Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
File: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft (raw, json)
Hash identifier: Hhii7ycJOheXzL3YK/R1qso5nTvXXLVNP0CnlWZzVuo=
Subject key identifier: F6:B9:E0:52:27:F4:71:47:24:63:94:A3:27:95:6D:E1:14:D8:3B:C2
Authority key identifier: 43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
Certificate issuer: /CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Certificate serial: 01976C2B0BDD141A19EE7ED8F925810ABAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
Manifest number: 0F0A
Signing time: Sat 14 Jun 2025 02:00:49 +0000
Manifest this update: Sat 14 Jun 2025 02:00:49 +0000
Manifest next update: Sun 15 Jun 2025 02:00:49 +0000
Files and hashes: 1: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl (hash: 2W8s8Q80iPxN00pLvfDz6GLlDElBdc282IpsV+pLM1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:0b:dd:14:1a:19:ee:7e:d8:f9:25:81:0a:ba:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Validity
Not Before: Jun 14 02:00:49 2025 GMT
Not After : Jun 15 02:00:49 2025 GMT
Subject: CN=f6b9e05227f47147246394a327956de114d83bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:0c:be:45:3a:60:d7:77:2e:c7:ca:f0:29:
08:4c:54:34:c8:fc:3c:8e:7c:4f:06:0f:71:7b:20:
ca:92:69:75:d5:c8:ae:ba:8a:5d:9d:3f:bb:04:1c:
d5:ae:45:95:54:fb:10:73:27:ae:bb:08:15:fd:d0:
10:26:e7:12:0a:88:f8:26:3c:43:ce:94:5b:e7:6c:
06:f9:a2:74:8c:d9:05:91:65:e7:d6:65:3a:97:71:
b1:fd:37:50:a0:7b:21:d2:6e:bc:6e:02:d6:f6:4d:
78:13:f5:f4:62:68:02:c9:6f:14:78:24:db:fd:4c:
42:dc:08:b0:fd:46:62:f1:5f:80:f1:ee:fc:38:96:
a6:51:92:1c:f4:0d:6b:31:72:c2:59:97:97:0b:13:
7a:0f:40:d3:1d:48:2d:81:dd:fc:75:08:f7:60:11:
7b:ae:51:e3:90:ad:24:b0:a4:49:a8:35:77:21:dd:
cb:95:ab:8b:80:71:4d:9f:bc:84:bc:be:bf:e0:f6:
f2:b9:ff:1e:4e:60:a2:bb:e7:80:36:b4:b4:00:26:
f2:fd:fe:1d:21:1d:3d:8f:65:3e:cf:d2:ce:11:d7:
36:92:69:99:24:6e:2a:2f:a2:69:36:15:1c:a7:29:
38:a3:4f:4c:a4:0e:ac:0c:c0:fd:61:60:27:b1:68:
fb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B9:E0:52:27:F4:71:47:24:63:94:A3:27:95:6D:E1:14:D8:3B:C2
X509v3 Authority Key Identifier:
keyid:43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:71:30:43:e7:06:0b:a3:90:a9:a4:94:a6:8e:9c:d4:be:03:
40:cb:26:b7:33:ca:d3:ae:de:63:79:27:21:a1:06:25:63:24:
e0:73:94:7b:36:41:a9:1c:a7:71:01:79:72:cf:c0:a6:d7:b5:
c5:bb:63:12:0d:7b:6b:09:f6:0c:45:78:31:c4:61:c5:74:6a:
c2:f6:69:bf:fb:de:a1:2b:ca:bf:08:a2:b4:25:03:a8:41:72:
58:e8:65:42:22:09:03:74:31:f1:8f:e2:d9:5e:13:7c:a0:5d:
58:51:c5:f4:bb:6c:39:9d:1e:94:e4:14:7b:26:d3:72:27:aa:
29:e9:4e:05:ac:0a:a3:0a:ee:fa:7f:3a:ed:89:c8:b6:c0:f2:
a2:dc:47:36:3c:4a:b8:7f:b2:03:ab:30:62:fc:91:72:e9:38:
91:0e:d6:7d:a4:6f:f3:0a:8d:6d:1f:c8:f7:ae:0b:84:ad:84:
ce:1d:f0:e7:79:4c:88:44:b4:43:ef:43:1a:cf:cc:c8:77:95:
82:de:f0:87:19:86:ab:82:b2:b1:f7:55:b7:d3:51:4b:bc:dd:
a2:b6:3d:e8:0e:be:71:cb:cd:da:c4:7f:a1:8f:69:2e:05:90:
e9:40:cf:20:12:81:99:3d:f6:e7:65:a8:6d:ac:13:6e:69:a5:
52:76:09:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:42 2025 by rpki-client