Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
File: qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json)
Hash identifier: G3QTPc8m4edQ1ph3s37sH5x5ncySXtjGKZ0xE80tsRU=
Subject key identifier: D4:18:B7:DF:75:58:BC:D0:61:60:03:4C:63:07:B7:E2:8F:4A:B6:C0
Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Certificate serial: 01976BF429B87039DB2E7C42344B889A6B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
Manifest number: 0A71
Signing time: Sat 14 Jun 2025 01:00:52 +0000
Manifest this update: Sat 14 Jun 2025 01:00:52 +0000
Manifest next update: Sun 15 Jun 2025 01:00:52 +0000
Files and hashes: 1: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: KARj+ZcJtaCBOvTAmPc5Jnj8wmf93v+7e2vCdCxcP+Q=)
2: wcccpGaeYTilF5ncbceAk7mBvqQ.roa (hash: gOA2BhosHOf6qCEMFAHb8yTCso/K7yQdwGzJmIy7AF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:29:b8:70:39:db:2e:7c:42:34:4b:88:9a:6b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Validity
Not Before: Jun 14 01:00:52 2025 GMT
Not After : Jun 15 01:00:52 2025 GMT
Subject: CN=d418b7df7558bcd06160034c6307b7e28f4ab6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:46:49:fb:ac:b6:45:dd:11:66:31:cd:ec:12:
31:45:03:04:7f:12:a2:ab:a9:e3:97:7a:2e:e4:b2:
08:37:8f:57:d6:59:60:6d:7a:c1:04:2f:21:8b:1f:
11:3a:a0:30:e6:c4:12:98:cb:76:5d:af:a8:53:15:
f7:8e:dd:3b:fc:1c:68:f0:f6:45:02:85:04:db:a9:
df:64:f8:47:cd:d1:b3:7c:af:4f:b4:ed:66:53:1c:
08:ab:f5:48:0d:c8:77:28:d9:a1:4b:bc:4c:bb:44:
a5:15:f3:79:59:4e:1f:59:db:b8:cb:93:fc:60:11:
17:7d:69:ef:63:ae:f5:20:78:8f:3e:af:04:84:3a:
76:5c:fe:4c:0f:60:2d:d3:03:d8:44:2b:5f:a0:02:
cf:ce:98:ac:a6:de:f9:9a:04:01:a4:86:33:a8:d9:
25:b9:8f:f0:7c:6a:7c:d5:20:a8:f0:37:e7:9e:18:
b2:51:0a:d1:30:44:96:63:14:24:7c:21:f4:8a:67:
5d:45:f9:5f:f2:60:75:b9:57:9d:64:1a:1f:9b:e6:
4e:ab:88:45:63:1c:18:24:6f:4b:fd:c5:b8:76:de:
61:f1:11:4e:16:59:fa:bb:6e:ce:ee:2f:76:f6:27:
fe:73:3e:25:53:e4:d2:f7:fa:da:16:55:6a:0a:7d:
cc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:18:B7:DF:75:58:BC:D0:61:60:03:4C:63:07:B7:E2:8F:4A:B6:C0
X509v3 Authority Key Identifier:
keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:20:c7:61:fd:04:50:d5:5d:ed:4b:aa:12:6a:98:96:39:37:
4e:c8:f9:da:59:5a:46:47:5a:f3:9a:be:a2:d2:2c:5a:ab:89:
02:9c:e4:cc:6f:dc:2e:a4:8f:7e:01:23:36:d5:3e:26:90:17:
f1:9e:cc:09:c8:b3:bf:7d:9d:3c:c2:b0:48:83:03:6f:c0:da:
23:3a:30:15:08:3c:52:99:9f:ed:2f:9a:f8:0c:84:8d:7d:98:
ac:22:e8:8a:7e:64:da:ad:16:d6:f9:90:b4:c8:c7:a6:24:6b:
25:e9:cf:30:7c:0f:56:04:d6:ce:08:06:c4:b7:1e:45:9f:88:
63:65:8c:8e:45:70:85:19:6b:e2:7e:19:d7:e0:54:40:49:0f:
00:7c:ed:df:fa:54:07:ed:1c:e9:03:8a:ef:76:ad:0f:92:48:
a5:c3:63:6b:b0:1f:8a:ff:7b:67:a7:7e:06:bb:35:ee:68:f7:
ee:61:92:a9:ba:50:2a:a0:bb:f0:77:38:88:2a:92:a1:b6:49:
4a:19:c6:e9:6d:5a:36:35:27:89:14:9d:45:11:8c:e1:8c:10:
6f:00:67:75:27:65:02:08:a7:0c:56:51:03:fe:44:f9:16:5b:
bc:38:25:c0:54:ed:89:64:46:a7:75:4f:d7:a4:0e:a2:20:a0:
76:33:05:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:12:47 2025 by rpki-client