Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.mft
File: QA-ULrBzNco-f70Y8GwVjbN8_Us.mft (raw, json)
Hash identifier: w5o4TsPTjVzkLaPRisB7/R4/fR0JW+35sUtbklkwh1s=
Subject key identifier: 7D:3A:80:29:29:1B:51:FC:FD:8C:DF:50:5F:47:89:5A:88:71:64:36
Authority key identifier: 40:0F:94:2E:B0:73:35:CA:3E:7F:BD:18:F0:6C:15:8D:B3:7C:FD:4B
Certificate issuer: /CN=400f942eb07335ca3e7fbd18f06c158db37cfd4b
Certificate serial: 01976929BAF579C6945580737E4010FD092C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA-ULrBzNco-f70Y8GwVjbN8_Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.mft
Manifest number: 11F1
Signing time: Fri 13 Jun 2025 12:00:31 +0000
Manifest this update: Fri 13 Jun 2025 12:00:31 +0000
Manifest next update: Sat 14 Jun 2025 12:00:31 +0000
Files and hashes: 1: CRyZWe4rqJ2qdiNWuAP-OJQeZow.roa (hash: g+uZ3IirtTKelPa51RylP3yoQBkp1cF9hHY0LUNHp8g=)
2: QA-ULrBzNco-f70Y8GwVjbN8_Us.crl (hash: Go1mAS7/R+NQP4C2YlAnd7F4eFNghmUFgp0O80+Vtgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA-ULrBzNco-f70Y8GwVjbN8_Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:ba:f5:79:c6:94:55:80:73:7e:40:10:fd:09:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400f942eb07335ca3e7fbd18f06c158db37cfd4b
Validity
Not Before: Jun 13 12:00:31 2025 GMT
Not After : Jun 14 12:00:31 2025 GMT
Subject: CN=7d3a8029291b51fcfd8cdf505f47895a88716436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:e8:df:e7:7e:b9:ac:88:51:79:b7:fa:09:
38:b5:00:2e:ed:7f:66:18:65:68:c0:a7:19:b9:e0:
51:7a:b2:b5:67:bf:09:a7:d9:13:5f:95:34:ad:5c:
3f:a3:fb:23:87:e6:ad:bb:0f:c5:8e:e3:23:63:2d:
cb:ca:c1:21:c2:60:09:a3:47:67:14:3b:cd:88:60:
13:47:8c:1e:f7:69:71:ab:b5:c3:7e:a8:74:54:c3:
b8:4f:a2:9d:2b:e4:75:0b:bf:99:a1:a6:6e:ed:71:
8f:36:53:cb:5f:e9:81:26:e6:43:de:e3:3f:99:1f:
7f:99:50:99:ba:a9:39:0c:50:8d:85:61:9a:e0:f0:
a0:a5:af:51:44:3b:2d:cf:e9:64:03:1c:97:bd:76:
f4:52:f4:5d:a0:cf:29:2b:e5:73:fd:e2:8e:c8:cd:
79:29:2e:e0:ef:b6:d8:f5:ca:fa:61:b4:6c:70:f6:
18:6b:b6:4e:9f:bc:e8:3d:b9:fb:b4:19:81:d5:8f:
f2:57:d4:96:97:88:2a:1d:66:f1:a2:0a:92:81:22:
62:33:da:79:84:47:57:80:8e:56:b3:d2:93:04:a1:
ec:00:f3:29:47:ca:d2:f3:04:ae:b1:89:72:98:88:
ba:99:17:fa:4d:20:da:56:55:1d:59:8c:b7:eb:2a:
bd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3A:80:29:29:1B:51:FC:FD:8C:DF:50:5F:47:89:5A:88:71:64:36
X509v3 Authority Key Identifier:
keyid:40:0F:94:2E:B0:73:35:CA:3E:7F:BD:18:F0:6C:15:8D:B3:7C:FD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA-ULrBzNco-f70Y8GwVjbN8_Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ab:2c:52:8c:ad:8f:67:1f:dc:f1:0d:22:5f:ad:9b:24:7c:
4e:b7:8b:ec:5d:7a:eb:66:00:35:b9:5f:3c:25:24:ca:78:6a:
25:9a:b4:dc:51:8f:5c:df:0b:b3:e5:5f:7b:0e:d2:39:ea:83:
58:0f:9a:66:01:ad:ea:fb:f4:5a:71:3e:6b:d8:c3:86:73:7a:
b0:b0:a1:78:80:dc:24:ae:5c:13:9d:e6:4d:22:bc:2b:da:cc:
ed:b6:84:5b:88:5e:87:8a:07:11:95:5d:a0:9d:92:ef:77:69:
0c:39:f6:cc:4b:5f:d9:74:71:70:92:a9:60:54:5b:f4:f1:f2:
97:e3:65:98:a6:45:35:20:b2:3a:2e:54:f2:79:7e:ce:0b:a6:
c9:85:3b:ef:f4:24:c4:ee:3c:e6:bc:8c:3d:a9:9f:7f:6c:e1:
5f:b2:74:c5:3a:a8:39:3a:80:2f:e0:50:6c:15:cf:4b:f6:57:
3f:b3:47:38:b0:b8:3c:4b:9c:ac:98:ab:2c:65:d5:25:60:e8:
c1:3e:47:7c:16:17:e8:c8:83:95:6c:6f:3d:41:f9:57:2e:11:
a9:dd:82:0a:64:a3:6f:d3:9c:3c:85:49:6c:49:7c:da:9e:cd:
28:2d:dc:a9:4c:d8:a1:db:2b:eb:6e:b8:17:ba:9f:98:03:07:
bd:d3:e0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:17 2025 by rpki-client