Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
File: qsIj-xlCEV5IqXVCByktAKCC7N8.mft (raw, json)
Hash identifier: Eihd0zKg5SusQEPyVW/Qq3hAkUdRcgSnXMLr6atat/M=
Subject key identifier: 11:24:77:9A:60:23:68:4B:A9:47:8B:87:4C:DE:39:C1:38:22:D4:48
Authority key identifier: AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
Certificate issuer: /CN=aac223fb1942115e48a9754207292d00a082ecdf
Certificate serial: 01974CD6DB54B8DB1769D6F73D88AD9DF5DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
Manifest number: 07CF
Signing time: Sun 08 Jun 2025 00:00:38 +0000
Manifest this update: Sun 08 Jun 2025 00:00:38 +0000
Manifest next update: Mon 09 Jun 2025 00:00:38 +0000
Files and hashes: 1: f7H4NvJn5XG9ZEVLvo3rzyryem0.roa (hash: FIvnUTIH/WyzVRn7SNngTErOpdYKzvrkMjSyoAbXEio=)
2: qsIj-xlCEV5IqXVCByktAKCC7N8.crl (hash: G+ppsbFh9I4/1HjGpaskOl0XdVCTHFOGqR+A82ip5sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:db:54:b8:db:17:69:d6:f7:3d:88:ad:9d:f5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac223fb1942115e48a9754207292d00a082ecdf
Validity
Not Before: Jun 8 00:00:38 2025 GMT
Not After : Jun 9 00:00:38 2025 GMT
Subject: CN=1124779a6023684ba9478b874cde39c13822d448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:00:80:b5:b9:fd:ce:d1:1b:a2:74:5e:45:9b:
b0:f5:d8:a8:78:b4:8d:b4:f3:a3:37:e5:c0:3d:59:
d8:6c:6c:7b:2e:55:03:5d:f4:ef:b4:4f:24:14:26:
62:b3:37:1d:dc:73:5b:f3:10:05:f6:32:f1:bf:15:
60:4f:88:32:db:05:3d:fd:d2:53:32:74:4e:4a:c2:
17:da:48:88:46:97:38:cc:85:42:ab:a6:cf:e2:57:
2d:46:ee:82:a4:c6:26:dc:2b:29:2d:99:a7:19:6c:
bd:bd:ee:ef:79:14:2c:32:6b:19:3c:bb:f6:e4:32:
96:77:31:04:a5:92:17:85:d3:cb:fa:23:7c:68:da:
51:a3:67:71:95:a6:3c:07:84:fb:09:07:ec:05:53:
ca:05:63:5e:d8:b7:c3:ad:32:2c:5a:97:36:a9:63:
bb:be:7b:90:6c:cc:d5:bf:a4:0e:ee:cd:1f:3b:e1:
d3:6a:6f:6e:eb:35:e6:ca:34:1f:79:26:db:82:30:
45:72:bb:57:19:71:0b:87:8c:f2:a3:76:38:ec:52:
8d:48:ef:47:de:67:05:d5:c0:77:b7:c7:88:d6:3e:
08:00:3a:34:18:21:40:6c:2d:77:be:14:7b:55:28:
a6:00:08:07:7c:d4:f7:dd:0b:68:5f:47:f2:ad:9a:
d1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:24:77:9A:60:23:68:4B:A9:47:8B:87:4C:DE:39:C1:38:22:D4:48
X509v3 Authority Key Identifier:
keyid:AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:27:30:2e:02:f7:08:4c:cb:1e:c8:74:31:29:79:86:fc:b5:
e3:cc:99:07:5a:20:e4:be:bb:4d:ea:c0:2c:ff:cb:da:d4:2a:
cc:20:4f:e9:9a:e6:b7:13:94:dc:45:bd:a5:15:0f:9b:2a:77:
b0:36:b2:39:5e:58:f6:4b:a3:18:06:52:56:39:ed:b8:09:89:
98:90:1d:62:aa:41:fc:d2:41:42:9a:e1:e0:3e:47:e0:c5:0a:
c4:c8:63:18:96:6c:db:a1:2f:1c:d7:b6:17:6a:9c:7c:5b:94:
e3:79:ba:94:ef:8c:72:93:a5:cb:0f:cb:05:5d:b8:2b:4e:77:
c4:6d:4a:4e:1d:84:78:bd:07:b6:95:cc:26:f5:a4:b1:6e:18:
84:d0:a1:51:33:85:a8:b4:8a:7a:17:05:ff:f9:0f:d4:45:49:
42:e9:00:6d:06:3c:4d:50:35:0e:f1:94:25:dd:8c:a4:8d:ed:
eb:38:79:a9:35:20:8f:92:39:76:10:00:e0:54:0d:0e:df:25:
d4:c5:75:21:17:48:e0:4a:11:ae:f3:35:01:af:e8:e1:ed:ac:
a5:81:d8:3c:7c:c4:d4:e1:56:c9:da:50:2c:47:4c:ef:52:d7:
c6:23:10:93:c2:91:2f:b7:da:32:6a:40:c6:17:56:8d:55:90:
f8:bf:49:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:44:33 2025 by rpki-client