Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
File: QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json)
Hash identifier: C2vehL70zhuIJm6StpTsOZqYlB0P3tQM/ADdOwINc3M=
Subject key identifier: FD:6C:02:EA:8B:EF:31:21:16:C0:91:13:C3:F4:98:8D:EE:0D:D6:51
Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
Certificate issuer: /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Certificate serial: 019768BBB4A5E5EBF3A5BEFBFECB27DD4654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
Manifest number: 03D8
Signing time: Fri 13 Jun 2025 10:00:21 +0000
Manifest this update: Fri 13 Jun 2025 10:00:21 +0000
Manifest next update: Sat 14 Jun 2025 10:00:21 +0000
Files and hashes: 1: CuZieAFfwXX8uyaqskcHIzJ9fWo.roa (hash: pBXWN5uV+yQFyDFWsCRJrE7yKliZlwC2u5aCXtkg+Do=)
2: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: zMv3yd91/6AJ9Aa3J9VkdZUOAD6CRi/KpE9JXoG/tSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:b4:a5:e5:eb:f3:a5:be:fb:fe:cb:27:dd:46:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Validity
Not Before: Jun 13 10:00:21 2025 GMT
Not After : Jun 14 10:00:21 2025 GMT
Subject: CN=fd6c02ea8bef312116c09113c3f4988dee0dd651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:12:4c:31:cd:e8:35:ea:b3:4c:85:22:0f:f1:
e8:51:6c:e6:97:04:52:15:dd:35:e0:cb:a5:9f:a5:
20:b5:87:7f:02:f5:3f:b9:fe:f9:bc:1d:09:1d:ac:
9b:6f:84:6d:99:cc:04:68:35:9b:90:44:b3:de:50:
06:1e:cf:33:b4:65:d2:4d:d8:c2:10:79:af:f4:0e:
f0:45:c6:e9:3e:e8:0e:28:6e:cd:a3:b6:47:45:ac:
ae:a6:cf:3c:9e:6e:de:bf:13:d1:93:1b:9a:a0:8f:
e0:55:9f:69:37:0e:09:29:db:69:53:fa:43:ca:56:
30:5a:52:a9:f5:31:6f:70:92:ed:09:3f:ce:b8:05:
ce:c3:a4:56:e6:6b:cf:bd:2a:4d:4e:a6:88:64:2f:
44:54:3a:52:66:b0:a2:52:2a:d9:0f:49:46:f4:40:
f2:89:78:a9:68:a3:c6:8d:13:d0:c6:2b:bf:1c:82:
cb:9b:47:33:2c:7b:d5:49:51:a1:0a:28:c5:b9:d8:
be:9e:f3:97:de:b9:d9:5c:5e:32:4c:fd:f2:92:67:
06:f5:22:10:7e:68:fb:f2:b3:ae:0c:32:61:f3:17:
7e:41:70:ff:ea:e7:89:44:67:5a:cf:f2:ff:f5:b7:
4f:19:6d:4a:2f:53:40:ba:7a:12:84:28:03:af:66:
92:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6C:02:EA:8B:EF:31:21:16:C0:91:13:C3:F4:98:8D:EE:0D:D6:51
X509v3 Authority Key Identifier:
keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c6:67:a0:be:6c:58:7f:5e:7d:cd:b0:c2:e4:c4:39:89:26:
e9:59:e8:87:44:2f:52:a7:48:8b:db:c0:29:7e:b5:55:af:07:
0b:eb:d8:89:81:4d:82:4a:95:12:04:c5:71:0c:cf:dc:28:46:
9c:06:ab:5f:be:56:c6:98:73:1b:aa:9c:f1:df:1b:84:48:e7:
c8:bc:fe:86:37:49:9f:b9:80:ad:cb:17:86:91:50:83:25:cc:
3e:bb:86:27:68:d7:86:6f:ab:ce:d9:74:8a:f5:3d:92:24:a6:
39:31:50:93:d5:c1:fb:3c:5f:96:08:75:d5:4f:e5:b2:bc:ae:
3f:24:9b:27:87:c8:c6:b1:69:25:61:bb:f6:26:9e:26:ea:10:
1c:56:ef:d9:c1:ad:1f:bb:5d:4b:14:1c:88:f2:34:2f:36:40:
28:d9:ce:47:10:c6:34:af:79:a6:4d:f1:c4:e5:cc:05:52:ad:
1d:8a:48:9d:35:f8:b1:65:ee:43:74:b8:5f:90:35:de:94:c7:
ed:98:ab:4b:12:d4:e5:61:77:84:0f:f3:96:2d:3b:81:40:ee:
fb:57:7b:f4:df:80:88:64:49:58:0b:4d:df:61:d2:71:90:af:
ba:29:f8:2a:78:00:2c:c5:e8:61:a9:84:c0:c2:d6:43:97:ca:
96:db:e5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:05 2025 by rpki-client