Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
File: QpXD7wDP_s4vcbYZkcbG09pJwRA.mft (raw, json)
Hash identifier: Z07PIvmdLE237EdUV0bEPa0kTiQOQEzqHGwanu3S390=
Subject key identifier: B2:94:BE:AB:63:C9:91:F5:F4:AF:BB:04:FA:FC:44:E3:F1:85:61:65
Authority key identifier: 42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
Certificate issuer: /CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Certificate serial: 01976C989905AF29D435D26D35C3D47FF247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
Manifest number: 0278
Signing time: Sat 14 Jun 2025 04:00:29 +0000
Manifest this update: Sat 14 Jun 2025 04:00:29 +0000
Manifest next update: Sun 15 Jun 2025 04:00:29 +0000
Files and hashes: 1: QpXD7wDP_s4vcbYZkcbG09pJwRA.crl (hash: cEp2LY+mK/fl6UDnQs8rs3S2y0mxuHdr1nqgX0TSkOk=)
2: SGxwV5wEplv2xVzvW6jMMH0Hi4k.roa (hash: p0OjWToBEfnkzQw/yjz+AdE3+kwiUg0q1pmwBXRywUk=)
3: eC0FosjTUlbZcnWZVWIH359Lcd8.roa (hash: qDWdvtB5VIYnR+iPBmUfW1ayU92Br+j2BjK1vo1fUg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:99:05:af:29:d4:35:d2:6d:35:c3:d4:7f:f2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Validity
Not Before: Jun 14 04:00:29 2025 GMT
Not After : Jun 15 04:00:29 2025 GMT
Subject: CN=b294beab63c991f5f4afbb04fafc44e3f1856165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b0:50:ad:d8:38:38:93:0e:53:ed:fa:d5:6c:
75:fa:54:6a:00:fd:e5:9d:9d:77:a3:22:a6:f2:a5:
04:7e:04:0e:53:60:95:ed:ce:1e:52:2f:47:bf:32:
cd:63:4b:f3:3f:0c:60:bc:b0:36:1e:29:06:4b:73:
fb:35:82:e5:e7:d0:5f:26:e4:02:d3:49:83:fb:4e:
3c:ae:cb:39:99:8e:ed:c0:08:e2:08:39:eb:99:e5:
66:f5:12:df:b7:98:23:46:71:8d:76:3a:61:50:b1:
c4:83:fe:cf:6e:f5:69:f5:f7:41:e6:81:6b:95:28:
2d:8e:36:d2:ec:5e:d9:7f:7d:be:e0:70:91:a7:cd:
d4:92:81:93:8d:52:bc:42:50:81:35:61:00:9e:04:
c5:33:63:26:f4:0b:29:c6:ab:47:ba:61:8f:ab:31:
c0:2f:85:2c:23:53:1e:ef:a0:76:58:0d:eb:74:07:
a3:90:95:c2:f2:ec:12:2e:f5:7b:1a:76:a9:4a:07:
9a:44:43:7d:b2:03:f6:44:a4:bb:ab:84:e4:27:89:
26:35:95:98:36:28:3f:da:de:7c:7d:4f:51:23:6c:
25:97:41:b4:90:46:f3:9a:a0:1a:39:d6:02:00:f9:
35:50:32:cc:53:b5:7a:7d:b0:34:ef:96:59:68:c5:
c4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:94:BE:AB:63:C9:91:F5:F4:AF:BB:04:FA:FC:44:E3:F1:85:61:65
X509v3 Authority Key Identifier:
keyid:42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7e:22:09:9e:fd:03:df:36:71:7a:de:32:d9:32:d1:bf:19:
53:73:68:19:69:17:f2:90:bd:57:a5:a5:ab:5d:b7:b7:84:97:
83:11:51:22:12:8b:bb:8c:39:0a:3e:8d:13:c7:3a:69:c6:ad:
74:73:66:93:aa:32:1e:57:0d:21:eb:78:6e:a4:84:da:25:25:
3d:b7:81:d3:ff:ee:94:c0:5f:d2:12:5f:e2:3e:a3:c9:f9:79:
d8:d6:0f:c3:18:9a:7d:c1:ca:ab:16:f1:36:6a:75:c8:df:fb:
52:9f:c0:2d:83:db:fa:cd:7b:cc:26:79:71:8f:49:de:e4:f6:
75:87:f3:eb:d7:93:42:31:82:fa:20:11:35:c7:de:44:67:65:
c6:65:ef:d8:16:b6:72:f6:bb:d9:af:54:34:59:41:ac:00:99:
4c:6d:eb:6b:de:fc:f3:9e:2e:92:af:6e:76:88:31:c3:20:4a:
08:36:23:a4:87:38:88:fe:2d:c7:f7:d2:8e:bc:7a:bf:41:81:
48:97:e0:59:f9:c9:f9:c0:30:d0:04:43:d7:43:90:5d:9c:25:
64:06:d9:87:78:ae:08:c5:0a:7d:c2:dd:8c:5e:b4:82:1c:63:
4d:09:78:0c:4b:ac:25:dd:42:a6:e8:c1:0b:cc:9b:6b:0e:00:
84:71:f0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:10:05 2025 by rpki-client