Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
File: qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft (raw, json)
Hash identifier: 2uA192ZOVu+UYbdWwxvQYTwPSzUhlSUondznsed4KVs=
Subject key identifier: 40:B1:C4:E3:4E:9D:1A:B6:49:6F:97:4D:AB:37:97:51:E6:86:9A:C8
Authority key identifier: AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4
Certificate issuer: /CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
Certificate serial: 01976BBD1052C2D9E8A0136B53B5C96747DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
Manifest number: 0E10
Signing time: Sat 14 Jun 2025 00:00:41 +0000
Manifest this update: Sat 14 Jun 2025 00:00:41 +0000
Manifest next update: Sun 15 Jun 2025 00:00:41 +0000
Files and hashes: 1: qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl (hash: GXNHO9Vej+7/yG2JlHH5u9z46vj9FPQgP7wcXphzMzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:10:52:c2:d9:e8:a0:13:6b:53:b5:c9:67:47:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
Validity
Not Before: Jun 14 00:00:41 2025 GMT
Not After : Jun 15 00:00:41 2025 GMT
Subject: CN=40b1c4e34e9d1ab6496f974dab379751e6869ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c2:db:86:53:e9:21:08:cb:e6:c7:00:c6:28:
1b:e4:1d:63:c6:e3:01:30:b3:7e:bb:07:18:a6:71:
ac:0f:fc:f0:9b:58:70:b8:be:cb:da:28:3c:aa:d6:
76:26:b6:d8:2f:08:51:b8:38:99:4d:79:58:1e:e7:
c1:d0:1b:02:00:bf:ea:0c:70:c8:aa:5e:93:1d:b1:
c6:54:e9:44:79:cf:a6:15:d5:1c:e2:3c:8d:ac:3a:
36:eb:5c:8c:09:1f:f6:c0:87:d7:e7:34:e4:e3:33:
64:67:27:c7:7d:6a:b0:d2:46:b6:37:0b:37:dd:a1:
4e:24:32:de:2a:73:b6:23:10:22:7e:cc:bf:1d:85:
81:43:44:0f:28:d7:16:f4:e4:d3:b8:7e:e3:0f:c4:
4c:ec:8b:80:b0:80:39:fc:e3:4d:9c:24:76:c9:71:
55:23:fb:79:3e:77:e6:ff:ef:35:5f:91:a2:db:90:
31:27:74:f0:65:f3:e3:eb:54:74:2c:4a:78:ec:01:
67:14:71:22:27:2a:fd:26:bf:f1:d4:ca:eb:b8:03:
9b:c3:78:ce:9f:4b:53:21:c6:9b:94:1f:fb:4d:29:
57:1c:fa:fc:79:0f:2f:da:e9:db:18:ff:3b:f9:aa:
2d:c4:80:73:ff:1f:c8:f6:2a:da:12:d7:fa:f7:1d:
57:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B1:C4:E3:4E:9D:1A:B6:49:6F:97:4D:AB:37:97:51:E6:86:9A:C8
X509v3 Authority Key Identifier:
keyid:AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c0:1c:ef:3b:a6:07:d9:d7:c9:a6:61:9e:e2:c9:e3:be:8f:
7e:df:89:b8:49:72:48:11:92:ab:31:af:bc:eb:d5:97:3d:b6:
03:77:0e:fb:8c:5d:ae:25:71:39:58:5a:f1:2d:9b:d9:34:05:
d7:38:b2:c8:a8:72:f8:72:d2:08:82:08:4e:9b:a2:e8:b2:63:
cf:21:bc:e4:2c:35:62:c9:f7:a8:e8:d4:3c:61:5a:9a:14:5f:
bf:c9:a6:0c:89:21:7e:d5:fa:c0:0a:aa:a3:67:d3:01:9a:63:
3a:70:2a:e8:7f:4e:f9:6c:b9:65:5b:6e:ac:ec:44:60:3f:ba:
b5:23:8c:64:85:0d:7b:73:7c:d3:83:ae:e9:9e:41:bf:e4:d2:
18:05:f0:d4:fa:4d:f7:20:52:05:e3:4b:80:9b:4b:34:d7:91:
42:d1:2c:64:68:22:67:2a:c4:a2:92:44:a7:58:f3:18:17:6c:
4f:e5:ed:b7:cb:aa:71:96:70:46:56:f2:82:88:f1:d4:7b:b8:
93:f3:19:8b:bc:61:3a:0d:8c:ac:22:11:bb:25:24:13:f7:7c:
71:c4:09:a0:8c:89:43:0c:f1:7f:48:fe:9f:e2:5d:be:ca:e8:
f5:db:e7:44:92:02:b6:8f:a9:fc:2d:0d:83:2a:90:db:21:3c:
2c:df:0f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:47:04 2025 by rpki-client