Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.mft
File: QH75-Xcjo9WiGTasNNMZl_JWHrk.mft (raw, json)
Hash identifier: L/aQV/D0vJ2nb74s6sXOBaPk/KUdHZKqKS+DAwZOp2U=
Subject key identifier: 5E:A0:C7:25:1F:8B:40:A9:10:35:FB:8A:1D:40:19:BC:B2:80:BD:26
Authority key identifier: 40:7E:F9:F9:77:23:A3:D5:A2:19:36:AC:34:D3:19:97:F2:56:1E:B9
Certificate issuer: /CN=407ef9f97723a3d5a21936ac34d31997f2561eb9
Certificate serial: 01976C98EC1B1257FF9DB6B96A78ADC4314F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QH75-Xcjo9WiGTasNNMZl_JWHrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.mft
Manifest number: 0C6E
Signing time: Sat 14 Jun 2025 04:00:50 +0000
Manifest this update: Sat 14 Jun 2025 04:00:50 +0000
Manifest next update: Sun 15 Jun 2025 04:00:50 +0000
Files and hashes: 1: QH75-Xcjo9WiGTasNNMZl_JWHrk.crl (hash: vBcQh3xlJdBk57U99RQILQBURZ82ipBZEz5ef0+bMOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QH75-Xcjo9WiGTasNNMZl_JWHrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:ec:1b:12:57:ff:9d:b6:b9:6a:78:ad:c4:31:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ef9f97723a3d5a21936ac34d31997f2561eb9
Validity
Not Before: Jun 14 04:00:50 2025 GMT
Not After : Jun 15 04:00:50 2025 GMT
Subject: CN=5ea0c7251f8b40a91035fb8a1d4019bcb280bd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:39:30:54:5c:25:aa:45:66:27:08:b7:03:3b:
93:d4:91:e4:d3:dd:be:fe:6d:75:84:9b:38:ab:8a:
d3:f0:b6:aa:fe:41:18:80:8d:c1:91:11:97:32:f1:
29:8a:fd:62:ee:e2:9b:19:2f:a3:90:c8:b7:ee:c4:
fa:46:bd:f3:45:05:a3:12:d0:e0:96:8b:64:1b:02:
4c:5e:94:72:41:68:78:89:46:b4:9d:d3:d0:76:02:
08:f6:78:fa:e6:43:93:44:11:e5:04:0f:5f:f6:ac:
67:1c:21:bc:70:98:17:6b:f9:a1:64:0f:6d:57:67:
5f:1a:2f:9b:f4:19:19:05:66:3a:1b:8b:e8:86:c7:
c9:d8:ba:19:72:86:f2:9c:54:cb:00:f8:3d:f9:0a:
72:74:56:ad:2a:76:8a:87:53:b0:cf:87:49:ca:13:
13:a7:67:97:32:50:75:db:b9:a6:40:0c:8d:b6:2b:
5a:c3:eb:bb:c5:e4:fc:a7:2c:0f:02:32:44:6b:ac:
d1:96:15:1b:21:79:f2:9b:5e:37:30:85:61:49:ce:
2b:7d:8b:85:7d:4a:7a:c6:2a:5f:82:be:62:ad:83:
95:ad:f4:5f:78:04:52:1b:80:aa:b2:87:af:c1:d1:
06:04:44:c5:8b:a7:ac:a1:30:e0:d8:53:99:23:a9:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A0:C7:25:1F:8B:40:A9:10:35:FB:8A:1D:40:19:BC:B2:80:BD:26
X509v3 Authority Key Identifier:
keyid:40:7E:F9:F9:77:23:A3:D5:A2:19:36:AC:34:D3:19:97:F2:56:1E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH75-Xcjo9WiGTasNNMZl_JWHrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:84:1c:83:70:13:76:fa:96:d0:ef:6c:41:65:01:6d:a2:a4:
ec:09:d2:b7:87:cb:84:8d:84:c0:64:94:53:8a:54:8f:1f:b2:
7a:92:ba:7d:0f:ad:5d:b2:0f:b3:b8:c5:ee:13:b7:09:69:ac:
79:fb:ce:8c:33:1f:4c:17:b7:aa:aa:e0:5c:7f:fc:9c:61:88:
2b:f5:ad:95:02:90:d0:f5:cd:8f:da:35:64:8e:c6:08:f6:71:
36:a9:f9:30:4d:dc:fc:d5:4c:d5:b5:3e:3c:df:70:db:e4:de:
2c:86:6a:4a:ae:0a:3b:b2:0c:18:cb:a8:e4:00:a4:c3:5c:17:
38:bf:dc:75:49:87:b6:13:07:a1:bc:70:98:55:4b:f2:90:89:
77:4b:0b:cb:b2:ef:2f:d2:64:79:54:59:4a:c5:e9:1e:d7:b1:
c4:d5:e4:d7:8a:c5:9c:e2:0d:cc:70:ff:e0:64:99:ac:24:25:
a5:07:ee:bd:5f:32:4e:86:48:eb:4a:19:e1:1f:ab:7f:d3:e4:
6d:65:3c:60:45:8b:06:dc:89:4e:e5:70:40:50:80:49:73:5c:
17:4a:9e:89:95:3c:23:35:d4:29:42:89:37:67:fe:8c:f6:7b:
64:6a:07:7d:8e:34:f0:4f:43:7b:cd:9e:14:98:62:b6:e4:98:
97:b3:9a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:27:41 2025 by rpki-client