Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: NkPDSRrUAvdGK+jEUIWAPMx1jrF2iNvinJHeQkMPJCs=
Subject key identifier: E6:F7:DC:A3:DA:8F:F6:39:9D:26:D3:AB:46:42:3C:33:2C:39:86:73
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 019768BC540661443E02F91555076D6697B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 09BB
Signing time: Fri 13 Jun 2025 10:01:01 +0000
Manifest this update: Fri 13 Jun 2025 10:01:01 +0000
Manifest next update: Sat 14 Jun 2025 10:01:01 +0000
Files and hashes: 1: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: 4RbuXC0VeOkrTXaJ8J2nOahZ977GGlGzcC+35dLn5fw=)
2: RackKE1twGeBor1eLjDiSlTrVkc.roa (hash: fjoph1tBy6gB1mXGT8/AsYnic9+cO2wmV2369HxSse0=)
3: UV-P_H7U_ZghmDFQbugvFGk8Rho.roa (hash: rLL2PRAgAL7amnAXMzDF6uWbk/cCk5kAorxzjbQE6+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:54:06:61:44:3e:02:f9:15:55:07:6d:66:97:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Jun 13 10:01:01 2025 GMT
Not After : Jun 14 10:01:01 2025 GMT
Subject: CN=e6f7dca3da8ff6399d26d3ab46423c332c398673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:4b:ec:17:58:65:6d:f5:96:20:16:9c:06:
cd:ef:30:ac:b7:c5:db:bb:ce:ba:e6:77:3a:e1:0d:
cc:4c:d1:70:bd:7d:ea:a9:b1:52:81:52:a0:bd:03:
7c:e5:ea:e1:13:d4:1d:76:db:5b:27:49:c9:e7:19:
ce:d2:58:84:bd:30:fc:7c:dd:1a:6a:5b:5c:c3:f4:
11:70:eb:b2:5e:03:9e:56:7c:97:ff:45:7a:ce:d4:
6c:64:f1:79:77:d3:d1:7b:49:69:fd:85:23:67:0a:
91:0a:9d:91:ac:5b:65:71:4c:ce:4e:0c:3f:db:5f:
3e:73:b4:57:41:39:34:55:31:b1:29:28:7e:6a:db:
4c:8e:ba:83:52:66:59:10:43:e8:8d:12:01:65:f1:
20:bf:b6:0c:88:b1:5a:c8:f5:45:5d:df:4d:39:0c:
82:1c:14:f7:f4:21:50:0a:fe:10:8f:68:21:a8:11:
f4:07:9a:78:f1:ea:ff:b9:2d:a9:d7:28:c4:34:47:
d4:d7:d0:d4:b0:e1:98:4d:43:9f:31:fc:24:d6:00:
5d:de:76:14:0f:bd:21:37:d4:2d:36:b4:03:1d:e6:
2b:07:dd:0f:3a:f1:c6:ab:d2:20:58:00:82:bd:81:
20:cb:b3:28:eb:78:de:7e:ef:2a:5b:73:ef:94:36:
07:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F7:DC:A3:DA:8F:F6:39:9D:26:D3:AB:46:42:3C:33:2C:39:86:73
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:07:4b:aa:8e:cd:09:ae:89:72:e2:84:0c:01:cb:6c:b6:84:
e1:ed:d6:b7:ec:dc:bb:93:f5:28:d1:59:fe:28:b0:06:f9:5a:
17:a4:01:86:04:81:38:de:53:f7:90:2c:2a:38:d3:43:42:87:
4b:d0:cc:4f:6d:4d:7f:de:fc:88:72:f9:44:eb:98:d2:0c:59:
e5:b4:1f:82:72:25:a8:d8:0f:95:bc:9c:63:44:a4:bf:ed:ff:
bb:b0:36:5e:f1:fa:70:0c:d7:af:f6:cd:1d:40:cd:0d:b9:e2:
21:7f:2e:c4:eb:70:77:d7:9e:f2:79:7b:aa:d1:ae:b2:ec:94:
21:24:47:67:d4:b8:41:58:15:3d:8a:92:56:e6:05:69:a2:b1:
7f:16:b4:82:9d:3e:5d:3f:82:7b:83:bb:2c:05:8f:37:c4:f8:
64:72:0f:c4:8b:0f:e0:6e:1b:5a:68:39:f0:c1:8d:e7:6c:e2:
9b:24:2d:51:75:aa:94:a8:79:24:d0:34:f9:2b:6b:24:a6:ef:
07:46:b5:29:ee:f6:dc:9d:2a:63:66:88:74:18:59:1f:a5:98:
7e:19:67:dd:cb:2f:ee:fc:ae:88:e8:fb:d7:86:95:7a:de:c4:
65:a3:aa:35:87:f3:19:10:95:20:85:09:b9:40:7a:66:25:bb:
a5:82:03:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:38:27 2025 by rpki-client