Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
File: QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft (raw, json)
Hash identifier: +JQ/LZfXdKk3S96aVG7RNKrPP7JdWNkerZ/caRVpdDw=
Subject key identifier: BB:7A:4B:F0:22:14:44:B3:2F:D7:3C:89:FD:11:E1:22:07:29:05:E3
Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
Certificate issuer: /CN=411952046770f54e8be1fd7d673132265ad70fa8
Certificate serial: 01974E8E5B8A07164E1E2E17360DAE5103FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
Manifest number: 0C3E
Signing time: Sun 08 Jun 2025 08:00:41 +0000
Manifest this update: Sun 08 Jun 2025 08:00:41 +0000
Manifest next update: Mon 09 Jun 2025 08:00:41 +0000
Files and hashes: 1: QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl (hash: D3fOOYy8ieN3QmhDHxDfnXpE+MHfn77lFNkgXUa6MMY=)
2: Xpf8O2DfxtSRMYLfH4Jhe7jGcr4.roa (hash: mr8J89/SuXN+JPAXQsryCuEFWqmHZudkRiHUpBMVGnw=)
3: qliDDfSLIfyZKuJ9vwyYrHItz_k.roa (hash: D8mFTN20TsuGjGw8I0yHs9/gZXV7jBDiD7YQatfWrpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:5b:8a:07:16:4e:1e:2e:17:36:0d:ae:51:03:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8
Validity
Not Before: Jun 8 08:00:41 2025 GMT
Not After : Jun 9 08:00:41 2025 GMT
Subject: CN=bb7a4bf0221444b32fd73c89fd11e122072905e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:c4:a5:b5:d0:dc:92:bc:e5:b8:bd:ce:41:
d3:4f:8b:6d:ec:b5:d4:54:2f:86:58:0c:8a:e7:9f:
0f:b5:aa:c7:10:b6:0a:0f:57:bd:7a:53:6b:19:0e:
e8:0f:ad:75:b2:b6:cc:22:04:f7:e0:71:89:fb:27:
45:73:66:4a:8e:55:92:4d:a7:a8:15:64:cf:68:59:
f7:6e:af:24:a5:cd:be:1c:d7:57:f4:2d:78:29:b9:
b8:02:db:e5:3b:16:10:70:6f:8a:7b:a9:37:68:e9:
57:c6:6a:2c:e6:e2:56:60:b4:9c:80:57:5e:0f:ad:
5e:f5:f3:b4:73:ba:02:ab:60:43:14:0b:b1:bf:13:
b5:6d:5b:34:57:d6:c8:77:6b:b3:20:d3:07:ce:62:
6f:56:69:fd:00:68:c8:86:42:2d:02:4c:70:c8:46:
7f:74:f8:36:5e:83:52:3c:e9:57:f9:29:51:c3:9f:
db:ec:4d:30:bc:84:c7:71:d2:cc:b3:1b:f1:38:95:
44:2b:89:f5:b8:5d:20:da:53:65:49:b1:15:85:75:
4c:1f:ec:b7:69:73:38:ff:c2:aa:fd:57:d2:93:49:
82:a7:16:0f:74:7d:b0:0b:c3:f8:59:47:01:d7:90:
e1:ef:3b:d1:72:b6:8a:7c:04:74:fb:3d:d3:95:62:
2c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7A:4B:F0:22:14:44:B3:2F:D7:3C:89:FD:11:E1:22:07:29:05:E3
X509v3 Authority Key Identifier:
keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4e:59:ea:04:9f:c3:8c:3c:c5:74:2d:3d:9a:16:65:ae:6e:
09:4f:ca:e1:37:ca:96:f0:ee:44:31:fc:94:b4:bb:dd:60:34:
10:06:42:93:b7:f9:aa:1b:37:0d:58:36:dc:71:a5:67:95:ef:
76:8e:6d:53:e8:0f:1f:5b:92:16:1a:e8:76:20:89:e6:37:b7:
09:bd:ee:90:64:7b:69:8b:3a:b2:07:6d:76:6f:a9:0b:bb:1c:
55:60:8d:35:65:dd:63:b0:9b:25:4b:45:f5:b4:9c:a9:f9:78:
31:92:e9:d2:ff:d3:7c:ea:0f:93:1a:cf:3c:0f:91:84:bb:49:
13:75:36:7e:5d:5e:b4:bd:d5:39:ad:9f:de:35:01:1b:2b:ce:
4f:42:18:96:45:59:af:52:2d:04:f4:84:cc:dc:19:80:52:dc:
c2:f2:38:48:dc:05:8d:32:ce:a4:de:f0:88:67:8e:f2:ab:a1:
54:51:d7:e3:e1:07:ed:40:a4:0e:a1:b8:3d:1c:9b:05:a0:5c:
70:09:49:db:11:4c:07:7e:7d:79:31:61:3a:75:8f:86:e9:5e:
4a:04:20:f5:00:1d:74:86:6a:5e:fa:99:bb:d0:74:3c:92:83:
c2:d1:f1:d6:80:d3:b7:ca:2a:4b:89:d1:34:c2:77:4c:33:ad:
9f:9a:b1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:37:41 2025 by rpki-client