Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: HanugnFOtDFYcRQc25Z0Xpy4lavswZ3N31lMQojY8nA=
Subject key identifier: 39:D9:4D:CF:D0:E6:E0:54:74:EF:E1:94:D0:92:82:EE:AB:95:DC:F6
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 01987CE5CA4F24B87C67730BF02ECAC624FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 01:01:30 +0000
Manifest this update: Wed 06 Aug 2025 01:01:30 +0000
Manifest next update: Thu 07 Aug 2025 01:01:30 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: pq+Qguo8nUuvwyFlYuIc9TmOKAtpCkrkVeCvMIDDA0M=)
2: aIPJ4lm4ZyremkDprutiWRNEZ90.roa (hash: Kp0nR22T2kDefAUNT5QJL0kBQwplOU/6USLq0OiGG/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:ca:4f:24:b8:7c:67:73:0b:f0:2e:ca:c6:24:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Aug 6 01:01:30 2025 GMT
Not After : Aug 7 01:01:30 2025 GMT
Subject: CN=39d94dcfd0e6e05474efe194d09282eeab95dcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:56:75:29:ca:73:6f:6b:37:56:56:fe:50:
5c:82:16:68:2b:aa:74:d5:66:2b:7f:b4:48:6f:f1:
63:8a:5d:96:dd:79:31:4b:5d:60:33:cf:a2:dc:63:
04:d5:1a:4c:3f:c2:e8:15:c8:2a:66:e4:3a:e2:03:
f3:cd:5f:0d:05:e6:da:ac:ba:3f:1a:22:31:54:21:
b0:b6:63:d5:25:f4:db:e4:b3:02:da:29:2e:41:1b:
9e:39:71:0d:6b:3d:8f:9d:11:7a:a3:53:2c:fa:0e:
a0:e1:d6:be:04:b0:8c:ea:19:7b:4d:b6:94:7e:b9:
da:32:97:ea:ad:6d:b0:fe:da:89:13:50:d6:c6:88:
08:32:ba:a9:70:df:92:4c:8f:72:c2:3b:49:a6:86:
e3:5c:bc:1a:94:df:a1:b9:fe:84:bc:ab:d5:41:f8:
96:08:13:4e:b8:c2:6b:d6:ac:9a:13:a2:45:22:52:
30:cb:51:1f:9b:4a:31:32:49:61:fe:4c:37:52:31:
b6:37:c4:90:ba:70:79:23:c5:c7:14:40:67:a5:57:
40:ac:32:cb:70:24:22:b0:8f:93:07:a9:67:36:d5:
52:68:f2:f3:66:dd:1d:fc:dd:47:f1:d2:64:69:c0:
cc:99:3f:f0:8a:2d:f2:1f:a7:24:82:17:6b:f9:e4:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D9:4D:CF:D0:E6:E0:54:74:EF:E1:94:D0:92:82:EE:AB:95:DC:F6
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:24:ea:9a:38:b9:8d:fd:57:ab:c4:3a:68:64:f4:c3:0b:5e:
c1:90:29:fb:b0:d0:2f:38:73:eb:0e:52:48:29:e7:2e:ca:23:
b8:ce:cd:85:70:73:ee:c9:27:ec:91:4f:ed:f6:9a:aa:65:c5:
09:1c:31:3d:fb:70:7b:24:de:1d:e2:c0:4c:d6:8d:17:0b:6d:
e7:ac:39:7a:e1:9a:5d:90:3f:8e:95:cd:51:b7:a0:a3:b8:0f:
cf:5a:c5:21:3f:d6:e7:42:3a:68:51:47:cc:b7:5f:93:bf:e1:
32:cf:48:51:40:93:2e:4d:aa:e1:30:f8:04:06:3a:db:42:8e:
8f:31:e4:82:98:80:ea:4e:a5:78:6a:21:fb:fb:e7:fc:1a:82:
91:27:33:ac:00:8e:a3:29:fd:69:32:16:e1:64:f6:5f:86:45:
b7:6d:db:c8:36:a5:12:2c:e4:81:56:95:ef:96:e1:bb:d1:38:
0b:ca:b3:b7:9d:a4:7c:e1:a6:68:e5:b5:76:ea:60:f7:80:63:
11:53:9b:88:2f:1c:51:79:06:62:39:64:f7:49:2c:1c:b2:c5:
f7:73:84:f0:ae:aa:df:a8:13:6b:5c:28:60:96:ce:50:ec:e0:
52:2d:51:22:6e:d8:af:b5:21:77:0e:27:0b:f4:8c:8d:93:ea:
a2:cf:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:28:52 2025 by rpki-client