Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
File: QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft (raw, json)
Hash identifier: xZO6XEoPVChUouCIZ66M1mDNIMVOP7z/YDnM+7H16G8=
Subject key identifier: 33:FF:02:D5:8E:82:41:1F:4E:43:0B:99:6D:F8:12:8C:F7:C6:33:DC
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial: 01976C987418068FD0402425140E1B488B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
Manifest number: 1361
Signing time: Sat 14 Jun 2025 04:00:19 +0000
Manifest this update: Sat 14 Jun 2025 04:00:19 +0000
Manifest next update: Sun 15 Jun 2025 04:00:19 +0000
Files and hashes: 1: FdgrAlXHTUPAeTheMsde8YkawNs.roa (hash: rje6Lwajr0YyCxZcxBMKIrTaIp18lo7SaPvG3dwiyVA=)
2: QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl (hash: I3tQzIJG0ffq2tjY6q+sCXQyygOMlsW/cpFwUyU5gXA=)
3: s_2L4K_sJnZRupOisUUmx-pSGhc.roa (hash: WrT7tu8a18enFrkb7Ns9dzR3YzLJ2dPG++PSa/YdVYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:74:18:06:8f:d0:40:24:25:14:0e:1b:48:8b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40254d4a767ad099606e442e092f91241a363670
Validity
Not Before: Jun 14 04:00:19 2025 GMT
Not After : Jun 15 04:00:19 2025 GMT
Subject: CN=33ff02d58e82411f4e430b996df8128cf7c633dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:06:eb:05:09:6b:fc:a4:8a:56:c1:a1:d1:
1d:df:43:6f:70:6f:ce:84:3b:88:0b:24:e2:6e:19:
6a:a4:9b:02:ac:72:68:fe:7b:34:d2:bf:f7:47:ac:
a5:8e:43:50:47:6c:04:57:5e:6e:52:d0:87:71:d6:
52:9c:2a:fa:90:49:bc:08:69:ea:bc:dd:0c:45:c3:
d0:60:be:30:64:4b:29:a7:55:5f:71:b1:fc:38:d8:
f2:ca:1f:35:85:5a:06:08:13:ab:8d:86:8e:00:e2:
c1:0e:c2:c5:5a:0d:fe:ee:de:29:21:77:11:dd:37:
45:1a:59:57:34:4a:95:6e:b5:da:60:34:dc:cb:dc:
73:8d:46:73:a9:01:13:5d:71:31:b8:60:1c:19:59:
c4:f6:3d:73:86:34:c5:26:c6:c3:0a:3f:11:68:39:
58:c3:4b:fb:6e:e9:bb:07:e3:9f:ec:61:3a:fd:2e:
46:1d:85:9e:4b:9a:e5:ea:31:f0:25:a6:c8:47:7d:
1a:95:b3:6f:05:36:34:d5:90:bd:50:75:7f:9d:14:
d6:06:19:49:51:2d:ed:d3:3d:65:98:6e:65:73:8a:
ff:fc:67:6e:ce:20:eb:6c:13:24:db:c9:8e:2b:aa:
d2:e1:44:d2:27:da:07:4a:8e:f2:b0:9a:47:cb:13:
c7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FF:02:D5:8E:82:41:1F:4E:43:0B:99:6D:F8:12:8C:F7:C6:33:DC
X509v3 Authority Key Identifier:
keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f9:3f:8b:53:cc:e5:8d:33:44:ab:4a:95:32:95:43:54:8e:
0d:a8:b9:dd:bd:95:6f:ed:6e:8a:1b:bd:b3:48:63:b5:5e:75:
cc:6e:19:e1:b0:74:be:dc:5f:40:21:d4:02:9c:35:fb:26:f9:
11:c5:ce:79:91:63:89:19:34:14:9a:21:78:83:85:3b:5d:0c:
cb:12:4c:b7:b9:a8:6b:1e:80:a1:67:4b:15:8c:e0:79:1f:14:
91:33:18:69:59:63:d9:f8:22:6a:e5:77:1e:4c:f8:f5:9d:87:
bc:e8:81:aa:45:cf:4f:68:4d:35:7c:f5:8a:4f:a1:9d:2c:2b:
ed:9a:a3:df:58:b2:ff:19:e8:7c:19:5c:7a:2b:72:e1:02:0d:
e0:5e:28:06:63:eb:5b:fa:ea:b0:c7:4e:1e:fd:a6:f8:38:97:
6b:2d:28:34:42:6b:ae:75:c5:cc:d4:d5:50:d5:cf:95:38:41:
a7:0a:5b:79:b6:5c:e5:bf:79:f6:e6:17:c0:9a:95:5b:d9:ef:
86:fd:60:07:8a:f8:cd:d3:f5:7c:17:82:46:67:66:91:e0:e7:
e3:1d:e1:ec:bc:71:16:62:ea:1c:a2:0a:4f:f5:7a:40:a7:30:
b2:13:d2:ea:5c:3e:78:c5:f8:cc:b5:4d:d0:f8:cf:a8:9f:77:
aa:da:9a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:10:57 2025 by rpki-client