Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
File: QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft (raw, json)
Hash identifier: 9D5sjixumSl2uzUHyzo5keqaCogHNv607Tsxu3R8Las=
Subject key identifier: 10:A9:28:EB:B5:FB:81:43:DE:FA:86:87:4A:A0:04:01:78:CF:D8:9B
Authority key identifier: 41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
Certificate issuer: /CN=419a82be1e16422f9a88549af6d542481d691ac9
Certificate serial: 01976EF4E776161B9B37DE75A336D814233F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
Manifest number: 0484
Signing time: Sat 14 Jun 2025 15:00:33 +0000
Manifest this update: Sat 14 Jun 2025 15:00:33 +0000
Manifest next update: Sun 15 Jun 2025 15:00:33 +0000
Files and hashes: 1: QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl (hash: JSsD3UuB0/bfubeCPVHPqAkvdRvfVbsI/zH9ePb1ZM8=)
2: ixxoDXsLiKFHG8cJ3pni9CuIWeY.roa (hash: e7F9bx5lz4I+jxRKeA3TL2cV3HxTGyF8ndmJymIUkLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:e7:76:16:1b:9b:37:de:75:a3:36:d8:14:23:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419a82be1e16422f9a88549af6d542481d691ac9
Validity
Not Before: Jun 14 15:00:33 2025 GMT
Not After : Jun 15 15:00:33 2025 GMT
Subject: CN=10a928ebb5fb8143defa86874aa0040178cfd89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:fc:a0:88:fc:5f:ba:57:ef:81:7c:bf:f9:
4c:de:2a:3d:7a:10:99:e3:a9:ed:be:e6:92:f6:de:
5c:cc:09:ea:2b:f5:43:4d:93:ca:b3:46:c4:62:d6:
38:e1:78:d9:f3:9a:cd:68:24:2a:cb:7b:02:ff:b8:
59:22:39:c8:99:71:5c:68:02:4a:29:06:c7:ba:8f:
97:55:f2:81:ed:f3:2e:63:65:12:fb:b3:66:98:8c:
cb:45:b8:01:8c:21:6f:2f:ac:54:b0:b6:19:24:b4:
2e:f2:25:b0:f9:a5:ba:a8:0d:2e:73:fd:ff:9d:42:
61:d5:47:36:16:73:e9:8c:af:7a:5e:d9:d5:a2:d9:
3e:10:40:6d:72:4a:f7:df:3b:81:4a:6d:3f:35:25:
cc:de:5b:40:28:a4:6d:f6:bc:cf:74:6f:9d:92:32:
da:99:53:f8:43:34:78:ed:a2:b9:7d:67:a0:de:86:
6f:31:eb:42:35:bd:ae:75:e3:40:88:77:d9:f6:87:
f9:43:8f:81:2a:53:61:e0:f1:0d:83:7b:80:36:bb:
1d:95:27:92:25:bd:0a:99:f1:50:cc:94:a8:71:b9:
22:c1:58:cf:5a:2f:6a:91:82:04:6f:be:99:c8:17:
98:a9:7f:c9:ee:f1:43:58:02:39:b7:d8:13:22:83:
43:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A9:28:EB:B5:FB:81:43:DE:FA:86:87:4A:A0:04:01:78:CF:D8:9B
X509v3 Authority Key Identifier:
keyid:41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ce:1f:0c:00:69:de:75:08:60:9e:5c:2c:b1:97:43:1b:04:
8b:da:40:27:da:72:a6:e4:b3:79:f2:12:ec:77:f2:d3:ae:12:
64:43:f1:2b:b7:93:9a:c7:7b:38:c1:68:10:dc:ae:b2:47:8a:
4a:cb:62:ee:1e:9c:a3:69:70:e7:ea:53:f9:05:89:58:43:01:
7a:6f:9a:cd:40:e8:33:47:d2:8d:5b:42:3f:53:ba:8b:fa:21:
41:a8:42:0c:15:62:c5:5b:6c:56:da:40:d5:97:93:d6:67:fc:
61:d4:3b:59:1f:67:2e:64:9f:fc:3b:91:0e:99:a4:66:72:01:
88:77:a2:bf:25:bc:5f:ef:00:93:92:8a:be:54:27:c2:f7:43:
f0:1f:90:84:cc:ca:84:2a:10:fa:c5:29:37:6f:4c:e0:18:1b:
c6:13:3c:96:74:f7:b2:a9:73:29:25:5c:4b:35:a9:6d:f2:9a:
02:c1:e7:b4:55:72:41:da:4b:f1:8d:6b:7d:da:6d:0b:f0:78:
7b:23:9c:6d:8f:0d:0f:a9:f6:c4:05:91:e9:32:f7:a7:98:07:
8d:f8:9f:fc:64:cd:cd:07:56:ea:8e:7c:60:26:a1:af:58:4e:
2a:10:0d:11:23:a1:60:fa:ac:11:81:a8:ee:58:8e:ea:38:eb:
88:01:fd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:08:19 2025 by rpki-client