
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
File: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft (raw, json)
Hash identifier: SMeENCCq0UdPGjkqxilvIoGIic/JikKBJ2lDLRJV3r4=
Subject key identifier: 57:C6:DF:B5:AF:40:15:7F:4E:01:EE:A3:B0:11:CA:C4:D4:DC:69:B2
Authority key identifier: 41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
Certificate issuer: /CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
Certificate serial: 019747795F6CCFFC7632B0437BD19445D1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
Manifest number: 041B
Signing time: Fri 06 Jun 2025 23:00:25 +0000
Manifest this update: Fri 06 Jun 2025 23:00:25 +0000
Manifest next update: Sat 07 Jun 2025 23:00:25 +0000
Files and hashes: 1: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl (hash: v/FVJiQJYyXdLandAJckxHXGvQNBTA5OwLFkh6bysyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:5f:6c:cf:fc:76:32:b0:43:7b:d1:94:45:d1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
Validity
Not Before: Jun 6 23:00:25 2025 GMT
Not After : Jun 7 23:00:25 2025 GMT
Subject: CN=57c6dfb5af40157f4e01eea3b011cac4d4dc69b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:e4:c7:36:81:8c:f0:7c:54:60:7c:46:1e:
bd:04:60:71:e9:ff:3d:fd:f2:7a:e1:77:d7:c2:9c:
de:31:51:fe:e0:1c:9a:49:0a:a1:1b:b1:91:aa:f9:
42:af:97:eb:dd:22:53:94:33:06:e8:7c:7c:9b:cb:
a1:1b:6c:58:9f:80:50:a1:f8:5e:c8:e8:01:6f:ed:
6f:67:8d:37:d6:36:31:9a:c6:9a:31:73:32:c8:e9:
41:18:7a:91:5a:90:9f:ad:8d:c3:ed:c0:04:23:11:
57:8f:ca:71:2a:c0:fa:5c:ba:a9:f8:0b:1e:83:f2:
d3:c6:06:6f:54:0b:ca:66:41:45:75:b1:94:b4:c1:
9a:49:ea:33:19:09:67:54:93:b8:23:cb:35:cc:22:
72:fe:86:91:10:6d:e6:5a:b7:58:af:76:5e:b7:cf:
9c:f5:13:11:9d:3a:bf:7b:2a:6f:5a:1d:c1:7a:eb:
eb:48:7f:75:cd:1e:b5:2c:33:ee:65:b4:41:04:cd:
1f:a2:8b:c7:e1:cd:3f:c5:34:e1:5a:51:78:bd:52:
d9:c0:4b:76:60:ed:38:59:e9:17:15:76:67:da:da:
41:6e:e1:93:14:2d:5b:da:13:2b:79:1e:90:f6:01:
0a:e3:5c:42:64:a5:ce:b0:a9:3e:11:1f:6b:69:86:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C6:DF:B5:AF:40:15:7F:4E:01:EE:A3:B0:11:CA:C4:D4:DC:69:B2
X509v3 Authority Key Identifier:
keyid:41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f3:dd:3e:41:52:e7:92:53:d2:ef:35:13:5d:10:5c:63:4e:
41:a2:0b:ce:e7:e2:54:2b:b1:01:e1:72:5a:ce:0f:c3:75:a7:
f2:70:21:46:38:1e:6e:f3:c1:59:e7:64:df:0d:71:7f:23:d8:
e0:c8:cb:9a:8a:67:09:97:64:6b:cc:d0:21:7b:e0:02:d3:34:
9d:fa:9d:28:76:fb:3d:5e:40:3d:ad:76:bd:c9:ee:13:7f:f0:
6c:02:6f:90:07:09:6a:78:c1:60:79:98:52:f6:0f:20:dc:b3:
97:b9:b4:70:4e:78:1c:a0:07:4c:e8:34:7f:8b:6e:97:19:7e:
49:b4:0a:1d:4f:80:9b:8c:70:12:dd:bf:86:35:90:2a:66:50:
cb:05:ad:a2:ae:24:c6:b7:8c:d8:ee:54:34:db:f9:82:b1:3a:
a2:97:5e:c2:93:d5:0b:59:e9:9a:b0:ad:ec:d0:12:6b:b7:d4:
47:35:5b:a5:35:1b:b2:a0:45:fe:e0:27:ca:26:e9:7d:7b:8e:
5d:97:6c:11:bc:f9:0e:d9:8b:16:64:c5:6f:ba:f1:ed:76:cd:
b5:62:e7:d7:06:39:16:7a:4b:1e:fc:04:84:a7:f6:b2:7d:56:
1b:40:04:c6:f2:8d:7a:41:1c:e6:53:d9:bc:8a:9b:28:f1:c3:
a3:7a:de:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:56 2025 by rpki-client