Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
File: Qb-tl6WMtQy_yE7IZa89ccixha8.mft (raw, json)
Hash identifier: ybIjXAqzbWV73qZ0SQ7Vl2Fm3iO2rv+d71b3M23Sl1w=
Subject key identifier: C2:32:69:38:D5:65:43:BB:14:BE:56:79:83:81:24:2A:86:40:F1:2E
Authority key identifier: 41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
Certificate issuer: /CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Certificate serial: 01976CCFB145345B8E8D94DB486770E73D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
Manifest number: 1091
Signing time: Sat 14 Jun 2025 05:00:40 +0000
Manifest this update: Sat 14 Jun 2025 05:00:40 +0000
Manifest next update: Sun 15 Jun 2025 05:00:40 +0000
Files and hashes: 1: Qb-tl6WMtQy_yE7IZa89ccixha8.crl (hash: NUI0qzMqR7X5ZduE8oyZr/y+lLXFTPkIfbLiqbgusMk=)
2: TAMhyO_TxaxCZl8ndF5QQYJ7fSc.roa (hash: fwo98qFwUrEP75fKt0AHaKO4fww5cOw9kGra/QKoqNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:b1:45:34:5b:8e:8d:94:db:48:67:70:e7:3d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Validity
Not Before: Jun 14 05:00:40 2025 GMT
Not After : Jun 15 05:00:40 2025 GMT
Subject: CN=c2326938d56543bb14be56798381242a8640f12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:24:d0:f8:f7:2c:b5:ec:ab:73:3e:fe:81:
c5:a3:e4:b8:3a:8e:18:26:d6:b7:eb:b4:d0:b1:77:
d3:b0:4b:46:fb:96:a6:7c:35:e4:83:86:56:23:ba:
58:df:14:45:7a:c7:66:94:37:7d:9f:c3:05:cc:28:
07:5a:9c:eb:80:a0:4d:3a:ba:57:88:00:a2:5b:b1:
1a:75:7d:93:78:ac:5a:c8:59:71:67:89:62:e4:37:
49:48:96:08:1f:fc:c0:17:24:31:40:e6:0f:6e:e5:
91:3f:c2:9b:40:02:7e:ca:b2:e1:12:b5:64:f7:f9:
4d:5a:f6:87:bb:c5:99:57:28:d8:a6:fb:80:d2:33:
b8:cf:aa:3f:70:c6:b6:fb:c8:01:13:c1:5a:e7:ea:
67:81:34:5f:3b:aa:65:f4:1f:1b:f6:e2:99:e3:40:
27:5c:56:fe:78:c2:66:25:4b:de:0c:86:12:52:e8:
b4:7d:14:6b:e9:27:21:96:8d:6c:16:55:7a:fa:40:
1c:82:f5:ac:1d:80:c2:2a:45:79:9a:3c:74:29:ce:
ce:48:22:88:0a:fc:38:bd:8e:71:44:c8:8a:cc:fe:
17:b5:73:cc:7f:c0:58:38:0e:89:8d:9a:68:a6:27:
2a:98:55:b3:05:ef:49:b6:96:89:54:47:42:3d:2b:
b4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:32:69:38:D5:65:43:BB:14:BE:56:79:83:81:24:2A:86:40:F1:2E
X509v3 Authority Key Identifier:
keyid:41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f0:dc:bb:40:9c:b3:9f:f7:6f:ab:a4:d6:e1:c5:96:27:28:
27:f2:03:3b:84:8d:d3:ad:9f:c8:1d:d0:6b:48:1b:3a:7c:91:
a5:c6:e4:b2:28:17:ea:16:28:ea:cc:bd:da:9c:3b:8a:d1:72:
ca:71:f3:73:d8:58:17:59:7d:bc:43:de:55:43:1b:e1:f2:7d:
c2:32:78:97:e8:db:8d:72:55:0c:bc:a1:e9:15:71:15:d1:23:
23:8e:5d:c9:53:b5:0a:e0:e5:33:6e:7c:49:06:6a:52:84:25:
22:02:45:15:f6:9f:e6:dd:db:d2:12:c3:5d:ec:6b:11:98:0b:
f6:58:f2:19:72:7d:74:7a:62:19:f4:e6:3e:2e:7e:5c:e5:59:
6f:35:59:f1:23:8a:48:46:71:5a:00:60:be:28:e5:87:31:85:
d7:95:3a:6d:d7:e9:75:3b:b6:c2:36:20:70:d8:73:54:d5:4f:
25:8f:9f:e7:02:4e:79:6f:d9:9b:6a:ed:89:62:e4:49:1d:b5:
5a:84:f6:04:34:e9:2a:80:76:e7:4f:25:55:46:28:8c:8a:07:
6a:31:c1:f6:35:8a:03:50:6c:3a:1b:ba:a7:b2:b7:f0:15:41:
20:50:19:a7:16:18:82:57:8c:db:5a:22:34:3a:61:65:01:24:
37:69:14:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:15:32 2025 by rpki-client