Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
File: Qe4efs0wuAogBvU4_OY7JCDFe-k.mft (raw, json)
Hash identifier: CqHwvgUaILW0Qqj7B1GOOMNzDRgzSxX0Hk+f6M/NeH4=
Subject key identifier: B8:2E:62:99:3B:8D:CA:46:F7:FA:47:6F:4B:FF:F3:2E:B1:94:18:D4
Authority key identifier: 41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9
Certificate issuer: /CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
Certificate serial: 01976C2AC707FC796F9AA68807C2E5A23A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
Manifest number: 0228
Signing time: Sat 14 Jun 2025 02:00:32 +0000
Manifest this update: Sat 14 Jun 2025 02:00:32 +0000
Manifest next update: Sun 15 Jun 2025 02:00:32 +0000
Files and hashes: 1: Qe4efs0wuAogBvU4_OY7JCDFe-k.crl (hash: 7dXb3wguLmRpP8o1K8YrYKU7xKWyxd7fqN7MVUv4C6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:c7:07:fc:79:6f:9a:a6:88:07:c2:e5:a2:3a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
Validity
Not Before: Jun 14 02:00:32 2025 GMT
Not After : Jun 15 02:00:32 2025 GMT
Subject: CN=b82e62993b8dca46f7fa476f4bfff32eb19418d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a5:6c:2f:73:54:d2:01:d1:89:85:bb:41:78:
13:c6:02:d3:35:05:bc:88:a1:74:88:f8:91:c5:64:
ab:93:a6:b4:ce:dd:3d:ed:17:2e:5b:3e:38:0b:cc:
8d:57:fd:a3:1d:ca:90:2b:e5:d2:70:8e:e6:6b:c5:
99:70:b2:76:f8:28:84:ba:f7:27:f2:16:90:18:6b:
2b:6b:c9:d6:58:fa:23:8b:7b:03:51:55:bd:e7:70:
90:7e:5f:52:bd:2e:4f:e2:5f:00:6d:85:2e:18:c1:
df:57:4c:cc:86:f9:bd:2b:1d:21:2d:9e:fa:88:33:
a8:af:5b:6e:e8:f2:e4:37:df:bf:c2:5d:d0:a4:50:
46:0a:64:1f:4b:e0:d3:9b:c0:30:75:d2:8a:7f:e1:
1b:63:05:ef:21:2b:c4:2a:85:fb:94:7d:5f:2e:92:
e7:8a:58:30:1f:29:60:67:d4:31:23:06:a1:7c:4f:
2b:c5:58:c9:47:ab:85:4f:60:e1:70:03:6e:cb:04:
cb:79:5d:67:54:78:b7:e4:91:32:b8:99:54:28:eb:
91:b0:7f:e1:a4:1e:76:c1:f0:db:5c:7e:0b:11:9b:
eb:41:87:aa:d1:b2:79:64:30:c9:c9:7b:9e:47:6d:
a6:1e:77:aa:81:ef:e6:1d:ac:f3:74:82:82:02:e0:
95:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2E:62:99:3B:8D:CA:46:F7:FA:47:6F:4B:FF:F3:2E:B1:94:18:D4
X509v3 Authority Key Identifier:
keyid:41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b8:90:04:9d:9e:b8:e8:87:3d:a4:e7:cf:07:07:b7:72:b2:
2b:1a:36:94:40:4a:13:83:2b:2d:4d:54:cd:c2:67:9e:89:60:
12:8b:b1:16:c7:ee:66:a3:96:05:20:f4:61:5c:83:b7:32:a7:
52:23:76:1d:b5:4f:68:31:3a:ad:86:b0:26:ea:42:34:24:e5:
ae:1c:2e:07:cf:57:4c:83:96:e0:d5:60:3c:8a:46:10:ca:30:
26:71:5d:f0:ec:5d:39:04:cb:09:f1:83:ca:d3:56:e5:6b:08:
fe:78:18:de:8f:95:80:84:05:e2:c7:20:63:4a:74:25:8c:da:
56:1a:8d:c2:d4:8d:a5:b9:76:21:25:b4:8d:e6:0c:be:c5:91:
46:60:eb:c6:37:79:f2:53:5e:88:ca:20:cf:22:ff:39:31:cb:
93:00:bb:42:00:6f:e4:63:9a:bb:66:e7:cf:1f:59:0e:d9:11:
91:2c:2a:6c:a9:bc:59:39:66:08:4e:85:28:4c:0b:46:6c:4b:
18:45:31:5a:c5:75:fd:69:2a:c5:68:aa:e4:21:35:32:45:3b:
a0:0a:5d:51:ee:64:a9:be:67:9c:b0:1a:f8:1e:b4:b4:64:6a:
a2:67:4d:0b:46:81:ff:9b:2e:9c:fa:0a:90:d9:47:53:9a:62:
f8:fc:9d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:23:37 2025 by rpki-client