Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
File: qZPrBqu5jUolXPsrMjpl88T3G60.mft (raw, json)
Hash identifier: B8lMUC+GgKZkETa5269E/rPQBKQQ9vqn5lMjfzgm/5g=
Subject key identifier: F1:F8:78:42:84:F7:23:2B:C8:DF:A6:19:FE:6D:78:94:FE:37:C8:12
Authority key identifier: A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
Certificate issuer: /CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Certificate serial: 01977C0BD0C98984A411C25E6258894D6344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
Manifest number: 0873
Signing time: Tue 17 Jun 2025 04:00:38 +0000
Manifest this update: Tue 17 Jun 2025 04:00:38 +0000
Manifest next update: Wed 18 Jun 2025 04:00:38 +0000
Files and hashes: 1: qZPrBqu5jUolXPsrMjpl88T3G60.crl (hash: kPLarZMgwO5hvunk6mZnCUd3mDDKmJ/PBWdGDvvNrN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:0b:d0:c9:89:84:a4:11:c2:5e:62:58:89:4d:63:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Validity
Not Before: Jun 17 04:00:38 2025 GMT
Not After : Jun 18 04:00:38 2025 GMT
Subject: CN=f1f8784284f7232bc8dfa619fe6d7894fe37c812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:c3:fe:59:64:e2:f5:27:89:68:83:e2:d9:
1f:3b:1a:29:31:57:54:64:53:80:55:fa:51:a7:23:
38:1f:fc:b4:59:e4:85:bf:d7:43:ad:69:d7:99:9f:
01:ed:15:95:73:0f:8a:d9:a1:6d:a3:e7:7d:73:fb:
ba:a0:6a:d5:f1:a5:e6:2e:a3:cd:1e:7e:41:59:39:
c1:fe:b5:e0:55:3b:4e:54:cb:5d:80:6d:66:ec:d1:
dc:a9:3e:3d:5b:ad:82:06:b5:00:ed:ec:29:48:de:
48:a6:c7:33:04:99:2a:45:82:d5:c7:53:87:97:77:
f7:67:0d:35:2c:0e:cc:a5:f0:91:02:82:c0:77:60:
39:d3:50:41:29:d8:ea:db:8b:64:70:61:cf:40:eb:
d1:f0:11:dd:a2:73:38:f9:5e:9b:af:83:ab:71:9c:
32:72:e4:fb:c5:3d:e9:c8:e3:20:18:f0:76:f4:09:
92:a7:3e:fa:ef:f8:65:95:6f:91:f3:c5:1f:d5:56:
99:48:84:f6:5e:d5:a2:91:85:e5:77:5f:b4:f0:0b:
3d:d5:9a:9f:8c:40:77:ee:df:6a:ca:6d:0f:af:0b:
ec:74:48:fa:30:ac:96:19:b9:50:b0:56:34:a4:e6:
e3:52:bb:84:da:a3:9a:03:f5:4a:5b:24:09:4b:2a:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F8:78:42:84:F7:23:2B:C8:DF:A6:19:FE:6D:78:94:FE:37:C8:12
X509v3 Authority Key Identifier:
keyid:A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6f:61:bb:50:b7:08:ca:7f:2f:2d:3a:8f:3a:61:51:53:b8:
b2:2d:70:1f:e2:77:a8:9a:1f:61:5f:fb:7f:4e:0b:73:05:e0:
25:0d:0d:c8:d5:e4:b8:be:97:8b:17:0d:fd:07:d6:f9:5a:66:
a0:22:f1:83:f8:5f:28:5a:2d:81:1f:c7:04:97:5c:17:d0:d6:
31:cd:71:d5:ce:4c:fd:b4:fe:b9:bc:f5:10:17:b7:d2:cf:00:
6b:85:b6:e3:c0:9c:eb:3f:3d:a6:1c:ae:88:84:c5:df:c3:73:
86:c4:37:f0:9c:ce:93:1a:16:f4:c3:87:2f:c3:f2:74:bc:62:
00:92:b8:ce:82:5d:f2:50:1d:ff:35:06:c1:c1:3b:62:0f:91:
56:29:7c:a9:90:88:00:5f:aa:f4:fa:0c:b0:52:49:47:d9:fd:
a1:c1:05:22:0b:2e:db:6f:a9:ca:1a:c8:d6:17:98:83:e4:5a:
80:78:74:a6:d0:f4:07:0d:56:4b:24:68:d2:49:47:bd:da:e4:
69:0d:c7:72:da:d1:d2:88:64:8d:64:ee:43:2d:b7:47:80:0a:
ee:61:9d:8b:b3:b0:44:38:d0:a7:82:a7:52:e0:50:e7:a0:68:
29:e9:1b:b3:a3:27:7a:a8:c9:45:ca:a2:7a:b4:3e:6e:de:ab:
b5:8b:e3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:32:40 2025 by rpki-client