Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier: 6Y3F6dSDVTQG+yhriCzc0/g1sB6KhgFmVgCdiOPrPVI=
Subject key identifier: 3E:EF:A6:63:1C:E9:D1:25:BD:88:9C:5B:F5:35:18:08:3C:11:34:C4
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 0197470B8EDA874B0E19F508DDBF9DC195C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number: 0F0E
Signing time: Fri 06 Jun 2025 21:00:29 +0000
Manifest this update: Fri 06 Jun 2025 21:00:29 +0000
Manifest next update: Sat 07 Jun 2025 21:00:29 +0000
Files and hashes: 1: ASgPIcJDfuPjOm8cjrU_yX9d6LI.roa (hash: FoRf6zKDxzFzqNvRaEaSA99AYo7HeXRCWwfxlBkAE5Q=)
2: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: y4JmvSNLIOxrhlXn5hVOeVaR6bhtUwpaiPTzgtYBWXM=)
3: jJHHC0ke4zgy7tsBzgOSiuwx8KQ.roa (hash: y6+yWoGbJ/QqPwBhk36qsFBsa4k6khZqZ0ihGtdEnfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:8e:da:87:4b:0e:19:f5:08:dd:bf:9d:c1:95:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: Jun 6 21:00:29 2025 GMT
Not After : Jun 7 21:00:29 2025 GMT
Subject: CN=3eefa6631ce9d125bd889c5bf53518083c1134c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:44:da:57:2b:0c:31:ae:bd:54:e1:02:0b:
12:0c:37:d2:5f:91:bd:a8:1e:b1:2c:cc:6d:d2:23:
ba:d0:62:02:34:e8:ee:63:2c:d6:15:6c:9f:ef:22:
46:54:59:06:2c:e6:07:8f:37:1d:8a:36:ef:c9:c0:
24:19:9d:c4:17:75:4b:bb:91:aa:2e:8c:93:03:ef:
2f:99:15:0d:aa:9c:d2:da:49:38:15:e8:ea:37:71:
60:26:27:2b:0a:19:7a:7d:23:9f:5a:12:a9:72:1a:
64:c9:e2:ed:de:ee:0b:93:a5:85:93:09:72:d6:dd:
64:8c:8d:df:fa:76:a5:c7:fc:1f:25:db:54:a0:00:
e2:29:c1:97:70:2c:da:52:32:49:76:8c:1d:1a:7b:
22:92:a5:d1:34:18:61:e8:23:0a:01:6d:b0:3c:98:
28:5c:38:cd:cb:94:bb:52:7d:b2:5d:73:c1:ec:0f:
eb:bf:8b:c9:1e:85:9e:18:e4:9d:fe:0d:76:db:a4:
75:5b:6a:57:1c:92:df:f0:2a:a5:f4:ee:e6:5f:ed:
84:ef:9e:80:94:d6:cc:82:9b:17:a4:80:7c:06:54:
ab:1d:5d:f8:fc:97:3e:a0:1d:cb:fe:25:d6:dc:2b:
ad:7b:5d:86:d3:6e:36:66:5d:26:47:60:2e:06:b2:
b7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EF:A6:63:1C:E9:D1:25:BD:88:9C:5B:F5:35:18:08:3C:11:34:C4
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d2:e2:50:84:20:3e:a0:c9:b8:ad:02:ac:7e:a6:38:41:f1:
18:02:ac:40:52:16:21:e9:cb:04:f0:6d:bd:11:14:d4:58:10:
1d:f9:ec:b6:74:b2:d9:3e:a1:40:6d:de:e5:c0:ad:56:e1:6c:
0f:74:6d:42:6a:00:c7:b1:ae:9b:ac:01:23:84:34:f5:51:2f:
ad:f8:5e:c5:cb:b2:1a:d8:ab:2e:9d:76:3b:1f:68:ab:67:73:
d3:7b:b3:a0:e6:de:65:0c:65:4a:68:04:1a:74:0f:e7:9c:a1:
9f:89:81:c0:bc:3f:60:19:c2:5f:07:91:09:ac:35:3e:49:10:
af:e9:d7:57:42:4c:27:1e:8e:00:1b:b0:ab:98:2c:ff:41:cc:
a1:64:66:cf:24:d4:3f:f3:cf:19:cd:dc:8a:14:9d:99:b7:b5:
9e:15:d9:a5:a8:66:c1:a4:1b:73:6e:36:95:50:e6:72:80:f4:
c0:60:ba:4d:df:11:e2:c0:62:a2:27:07:3e:7f:c7:be:c9:8e:
66:73:9e:eb:08:ff:b9:23:8b:1b:db:ad:68:7a:f5:20:ab:94:
94:35:0e:b7:68:f0:20:4b:27:05:c3:dd:73:9a:89:a9:c0:f9:
4e:b5:7a:55:5e:4c:a2:0b:b4:a0:b7:2b:ed:20:8a:d9:bb:6b:
4f:74:79:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:43:00 2025 by rpki-client