Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
File: Q5_i1RcHd00tDCv50SrQercmQqI.mft (raw, json)
Hash identifier: yLk5lPIkplVsig14JS/N/OqJbQVIlzldPeqh6hoSr1g=
Subject key identifier: 27:E3:3E:2F:6E:A1:7F:CD:C4:1E:7E:B2:93:2D:DF:0B:E4:58:EC:AE
Authority key identifier: 43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
Certificate issuer: /CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Certificate serial: 01976E8705469F9B45908C647C946BE878E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
Manifest number: 0DF4
Signing time: Sat 14 Jun 2025 13:00:31 +0000
Manifest this update: Sat 14 Jun 2025 13:00:31 +0000
Manifest next update: Sun 15 Jun 2025 13:00:31 +0000
Files and hashes: 1: Q5_i1RcHd00tDCv50SrQercmQqI.crl (hash: 6yHpMZiveISVp8gpXg7NiPNbpDObK4GSWkprRZbao90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:05:46:9f:9b:45:90:8c:64:7c:94:6b:e8:78:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Validity
Not Before: Jun 14 13:00:31 2025 GMT
Not After : Jun 15 13:00:31 2025 GMT
Subject: CN=27e33e2f6ea17fcdc41e7eb2932ddf0be458ecae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:eb:7a:d3:8c:69:7b:27:5f:4f:a6:9b:ed:
5d:e0:eb:82:4a:3f:68:24:48:c4:df:65:7d:eb:ab:
b0:a2:36:5b:00:f7:be:7f:bd:28:fb:a7:af:14:90:
a0:cf:d5:49:bf:19:99:7e:de:2f:d8:60:b2:66:ec:
0e:e5:33:fb:b9:cf:c2:b7:34:ce:0e:85:56:d9:ef:
d4:ea:bd:61:4e:99:a8:72:2d:6c:09:af:76:cc:93:
43:71:25:d8:aa:5a:67:69:1b:87:0c:b9:6f:44:f7:
5a:d5:7f:fa:0d:52:3e:b6:92:68:b9:42:bd:b9:85:
f4:a0:7d:48:eb:37:bd:2f:04:ff:e6:b6:b2:bc:70:
99:e3:97:12:1a:3b:d6:3e:d2:ae:18:58:21:95:b5:
c9:c4:38:68:9a:96:af:4d:8d:3d:80:61:6d:24:21:
84:8d:93:13:b1:ac:34:bd:35:33:73:0d:f8:72:ca:
5b:8d:46:a1:22:9a:3f:81:15:f4:7c:7d:c7:1a:96:
5c:9d:c0:73:4e:06:cc:78:21:d9:80:c8:c0:82:48:
21:2b:59:54:41:8c:fb:71:5d:92:81:ff:f0:ab:1a:
10:50:e5:53:55:99:67:75:c7:4d:e6:a5:18:4e:74:
14:01:a7:56:21:9a:30:25:46:aa:d1:1d:6a:50:ff:
34:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E3:3E:2F:6E:A1:7F:CD:C4:1E:7E:B2:93:2D:DF:0B:E4:58:EC:AE
X509v3 Authority Key Identifier:
keyid:43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ad:52:78:4c:1b:0f:ac:52:1b:3d:0b:52:51:16:dc:02:97:
72:f3:a3:90:92:e9:5d:22:57:80:85:92:c1:73:56:35:e4:b4:
e4:47:52:3b:cf:34:72:55:32:34:71:1a:87:2c:6d:5a:77:d3:
69:20:e4:31:f5:a0:51:97:b3:3a:24:85:a8:22:98:ed:6c:d3:
81:03:25:2a:27:5c:74:1c:5a:9b:6a:eb:ef:f8:fe:a7:cf:06:
e4:80:94:e1:fb:84:02:1c:08:be:91:15:87:9e:5d:6a:99:b9:
58:cd:40:c9:34:2d:bb:5b:a5:0d:ec:5a:41:1a:ab:06:d0:78:
47:a7:b8:ce:b0:b2:3e:7a:98:b2:87:29:02:a4:b9:93:7f:56:
61:bd:f5:af:f4:c0:7f:c6:fd:f2:6c:b0:8a:dc:78:bc:fc:43:
03:dd:18:61:69:50:a4:a7:d8:18:3d:c3:d1:22:9f:91:61:93:
58:02:ac:1d:a2:9b:3f:4b:5b:0e:44:45:f9:81:46:2f:0e:52:
ed:94:1b:c8:ff:0e:3a:47:1c:dc:48:cd:6a:4f:bb:27:c8:95:
cd:d7:8c:a6:58:e6:8b:ec:1a:98:4a:e9:ba:99:1d:a2:c4:b8:
03:0a:3b:3b:72:af:1c:c9:ae:fc:a4:ac:71:14:45:e7:9f:84:
9f:01:81:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:53:52 2025 by rpki-client