Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
File: QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft (raw, json)
Hash identifier: PWHYmEscpI7/FENTuAqnR2Pln/lhlcPW81njKMcEvK4=
Subject key identifier: E3:F7:9E:74:B2:47:C0:44:F4:AB:55:31:BA:7C:42:24:44:D5:82:1A
Authority key identifier: 43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
Certificate issuer: /CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Certificate serial: 01976BF4697DC9520D5813495C532967A4DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
Manifest number: 10D2
Signing time: Sat 14 Jun 2025 01:01:09 +0000
Manifest this update: Sat 14 Jun 2025 01:01:09 +0000
Manifest next update: Sun 15 Jun 2025 01:01:09 +0000
Files and hashes: 1: C3yypRlZtvO4qRUDoeqrvhpXXFU.roa (hash: U5x8oZ9ETTHkITHFM+Dz7ZwF5Z54RJdp83tFjx6Le08=)
2: QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl (hash: MO/k85fP0/Z+IVYWMxgeleexDn23/XY04om4XY0fSIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:69:7d:c9:52:0d:58:13:49:5c:53:29:67:a4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Validity
Not Before: Jun 14 01:01:09 2025 GMT
Not After : Jun 15 01:01:09 2025 GMT
Subject: CN=e3f79e74b247c044f4ab5531ba7c422444d5821a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:2f:9d:e7:0a:a6:0e:9e:a1:a1:1a:c6:7b:
1a:94:ae:73:0c:10:be:9e:d3:d3:9f:48:1c:84:dc:
62:ca:75:d4:45:9a:b7:bd:23:1f:93:9b:a6:f2:50:
86:d0:49:fa:6c:2d:f4:40:4c:8a:9d:3a:77:ca:6a:
2d:4a:8e:ce:b9:d4:e3:3d:2a:7d:6a:d9:35:92:71:
5a:5d:2d:41:13:33:81:0e:db:c5:fb:f0:12:a8:c1:
0a:d1:0d:9d:f0:07:cc:b5:5c:9b:5f:6c:8f:d4:b9:
1c:ce:20:be:c6:d9:d7:58:cf:dd:22:92:e2:f0:02:
47:b5:bb:16:00:3f:39:d7:7a:f6:ec:b4:f9:24:0f:
28:a0:dd:ee:39:f7:96:2b:b4:1a:ff:af:dc:91:e0:
bf:c0:af:57:7c:e0:26:d3:bc:67:7d:1d:d3:ef:df:
b8:45:18:a1:eb:aa:bd:84:03:ea:54:3a:fe:5a:08:
5c:c5:68:68:3c:1c:7d:76:38:a3:99:7b:6a:bd:46:
8d:5f:97:e8:0c:49:25:40:fe:ed:3b:a5:26:56:c2:
d8:83:71:83:50:b3:30:72:93:c3:82:d0:ed:f6:fc:
d0:38:23:33:34:97:a7:62:c4:7f:6c:4c:48:77:20:
84:e8:7d:82:fa:76:4e:de:b2:e2:e0:0e:43:73:13:
b9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F7:9E:74:B2:47:C0:44:F4:AB:55:31:BA:7C:42:24:44:D5:82:1A
X509v3 Authority Key Identifier:
keyid:43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5b:30:47:dc:e2:a8:84:2f:b1:ce:4f:f9:31:da:83:3f:dd:
d6:29:a6:5c:3b:ae:d8:65:f6:8d:07:bf:5c:2f:75:bf:e8:7f:
51:be:7a:47:d7:b3:89:f6:bf:d2:9e:e3:f1:a0:4c:28:03:cc:
55:47:90:43:35:52:28:02:3e:cb:05:dd:a6:32:63:a1:e4:4f:
78:ae:1a:a2:92:24:6d:fe:b9:61:cf:18:6c:32:21:35:f5:9e:
8a:d2:b8:50:a0:8e:fe:14:15:b1:c5:ef:61:ca:5e:5c:33:bf:
06:ab:3f:13:00:72:2a:5c:df:4f:5f:0a:12:c2:73:f0:6f:85:
45:b9:0c:7b:81:3f:8b:ff:f1:4f:1c:b3:69:de:e1:1f:d4:fe:
0f:9c:32:91:cb:91:0e:f4:93:d6:36:3b:8c:fa:d9:52:ac:9b:
11:5f:fc:d9:68:ac:3a:d6:bc:b5:77:24:94:75:9a:65:47:01:
ee:e9:30:c7:56:75:25:30:56:bc:b6:5d:e8:c8:6f:34:53:2a:
cf:37:f6:ce:af:e3:79:63:db:4e:0f:a6:56:14:50:8c:1b:41:
65:3e:ed:2d:51:3c:ff:6b:24:25:f9:aa:a2:3f:28:f0:99:12:
ea:a4:da:7b:d1:80:bf:fc:93:5e:cc:74:af:7b:9b:3f:83:19:
90:18:91:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:55:45 2025 by rpki-client