Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
File: QM_TpJvHHnSg0L9-NGyomylZehI.mft (raw, json)
Hash identifier: ERngawrL+ZAn5XXkUWYRW3cfD3bTWnRSjsWZMfmibyE=
Subject key identifier: 41:D8:83:C0:2C:69:05:75:35:74:B2:A5:06:FE:B8:67:AA:0E:5B:F3
Authority key identifier: 40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
Certificate issuer: /CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Certificate serial: 0197711A7688D520DA66E3B485791CD3C80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 01:00:49 +0000
Manifest this update: Sun 15 Jun 2025 01:00:49 +0000
Manifest next update: Mon 16 Jun 2025 01:00:49 +0000
Files and hashes: 1: QM_TpJvHHnSg0L9-NGyomylZehI.crl (hash: BxsNvfGMqwdV2byklmKWMCUZK4PyukDs1oYIDDPirAo=)
2: cOU0f1SCKSAnKUQtSDidcXUui3Y.roa (hash: SxetuqQIAbe3h1o0xhzW+JEeQWRKvCIOYuGwJHKjEXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:76:88:d5:20:da:66:e3:b4:85:79:1c:d3:c8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Validity
Not Before: Jun 15 01:00:49 2025 GMT
Not After : Jun 16 01:00:49 2025 GMT
Subject: CN=41d883c02c6905753574b2a506feb867aa0e5bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c7:df:d8:17:72:23:1a:d8:60:01:70:f3:d1:
e6:ee:21:5f:97:74:17:d1:36:56:95:66:4c:bc:c9:
f8:08:5a:da:3e:20:f2:a7:ac:21:83:8f:87:ae:87:
17:ac:4b:69:13:f6:f9:61:f8:1e:84:01:a7:bc:67:
0d:f7:38:8e:df:0c:9d:5f:03:8a:08:d2:fc:8b:2e:
55:43:8e:3d:21:cd:08:3a:6e:af:c3:27:02:25:f7:
3d:17:84:32:1f:74:24:df:b2:3c:78:16:a8:5b:27:
f0:22:db:3b:8b:c2:e1:d8:43:7a:53:ed:86:94:59:
a3:28:43:d8:1d:14:8b:05:64:2b:12:96:b7:3d:2a:
fc:a5:9e:83:ea:ef:99:73:3a:16:f5:9d:11:45:21:
63:af:30:7b:3c:99:26:13:3a:68:8d:4c:b4:91:54:
87:5a:3a:b2:aa:54:0c:7f:8a:d0:90:a5:23:f0:a9:
64:22:0a:34:5b:0f:82:c9:0f:72:58:72:90:d0:3d:
c0:db:6e:a5:06:ef:67:de:fd:9e:fb:de:3f:c0:fb:
f4:41:95:19:54:b7:c6:d7:9c:43:22:3f:34:53:5b:
79:9a:b8:bb:78:36:79:6d:58:f3:9f:3c:30:80:19:
80:14:ad:76:40:1c:22:96:2f:2f:20:18:72:ce:2a:
93:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D8:83:C0:2C:69:05:75:35:74:B2:A5:06:FE:B8:67:AA:0E:5B:F3
X509v3 Authority Key Identifier:
keyid:40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:41:4b:2c:2a:bb:7a:cf:70:39:21:2e:4a:75:1b:32:7d:1e:
92:11:bb:8c:e0:a0:78:26:7e:15:63:76:cc:2f:a4:b4:7d:99:
d6:71:2e:42:b0:4d:5e:5f:9b:b0:a5:95:61:17:33:81:0c:92:
ee:3f:ca:a0:e5:93:d2:84:38:83:e4:0c:69:fc:95:35:fb:1c:
43:dd:01:78:d1:31:63:f2:10:99:dc:30:b0:25:b9:1c:ab:ed:
00:1d:c4:8a:c5:06:b5:17:a6:a0:f1:34:d4:57:a5:45:a5:6f:
e8:f8:e6:d0:fc:67:9c:a5:e9:21:db:0e:b1:36:bb:42:3f:ab:
ee:7b:2e:cf:8f:9d:2f:0e:68:b5:4d:b3:38:6e:01:60:ea:20:
be:85:ba:7f:a9:6e:7f:9a:2d:30:35:3d:3a:01:75:14:19:e3:
82:64:04:83:c6:88:d9:7f:69:f1:59:9d:2a:26:84:0b:27:94:
fc:54:cd:ba:e8:c9:60:0f:5d:73:bb:aa:86:5c:7b:e8:d9:96:
6a:7e:8f:5e:6f:c3:53:3e:25:83:0e:08:7f:67:57:95:dd:b7:
62:7b:b3:17:f0:2b:b7:fe:c6:5d:40:64:9e:f8:f4:42:89:b2:
4e:c9:fb:ef:27:c7:59:29:23:35:26:ac:6f:a2:77:f7:d2:89:
ed:f6:0d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:37 2025 by rpki-client