Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: zDCD4YZUdEUvn8FaPaARZJnLYR/LSWrJDUccr5LYeyo=
Subject key identifier: 4F:BC:F2:FD:3D:5D:E3:87:B2:47:64:4E:10:21:97:88:F5:88:5D:C0
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 01974EC57BA301D4001F5DF6E1CE5C76D343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 0967
Signing time: Sun 08 Jun 2025 09:00:54 +0000
Manifest this update: Sun 08 Jun 2025 09:00:54 +0000
Manifest next update: Mon 09 Jun 2025 09:00:54 +0000
Files and hashes: 1: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: KicPxZzKuhAo5Qd71n4bYibc44OxM15Lu45X0k8Ywcs=)
2: vdgwFbYVt8R1VSJ8o61nh0Nw_GA.roa (hash: 76jfpsJ1QF75Cjby0A7bmnFhoDcXagSAAfe9ZF5jiZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:7b:a3:01:d4:00:1f:5d:f6:e1:ce:5c:76:d3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: Jun 8 09:00:54 2025 GMT
Not After : Jun 9 09:00:54 2025 GMT
Subject: CN=4fbcf2fd3d5de387b247644e10219788f5885dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:7c:ee:1e:b3:f5:ee:4f:dc:4d:55:33:7e:
00:77:57:b9:85:34:a2:77:7e:98:27:d7:75:35:8b:
d4:64:ae:aa:ef:9c:88:0a:49:0f:af:f0:b5:fd:16:
40:7c:68:32:c0:03:c1:7a:31:3a:53:58:96:04:c1:
21:8f:e2:d2:d1:98:47:93:be:93:eb:22:ba:17:52:
33:3a:57:22:3f:90:2a:cb:c4:5e:1b:93:24:30:80:
c7:cd:fd:c1:e9:6f:22:4a:e4:c1:15:b1:70:33:74:
d9:5e:87:82:11:2b:d0:ff:37:99:1a:25:4b:93:5f:
80:0f:de:08:0c:5c:4a:b8:c5:97:2f:8c:2d:23:22:
e4:2a:9a:4c:62:b9:c8:13:75:0b:f9:a1:a2:e2:3c:
68:da:e6:64:23:c8:b5:f3:68:ce:f5:97:75:56:ff:
c1:f4:a7:0c:33:f8:28:4b:7a:7c:fb:e7:49:f7:38:
db:b7:9b:f9:dd:76:fc:8c:d0:f3:6c:ab:79:fa:fc:
d7:26:27:39:f7:2b:7d:b3:4e:b7:44:19:a7:96:0c:
6d:e9:57:b2:c2:bd:a1:da:ed:0b:08:51:f7:fd:aa:
e8:bb:0c:56:40:81:01:49:3d:96:db:ca:5c:cf:0e:
d2:ea:9b:89:3f:b8:84:2f:9b:7c:c9:7e:41:34:38:
fc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BC:F2:FD:3D:5D:E3:87:B2:47:64:4E:10:21:97:88:F5:88:5D:C0
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f0:91:60:03:ec:c0:21:a0:77:30:d8:4b:80:c4:5c:05:03:
80:1e:88:38:6a:b3:89:5e:8a:b6:a9:36:b1:75:16:b7:e6:09:
7c:b9:95:fb:33:ab:8c:8f:34:59:85:4f:0b:59:e4:c2:e3:09:
3f:e5:0b:a1:bf:a7:f9:31:4f:e6:86:8a:75:d7:bb:41:b0:30:
0e:92:d6:37:7a:41:00:95:25:e0:3a:e4:49:85:08:a7:42:cd:
a6:44:86:3b:0b:ea:5b:bd:28:b9:a7:e4:e5:49:30:4c:55:9f:
cf:8f:5f:c2:c6:6a:bb:67:e8:7f:c2:5f:b7:31:ca:fa:0c:99:
af:2d:24:db:48:2c:d5:0b:d0:92:8e:96:29:3b:5d:9c:64:b7:
a6:b1:d5:13:80:12:f3:96:7b:f6:67:a9:eb:9b:c8:dc:14:82:
3d:b9:d2:81:87:ab:63:2f:d2:b2:26:62:66:72:c8:2b:5b:cc:
91:f2:d4:51:62:e5:98:be:74:86:88:5a:51:c9:69:15:89:35:
4e:98:70:4f:71:48:e2:58:99:af:f8:f5:34:cd:85:ee:73:90:
61:95:03:7a:09:ed:11:38:db:67:d4:70:84:be:49:e9:80:14:
a3:3e:0c:13:f3:c9:1b:ee:c4:3b:1d:8c:8a:2f:28:41:13:d0:
1a:15:c2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:55:30 2025 by rpki-client