Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
File: qKI6ziwGf44hL_NZ2pbCBYtks-o.mft (raw, json)
Hash identifier: S1ASYMfz93OT5Qu70/6miTohcJKPobEedDC++ty2o4g=
Subject key identifier: 97:11:34:DE:D6:62:B7:FD:EF:89:74:EB:B4:17:44:05:86:16:EA:24
Authority key identifier: A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
Certificate issuer: /CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Certificate serial: 01976BF3F228B6E295168165558EFC17D8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
Manifest number: 05C1
Signing time: Sat 14 Jun 2025 01:00:38 +0000
Manifest this update: Sat 14 Jun 2025 01:00:38 +0000
Manifest next update: Sun 15 Jun 2025 01:00:38 +0000
Files and hashes: 1: qKI6ziwGf44hL_NZ2pbCBYtks-o.crl (hash: eWT3AI/mYs/WmwA7vBJK1qTeWhHXGaVMZk7BHsvk22Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:f2:28:b6:e2:95:16:81:65:55:8e:fc:17:d8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Validity
Not Before: Jun 14 01:00:38 2025 GMT
Not After : Jun 15 01:00:38 2025 GMT
Subject: CN=971134ded662b7fdef8974ebb41744058616ea24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:8d:7c:be:a7:3b:8a:04:18:ca:cc:20:ca:
c1:0e:b4:74:77:da:b8:fd:a5:2f:e0:5b:37:a8:d9:
e3:19:73:ba:32:8d:c0:04:7d:3f:2d:54:e9:b9:05:
47:7d:4b:29:c0:0a:e7:2d:c1:8c:ad:ab:2d:c9:16:
34:38:18:7b:9f:cf:0b:cf:a8:60:b1:61:78:ac:e5:
64:0d:41:7a:61:c1:33:e7:b2:6f:d6:ff:b0:c4:cf:
f1:92:5c:89:2c:c4:a0:e5:40:57:00:cb:c1:17:83:
af:b7:ad:d6:1b:d8:02:ba:e0:3d:ed:07:40:64:cd:
90:f3:65:f2:4d:a5:b2:b5:cd:29:8f:e5:59:aa:22:
e9:2a:3b:3c:43:27:8f:18:24:cd:e7:d9:38:51:2f:
60:32:bb:2b:dc:a1:9b:ee:66:97:6d:9d:2d:db:19:
d4:d2:5b:c6:8a:bb:14:12:7a:a0:84:66:c7:6f:ee:
a5:d4:bb:48:d3:c5:3d:b7:f5:81:9e:cb:e4:e6:54:
68:f1:03:00:f5:06:f6:69:14:b6:63:6b:3d:8d:28:
7e:ba:ab:e3:ba:72:15:2c:89:c4:0a:61:78:d7:45:
97:22:31:c6:49:20:ea:91:e8:8f:24:4c:e0:08:85:
96:b2:bb:69:34:9a:78:58:3a:5e:68:a5:5b:cb:b1:
db:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:11:34:DE:D6:62:B7:FD:EF:89:74:EB:B4:17:44:05:86:16:EA:24
X509v3 Authority Key Identifier:
keyid:A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1f:cf:7c:7a:d7:dc:a5:10:25:18:a7:92:dc:93:83:03:af:
0d:5d:e2:4c:cc:14:14:e1:58:73:bc:89:57:f6:1f:38:ba:77:
19:73:90:b8:1e:38:e2:86:81:c4:3f:95:26:4c:22:c8:1f:fc:
d9:4a:49:68:b3:3f:d3:91:74:6b:d6:6e:fc:31:36:10:96:1c:
c6:14:90:4a:e6:bc:ff:ff:80:fe:e1:25:58:cf:27:ab:ba:f0:
93:9d:a7:58:e1:df:a7:a6:e9:64:f4:30:ab:e3:f5:00:4b:3e:
d0:35:ef:cc:0a:74:a4:61:ff:c2:af:62:0f:f7:d8:d1:39:3e:
ad:4b:13:a3:bb:5e:a0:33:00:98:7d:67:fb:5b:f4:de:12:19:
29:7a:94:ad:dc:b1:e9:e9:83:ae:d1:41:bf:ba:4b:e3:e5:1a:
db:63:a5:13:fa:27:a2:9a:9c:bc:31:90:9e:d3:9a:ff:a9:76:
de:93:22:4b:98:9e:ec:e3:42:5a:5c:2a:0e:c0:10:08:5a:6e:
40:10:9f:26:19:80:39:fa:5d:75:26:77:09:a7:8b:6b:13:d6:
9e:23:ce:8a:02:e6:15:67:75:76:d5:61:82:f4:60:2d:56:e9:
3b:0e:11:e5:62:f5:44:d5:ab:67:45:f2:01:1e:4f:8d:5a:f8:
c6:e6:be:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:46 2025 by rpki-client