Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
File: QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json)
Hash identifier: kbK156Jk3jsAjYSUjuCai6obZNv2DC0jemD9peNpm/U=
Subject key identifier: 11:91:68:C7:65:2A:CE:4A:84:B6:66:8E:BE:2D:73:38:E5:B3:A7:AE
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial: 019770ACA0D3DEF7C9734E4F74B12BB69C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
Manifest number: 01EC
Signing time: Sat 14 Jun 2025 23:00:50 +0000
Manifest this update: Sat 14 Jun 2025 23:00:50 +0000
Manifest next update: Sun 15 Jun 2025 23:00:50 +0000
Files and hashes: 1: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: D626wD89qmj6Vq+K65dvYnK7CCUkb+GyeDB+8x5D5AI=)
2: WCgPWBd35wh97MLu1FH7BL7RkHc.roa (hash: 4LSeeV2arU0BH2mW0bKarXB0zBUuhKYPFKDtO5BDvYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:a0:d3:de:f7:c9:73:4e:4f:74:b1:2b:b6:9c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Validity
Not Before: Jun 14 23:00:50 2025 GMT
Not After : Jun 15 23:00:50 2025 GMT
Subject: CN=119168c7652ace4a84b6668ebe2d7338e5b3a7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3d:0b:cc:92:e1:3a:ab:50:ee:42:20:76:a6:
19:54:c9:cb:3a:9b:97:d2:e4:8d:fc:37:09:61:5c:
3a:c0:4c:cc:c3:04:26:57:24:a2:17:51:a4:e5:c5:
c1:3b:8c:95:3e:bc:12:7f:44:d3:3d:be:9f:5a:32:
49:d4:2a:ed:32:80:8a:a8:af:63:b5:57:7d:2e:0b:
e1:1b:c7:37:49:52:aa:a2:83:aa:12:07:df:d8:51:
84:ca:8f:9f:1e:d7:e7:98:0b:b8:28:8c:d8:c7:b1:
85:1b:4b:cf:11:b6:d1:10:2d:01:b8:ff:33:79:da:
10:ba:dc:36:e8:48:44:ea:d3:43:55:d4:fc:31:0a:
8d:e1:79:54:b6:28:07:95:9a:f0:f0:11:0c:27:8e:
d1:ae:5d:bb:9b:79:e4:ab:1d:d5:18:66:6d:54:fa:
bc:d9:7a:53:2c:46:d0:c1:13:07:97:28:41:c8:a4:
97:20:ba:47:c0:f9:3e:e2:65:99:b7:84:73:07:ee:
e4:14:89:e4:e8:58:89:d5:70:4a:52:da:05:32:8a:
cd:76:a7:bf:2d:6f:5c:93:a7:dd:bd:d8:70:c5:fc:
6b:69:f1:a1:79:7a:94:d7:1f:08:6d:8e:77:cb:02:
d1:bd:a6:f2:26:8e:e1:95:55:4c:ec:de:76:78:34:
8b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:91:68:C7:65:2A:CE:4A:84:B6:66:8E:BE:2D:73:38:E5:B3:A7:AE
X509v3 Authority Key Identifier:
keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:23:f2:a6:d6:bf:3d:30:eb:a9:91:48:49:a8:9c:04:6e:87:
8d:77:b5:75:4a:f6:2f:32:08:a2:1a:0a:ef:74:26:6c:99:6e:
e6:80:b4:43:be:28:82:86:4f:75:a2:44:2c:5b:42:39:7d:dd:
ae:7e:24:53:72:e2:ca:99:79:da:4a:00:79:57:7e:c5:a1:11:
18:80:91:40:75:b3:a7:ca:5d:28:b2:9c:3f:f1:34:1f:10:8f:
c5:9b:db:77:12:52:01:20:de:76:14:69:4a:3f:ef:b1:5d:8f:
27:6d:5e:24:8d:16:74:22:b7:69:cb:e4:96:0c:82:26:f3:f1:
8d:67:0b:5f:34:91:f5:95:cc:ec:81:57:bb:1c:60:1f:e5:be:
cc:37:89:93:c4:2a:19:b2:54:dc:17:16:f1:b1:70:1f:54:11:
85:46:a6:d6:99:c7:58:c0:39:0c:4e:0f:fc:e7:1d:a2:ed:0f:
f5:e9:94:27:74:cf:01:51:fe:75:1f:1c:2a:e2:23:1d:3b:bc:
99:aa:47:90:29:8f:da:d2:c1:76:1e:41:00:88:5b:44:af:23:
6e:69:26:b2:bf:8e:88:b2:c9:9c:f0:c9:5f:67:33:19:09:b0:
bf:27:2a:fb:67:0e:62:04:3f:14:ce:b1:2c:0c:88:a7:08:61:
af:7f:2d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:13:02 2025 by rpki-client