Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File: QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier: PzEkkNmEqMJKVQvCshvIG/NLXjKSC+qH8Uduz6urgdE=
Subject key identifier: A1:CC:F4:16:E4:AF:C8:84:D5:93:9D:FF:01:96:73:BF:C8:55:D7:41
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer: /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial: 0197827BF727A6EFAF5C9DA8FEABF49EFABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number: 09A7
Signing time: Wed 18 Jun 2025 10:00:51 +0000
Manifest this update: Wed 18 Jun 2025 10:00:51 +0000
Manifest next update: Thu 19 Jun 2025 10:00:51 +0000
Files and hashes: 1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: Dn01SzjjyerUkBOellpHniK8TLq9SNHK3iU6t5/eFZ0=)
2: e4JEVh_6cDhCUoHK96y7TvtTEf0.roa (hash: xuBEIWySS4QJ6iOhH7VSUCCJB986bi0LqcmYz8ug3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:7b:f7:27:a6:ef:af:5c:9d:a8:fe:ab:f4:9e:fa:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Validity
Not Before: Jun 18 10:00:51 2025 GMT
Not After : Jun 19 10:00:51 2025 GMT
Subject: CN=a1ccf416e4afc884d5939dff019673bfc855d741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:a5:5e:d1:a7:39:3f:ee:4a:3f:70:77:a8:
ab:f8:10:ab:44:6a:b2:80:2d:b6:f9:d9:b3:89:e7:
1d:5d:cd:f9:ef:d7:20:b6:9a:5e:33:5f:6b:d4:42:
26:09:c0:0b:26:2c:09:e3:d1:95:98:16:91:d8:9f:
7b:bf:1d:5c:7b:68:d3:4b:c6:d8:17:8e:6b:05:70:
45:99:63:73:d3:4d:78:89:ce:d5:e9:20:c0:6d:00:
51:b6:60:7b:59:24:61:af:a7:29:ea:16:87:58:2c:
0f:0a:9b:f4:96:a2:cb:4a:f1:e9:59:f0:ac:97:db:
4e:d3:2b:09:fd:cf:3d:8a:2d:f0:e7:81:b1:05:5f:
d7:78:03:54:e0:6a:70:fc:aa:57:b1:0f:b5:4d:8b:
34:64:3d:9e:d0:9c:7a:3e:bd:2c:3d:41:eb:7d:93:
8c:61:07:73:41:fe:59:dc:ac:71:54:ee:57:00:90:
d2:05:00:0d:3f:d8:37:5f:21:68:74:2a:ff:ed:c3:
9a:ef:bb:91:ad:0e:dc:1a:cc:89:fd:a4:91:a0:96:
27:4b:6f:c3:bb:70:c7:a6:ef:6d:1d:06:a9:cd:02:
32:1f:f2:b6:69:af:ce:74:b5:55:44:6c:49:c6:5d:
9e:73:a3:2f:2f:26:6b:de:6a:34:21:64:2f:9d:bf:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CC:F4:16:E4:AF:C8:84:D5:93:9D:FF:01:96:73:BF:C8:55:D7:41
X509v3 Authority Key Identifier:
keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:31:4e:4a:64:82:94:4a:5a:2f:01:4d:99:ab:2a:96:79:b1:
56:fc:12:28:05:20:52:52:f7:01:af:d4:8f:32:46:1c:a5:cc:
79:16:55:e0:cb:a0:b9:58:90:aa:ba:da:0b:cf:88:72:23:97:
fd:61:cf:c1:27:55:25:e0:7a:a9:34:5d:31:7d:5f:05:d7:1d:
11:13:5a:69:25:99:66:52:1f:a8:22:45:b3:cb:2d:d1:84:64:
5e:4b:67:a6:d0:ca:d9:16:fd:f3:48:6f:af:04:56:76:b7:99:
35:f7:d8:96:6c:09:44:61:1e:8f:15:42:34:e3:8f:36:77:61:
ca:4a:06:38:a6:f3:53:ce:d4:03:93:37:8e:ab:c0:d8:85:1e:
48:c9:56:33:a5:18:93:a4:d6:0b:7c:93:5c:5f:60:31:61:58:
ac:22:7f:59:76:30:2a:ef:75:4f:70:1b:60:ce:49:7b:44:8a:
32:87:1d:ee:b2:c9:fa:12:ce:b0:d8:61:cf:c1:6a:15:ad:49:
e5:9b:6a:8c:dc:14:01:e7:54:97:70:43:49:59:69:f1:da:3c:
47:98:7b:e4:b0:64:ae:51:9e:c6:f5:6f:45:ce:2d:0e:a9:56:
98:2d:ac:c5:84:c9:3a:33:48:d4:f6:86:c1:73:fb:ae:a5:cc:
84:61:b7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:54:19 2025 by rpki-client