Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
File: QpoEfERhf8-ynNVy962HR9C5Mms.mft (raw, json)
Hash identifier: 8H9P7eNRDpsr5YmMAsjU0TSR/cIKwHg4+Jj6/r7O55A=
Subject key identifier: 80:D5:C8:F9:6A:17:15:43:71:55:10:0D:BC:D4:F7:67:19:57:85:43
Authority key identifier: 42:9A:04:7C:44:61:7F:CF:B2:9C:D5:72:F7:AD:87:47:D0:B9:32:6B
Certificate issuer: /CN=429a047c44617fcfb29cd572f7ad8747d0b9326b
Certificate serial: 01976D3E5D9AE6A6D57A98DD496722C1B9FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
Manifest number: 0A04
Signing time: Sat 14 Jun 2025 07:01:33 +0000
Manifest this update: Sat 14 Jun 2025 07:01:33 +0000
Manifest next update: Sun 15 Jun 2025 07:01:33 +0000
Files and hashes: 1: QpoEfERhf8-ynNVy962HR9C5Mms.crl (hash: IKZTTT/8PH5v+7gwd5mW3svDnhAh0RmOrT6d/OBhuqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:5d:9a:e6:a6:d5:7a:98:dd:49:67:22:c1:b9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429a047c44617fcfb29cd572f7ad8747d0b9326b
Validity
Not Before: Jun 14 07:01:33 2025 GMT
Not After : Jun 15 07:01:33 2025 GMT
Subject: CN=80d5c8f96a1715437155100dbcd4f76719578543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ee:2c:5f:bb:34:86:b4:7c:dc:99:df:93:59:
57:8a:1c:b1:e0:a0:08:4a:64:0d:2c:bb:6f:14:3b:
67:e4:6f:d5:35:4d:1e:26:cb:34:11:a3:d8:66:d2:
45:42:a6:15:8d:f4:06:38:eb:a1:82:21:ac:3e:72:
8d:b4:79:e3:23:6c:da:65:9e:31:7b:43:a4:75:09:
13:b6:49:8f:07:bd:31:b2:1e:1b:8b:8e:98:db:4a:
34:f9:ce:e2:4c:85:3c:5d:bd:a1:c5:80:09:ce:fa:
c7:46:d1:ae:cc:a3:d1:2b:ca:f6:53:22:1e:5a:ea:
14:c7:b0:d8:a7:6e:d7:7e:ad:3a:a8:2a:89:d1:95:
62:5c:b0:59:8e:35:44:ef:f1:bd:1b:c2:e3:78:14:
83:4a:2c:64:de:ef:b8:94:51:98:81:74:44:9b:e1:
f0:48:a8:df:92:1e:aa:d3:36:31:bd:fc:7a:b4:1f:
e6:da:37:de:8d:f5:28:cf:8c:60:7f:68:08:e3:0e:
90:38:a8:67:64:a6:bf:ec:b8:ca:f6:ce:21:e1:76:
ff:fa:e4:34:87:25:1d:05:f5:71:11:45:fa:6e:c6:
65:05:d6:5d:18:76:e6:86:93:3c:32:77:0c:4f:c8:
2f:dd:84:cd:f9:bb:77:8d:26:04:67:66:6b:ac:f3:
ae:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D5:C8:F9:6A:17:15:43:71:55:10:0D:BC:D4:F7:67:19:57:85:43
X509v3 Authority Key Identifier:
keyid:42:9A:04:7C:44:61:7F:CF:B2:9C:D5:72:F7:AD:87:47:D0:B9:32:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:be:20:e4:77:d5:5f:de:c5:87:ad:54:52:52:4e:3b:5f:0d:
4b:b2:8a:5a:f1:d3:dd:9b:60:63:14:b4:39:14:d9:1f:b7:a9:
58:20:54:0d:5c:6a:e5:00:3d:c5:f3:3c:85:30:61:02:a0:5f:
2e:fd:d1:c6:74:87:8f:99:07:30:05:72:65:18:ff:38:f5:cd:
8c:a5:ba:6f:7e:29:d9:cb:51:8b:4f:a2:62:74:39:44:4d:49:
de:6a:db:c5:ba:11:fd:82:b5:96:c9:d2:cc:c5:f1:75:76:32:
8e:b4:5f:01:45:ae:ed:e0:c5:a7:3d:a1:a9:dd:26:ac:6e:db:
3c:49:d6:ef:4c:fc:1a:35:06:38:cb:3d:d6:fd:c7:d4:43:f9:
40:88:da:ce:b0:a9:1c:c1:10:5f:6e:ff:02:61:a1:da:8b:22:
8a:07:fe:b6:e0:15:7d:34:b8:63:5f:fd:fc:32:ea:d8:ec:7f:
ec:74:84:f0:e9:e8:f5:2e:33:00:65:31:a4:4d:d0:99:de:71:
de:a3:9c:ac:a8:1d:a6:da:8d:fe:eb:b3:d5:c1:a7:f5:ab:ee:
ce:27:0a:23:50:d3:8c:d3:13:3b:02:df:e3:88:bd:d1:b2:47:
68:0e:7a:26:eb:ee:9e:cf:bb:56:d9:ed:b0:a6:0c:67:26:21:
22:51:cf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:00:04 2025 by rpki-client