Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier: S23x4Xem5IPnlaWn34AKNWMytyYPtzPulQ0MJSnfL4U=
Subject key identifier: EC:FB:58:34:2F:45:10:6A:52:FE:31:00:CD:A6:FB:E4:CD:19:78:AF
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial: 01976EF4F6503F7BBAD655675C65FFCFBE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number: 09FE
Signing time: Sat 14 Jun 2025 15:00:36 +0000
Manifest this update: Sat 14 Jun 2025 15:00:36 +0000
Manifest next update: Sun 15 Jun 2025 15:00:36 +0000
Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: OLkyyhf6urgu/n2bin5tCIMnDGVzHFvf51dc1WZkgeU=)
2: UJVJt5_Arh5oP7MnvKcbCGODOc4.roa (hash: cSJe9mPxkDM+ny/+GoKSWRH8dkU4qbTNsxlZ1deFGeo=)
3: epRoE1oSS28-kMoVUvbovqDaftI.roa (hash: vf7QEJn0ywPdqhUagZXAfAdq0fp3vefGorgZKG9IKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:f6:50:3f:7b:ba:d6:55:67:5c:65:ff:cf:be:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Validity
Not Before: Jun 14 15:00:36 2025 GMT
Not After : Jun 15 15:00:36 2025 GMT
Subject: CN=ecfb58342f45106a52fe3100cda6fbe4cd1978af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f0:0b:d4:c7:22:fc:c0:d6:89:f0:75:94:c8:
ff:f8:19:17:6d:b2:4e:d4:9f:6c:3c:3d:33:19:cc:
12:f8:e8:3b:b5:56:87:bc:94:d9:da:38:bb:41:24:
2b:e5:57:5f:7b:06:e5:02:b3:01:b4:86:81:03:30:
7b:d9:16:14:2a:60:b3:f0:5a:ef:66:8d:66:5c:0d:
50:4f:96:a4:f3:2e:a0:6c:66:06:ed:92:ac:68:7c:
f5:3f:04:ab:2b:c8:3c:d0:a1:98:a5:13:b8:af:56:
16:da:7e:02:dc:32:84:88:be:f2:8f:25:b7:f1:54:
fb:45:8e:37:8d:9b:d6:9d:e6:33:5d:b7:cc:be:c7:
af:d0:65:03:a1:b1:93:1d:36:0c:56:4a:05:e1:f2:
15:ed:08:f7:87:68:d0:bf:28:7c:03:8a:fe:a6:6a:
9b:8b:17:6c:61:46:22:52:4a:be:89:84:51:01:09:
30:24:2c:4e:55:f6:4c:1a:fc:bb:ce:e0:bd:4f:b9:
82:e3:66:85:37:3e:b2:05:fc:5b:fb:37:83:d4:70:
c5:24:64:b3:54:2c:0d:ec:7c:59:8a:26:f4:96:0f:
ae:15:02:af:cf:9a:8a:11:99:3f:7f:31:6a:ff:f7:
45:77:c8:76:54:dd:c5:34:29:32:22:69:eb:f4:b4:
02:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FB:58:34:2F:45:10:6A:52:FE:31:00:CD:A6:FB:E4:CD:19:78:AF
X509v3 Authority Key Identifier:
keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:11:f3:b5:c2:c9:7e:d7:f9:bf:1d:cd:82:0f:c9:c6:58:c3:
53:04:16:4f:e3:0a:e0:ed:3e:39:69:c6:08:3f:3e:d8:90:2b:
25:d1:39:44:62:0e:96:65:f2:a3:19:8f:a0:23:01:98:e9:24:
09:d3:ac:d6:f3:6f:d2:ef:61:9c:a6:40:22:cd:68:24:60:6b:
a9:68:22:ec:38:d0:da:89:59:50:31:87:4f:72:db:57:fa:9c:
24:89:7c:f9:51:4b:a9:1e:00:74:cd:ed:b4:9d:ab:e5:0c:c6:
1f:44:83:b8:34:c0:08:17:9c:1e:b5:99:3e:24:a1:e1:e6:36:
16:8c:65:7a:ba:2a:33:92:a0:b9:d0:b9:e5:58:08:32:81:b6:
eb:7e:d2:c4:93:f6:85:ca:27:3a:96:b2:17:3b:06:0e:1c:e9:
d5:f8:f9:97:8c:05:1a:2f:3f:26:65:a2:bd:f4:3e:2b:7e:22:
db:c5:c6:41:36:a1:a6:50:f2:48:d7:7e:a7:85:e0:13:55:72:
51:1a:76:10:16:fa:bc:55:db:dc:79:46:f5:cc:c6:1a:f6:7e:
84:ee:3f:af:96:15:4e:ce:a2:76:a0:c7:b5:49:7b:08:b3:79:
8b:a8:9d:63:df:0a:d0:14:d8:d6:09:05:28:84:8c:27:b9:9b:
ba:c2:50:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:20:06 2025 by rpki-client