Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
File: qI1YyAfJSdssH18nPx78TfGlxVM.mft (raw, json)
Hash identifier: Msm+m2amwDDdwNnE7aQUx/WuTiJx7o/XpHiAsqusSFs=
Subject key identifier: 8E:93:E8:E9:8E:D2:55:13:C6:DC:E7:BA:C3:4E:0F:F9:CA:67:6F:3D
Authority key identifier: A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53
Certificate issuer: /CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553
Certificate serial: 019768BBC7E34C5A50286EF2E818E37A5216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
Manifest number: 06F1
Signing time: Fri 13 Jun 2025 10:00:26 +0000
Manifest this update: Fri 13 Jun 2025 10:00:26 +0000
Manifest next update: Sat 14 Jun 2025 10:00:26 +0000
Files and hashes: 1: qI1YyAfJSdssH18nPx78TfGlxVM.crl (hash: HH1hiYF421/NeUi5gZ1v4wXNRsV+El5KuLYWHiNQ680=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:c7:e3:4c:5a:50:28:6e:f2:e8:18:e3:7a:52:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553
Validity
Not Before: Jun 13 10:00:26 2025 GMT
Not After : Jun 14 10:00:26 2025 GMT
Subject: CN=8e93e8e98ed25513c6dce7bac34e0ff9ca676f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:1b:e8:7b:70:2f:09:ef:e7:55:62:16:32:
71:22:86:94:3d:dd:4c:ab:74:42:af:67:0b:31:70:
b3:65:02:d3:4f:a1:83:f7:cd:28:22:a5:e1:68:d6:
59:a3:fc:25:e9:e6:03:56:fa:a3:79:52:f2:ca:5b:
07:0b:cd:e2:78:c6:d0:22:65:59:2b:0f:53:ce:3a:
e5:ad:fe:e1:30:12:2e:4e:bb:c0:23:1d:cf:da:67:
e5:5c:82:87:e9:07:08:03:73:bd:11:4e:66:6e:b0:
c6:f0:e0:72:22:d9:1a:6e:d7:84:b9:2f:fc:11:c6:
5d:89:a2:7c:dd:2b:c3:43:cc:8e:b5:56:ac:50:0c:
06:c9:8e:c9:ae:67:fa:9b:55:2a:1c:c3:8d:7f:9d:
72:4d:e5:65:19:d1:3f:e1:1e:34:a8:6d:54:76:53:
73:45:26:34:ef:d5:97:e4:3d:e3:e1:c4:6b:a1:63:
7f:26:2b:cd:c0:4f:8d:91:3d:bb:e4:24:33:be:23:
27:05:b1:ac:bd:53:94:65:df:d5:04:fe:f5:6e:7e:
fe:e4:7e:f7:a8:68:1d:2f:ec:82:c7:a4:29:95:b4:
c4:43:28:31:d1:56:10:99:37:b7:2b:e5:e0:eb:d0:
7e:c6:25:0d:9c:4d:80:33:47:2a:3b:91:16:2e:14:
3a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:93:E8:E9:8E:D2:55:13:C6:DC:E7:BA:C3:4E:0F:F9:CA:67:6F:3D
X509v3 Authority Key Identifier:
keyid:A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:be:13:58:46:b7:6a:f2:11:49:68:92:3c:13:3d:aa:14:a8:
a5:5a:e3:62:8e:35:ec:a6:25:29:d8:cf:51:4a:a5:f8:ee:6d:
e9:a9:5a:b4:7f:3a:bb:e2:3b:53:da:d5:ed:c7:8c:90:28:0c:
60:b7:e4:b6:47:e2:33:6c:3a:a8:56:5a:8f:0a:70:31:d4:5c:
20:df:a8:f4:3a:27:31:13:e9:1d:c3:b4:97:42:b0:c2:bb:8e:
30:ca:d7:1c:9c:31:49:c7:f4:58:35:33:85:24:22:36:62:5d:
e1:06:c8:f7:e7:46:6b:d1:dd:0e:f4:a5:76:ac:dc:f4:26:fc:
4e:bb:a0:e3:75:15:57:af:3a:4e:43:cd:46:12:49:53:af:2b:
f4:a8:f2:69:d7:c8:88:6f:0d:68:64:67:1c:4d:a1:2f:a1:5d:
e3:ed:a4:b2:e9:cb:e5:91:ae:e6:ed:90:30:b8:7b:ae:59:c4:
52:0c:c0:f6:33:29:f1:c9:a1:f7:02:b9:b7:9e:35:4f:4f:d9:
f8:ae:6e:97:00:0d:47:6d:ce:02:54:3c:20:c1:bf:ae:01:0d:
2d:19:5c:0c:18:60:81:5a:d8:29:9e:20:d9:d8:d3:b7:ae:59:
d4:ba:69:97:83:05:31:6f:38:97:fe:87:a6:cf:f0:cf:b3:28:
3f:81:f9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:25 2025 by rpki-client