Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
File: QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json)
Hash identifier: XhF3FuqmpV1kIRurtT9xoEdNn84Vb890j2k3BFDrfuU=
Subject key identifier: A0:69:EA:AC:38:1A:F5:9C:8C:D0:82:6E:BD:24:3A:62:AE:DB:D4:FD
Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
Certificate issuer: /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Certificate serial: 019747E7B894DFE6C26C1C7DE6E5076698A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
Manifest number: 0268
Signing time: Sat 07 Jun 2025 01:00:57 +0000
Manifest this update: Sat 07 Jun 2025 01:00:57 +0000
Manifest next update: Sun 08 Jun 2025 01:00:57 +0000
Files and hashes: 1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: NKzPiskOKt8A6fl5Fyf3xSrqIAtdwjqZuZVfsOUlGRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:b8:94:df:e6:c2:6c:1c:7d:e6:e5:07:66:98:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Validity
Not Before: Jun 7 01:00:57 2025 GMT
Not After : Jun 8 01:00:57 2025 GMT
Subject: CN=a069eaac381af59c8cd0826ebd243a62aedbd4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:78:42:91:fe:ab:f6:3b:44:10:b4:68:aa:
a8:12:02:66:0f:db:1e:52:a0:73:bc:98:03:80:3e:
23:02:3e:b3:3a:5d:a0:7a:7c:7d:da:49:c4:ca:cc:
c7:f5:c4:83:5d:06:4b:88:47:e0:22:4a:04:fd:f9:
b5:c9:50:6b:ae:fc:1a:1b:9a:bc:9b:d1:b5:7b:ef:
dd:7d:b9:8a:ec:18:6c:f2:42:41:7a:c0:b5:52:97:
0e:6b:1f:e4:e7:ef:52:01:48:0b:e3:bd:3c:94:16:
2a:36:b8:8d:54:19:9a:3b:cb:4f:cd:1e:21:1b:df:
fe:ec:d0:1f:4a:e1:96:2c:e6:f9:0b:af:45:46:e1:
99:fc:8d:c4:21:63:58:ba:18:a6:1b:0d:7c:ea:91:
49:3f:2c:cf:4c:4d:b1:9d:a1:d0:4a:97:c7:ea:e6:
b7:8b:5b:c1:a2:21:2e:e0:ff:8c:81:1d:86:a5:92:
01:2c:86:ab:11:f7:1a:ef:03:bf:4d:90:09:2b:1c:
89:2d:11:55:55:f0:e0:c2:43:70:df:df:45:c4:a5:
c1:6a:7f:88:29:62:fe:9f:db:ce:35:ab:8e:f6:cb:
ea:e1:d9:9f:3b:3b:40:39:23:58:d3:64:40:a0:a5:
22:99:e1:e4:b7:2b:2b:db:77:91:e0:04:e1:ee:ec:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:69:EA:AC:38:1A:F5:9C:8C:D0:82:6E:BD:24:3A:62:AE:DB:D4:FD
X509v3 Authority Key Identifier:
keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ac:33:b0:fc:be:2f:49:0f:d9:ab:70:d2:f7:00:9d:3d:10:
86:e7:f6:50:5e:a8:3a:11:da:b6:67:34:b2:7a:a6:14:c7:48:
b3:c2:ba:4b:06:bd:18:5e:88:6d:9b:3e:f3:75:88:8f:a0:74:
4e:f2:e7:82:a8:d9:82:fa:3b:e3:9a:f1:90:43:cd:f4:b2:6a:
80:59:93:d7:da:59:b4:53:7c:07:aa:d0:35:0b:67:c5:d7:e5:
fd:66:d2:a8:9a:2d:4b:85:e8:99:9a:f4:6f:e2:b7:fe:06:20:
f7:f2:46:a5:8f:aa:4d:03:54:d3:e1:a6:d2:52:5a:84:41:ba:
7b:28:4f:21:38:12:56:2f:f7:a9:0a:e5:3b:54:1f:7a:c7:61:
8c:63:cd:11:1b:ff:c3:05:7b:9c:80:1e:92:c9:a0:be:1e:7e:
17:85:8a:f5:42:ef:a7:c2:f5:63:ac:cf:bd:85:9d:37:5e:4f:
d7:8a:d9:ae:ff:0f:db:23:45:cf:37:51:eb:d4:fd:9f:a2:dc:
71:6f:a0:51:58:e9:11:61:96:c5:61:cb:97:e5:c3:1f:29:fc:
75:cb:0b:1d:93:48:5e:ab:ee:74:d7:23:8f:79:7b:a9:a4:c4:
fe:2b:37:f8:ea:6a:0d:b7:fa:df:97:b0:d6:36:90:0b:75:9c:
38:f6:84:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:02:56 2025 by rpki-client