3:0f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Validity
Not Before: Jun 14 16:00:33 2025 GMT
Not After : Jun 15 16:00:33 2025 GMT
Subject: CN=cd4ded26d370a9da260c35d10f2dcf5f07ba237a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:e3:cd:09:c4:5b:c9:cc:41:ee:9f:e3:c5:
a4:e1:8e:12:0e:a1:90:f0:fc:16:0d:80:20:84:43:
e8:0c:3b:cf:ad:d8:c6:5a:65:90:f8:2e:7e:d5:ed:
ea:c5:20:5b:5d:43:65:38:09:54:d2:18:87:2d:f1:
fc:b9:6f:19:bf:bd:b0:ef:82:b4:48:a7:e3:f3:c3:
c5:db:c9:01:11:aa:4a:7b:a1:7e:ad:c1:de:15:94:
8c:84:f6:41:40:be:9a:fe:65:5b:6c:32:c3:4f:07:
2e:ec:a3:c3:ad:46:2e:aa:29:b6:fe:95:0c:1a:15:
65:b0:5e:32:ce:e1:7b:2e:17:2d:54:7a:b6:8c:35:
4c:67:89:cc:a8:be:ea:09:53:b1:81:bb:63:cb:aa:
73:1e:ba:a6:e9:1b:6e:f1:59:69:09:4b:94:bc:44:
04:08:ca:fb:53:21:93:ca:f2:d8:b4:74:62:09:1f:
46:2b:d6:6f:bb:1b:6a:e2:25:3a:81:cb:6c:4d:f5:
b3:f1:b5:66:dd:31:ae:b6:da:b3:f2:fd:f3:e1:0d:
88:0b:56:57:8e:b4:05:04:f7:08:48:4c:3a:2c:54:
fb:bd:c2:76:b1:c9:93:fa:dd:41:5c:ac:1d:12:66:
e2:a1:9c:be:83:15:b8:c0:ac:6e:c3:f0:b2:f8:1d:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4D:ED:26:D3:70:A9:DA:26:0C:35:D1:0F:2D:CF:5F:07:BA:23:7A
X509v3 Authority Key Identifier:
keyid:42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:dd:56:23:66:b8:9d:69:9c:1f:48:38:77:4a:17:20:77:c8:
0f:9c:d5:0a:26:a9:42:f9:57:c0:58:e0:dc:f2:ca:d7:a3:80:
6b:2f:13:1f:b1:84:0c:03:b9:6c:06:6f:56:63:6a:19:f6:10:
35:bf:77:7e:03:02:f6:f2:6f:c1:39:6c:d8:9e:d2:a4:1c:83:
19:48:e4:30:3b:4b:59:4b:d5:61:b0:5e:cf:98:7d:9a:e4:45:
8a:35:5c:c3:32:00:2b:bd:f4:dd:6f:6b:d9:a8:98:db:07:5a:
c3:5c:6a:52:8b:cb:3f:85:06:6d:8b:53:70:c7:14:38:33:27:
ae:2c:4b:ab:48:ce:d5:d5:1f:0b:cc:0d:d6:c1:6c:e5:2b:52:
64:90:a7:86:4f:9e:e7:a1:5d:7c:18:ac:77:fb:1c:47:fa:aa:
a9:db:95:4c:ad:8d:2c:53:6a:4b:f2:68:14:2d:29:a4:30:d8:
f5:c5:5e:69:66:3c:db:90:1f:14:3c:d6:79:26:d8:67:2a:21:
c7:70:60:da:e3:74:21:55:cc:db:d2:59:77:b6:6d:df:a8:6f:
fa:86:82:d5:87:61:fa:51:b5:b1:f5:82:c7:a2:08:25:99:51:
5c:25:3f:30:fe:8a:f6:8f:00:01:c0:3b:6d:f0:6f:17:9d:da:
13:86:d7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:35:28 2025 by rpki-client