Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
File: QdD5FclU2DtKG_GEz7wTjEftpR4.mft (raw, json)
Hash identifier: IG1QPP6TW6sgJtdJ4wpq0dA2hVLNWovZQ26o34txTFs=
Subject key identifier: B1:14:8D:DC:ED:2A:00:8E:39:C2:82:D6:E0:BF:5A:A2:18:60:A6:A2
Authority key identifier: 41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
Certificate issuer: /CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Certificate serial: 01974C325431764906B819C420EAEB18E8B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
Manifest number: 1210
Signing time: Sat 07 Jun 2025 21:00:56 +0000
Manifest this update: Sat 07 Jun 2025 21:00:56 +0000
Manifest next update: Sun 08 Jun 2025 21:00:56 +0000
Files and hashes: 1: QdD5FclU2DtKG_GEz7wTjEftpR4.crl (hash: Gqu+b01RtpoyUHBTS0JK2MrlndzcMbDtpxvi4rCq5vc=)
2: f6uKeUIzMA-uVptKc1ueYhFBFxM.roa (hash: yRxjbOfn/yIPjsEZSwuKIczmA3RcTEjtjojH+74JQXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:54:31:76:49:06:b8:19:c4:20:ea:eb:18:e8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Validity
Not Before: Jun 7 21:00:56 2025 GMT
Not After : Jun 8 21:00:56 2025 GMT
Subject: CN=b1148ddced2a008e39c282d6e0bf5aa21860a6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9e:c4:55:b0:c9:26:11:fb:27:79:90:fa:ba:
b1:95:60:e5:36:04:fc:80:f9:8d:c9:d7:75:40:7a:
7c:49:31:b0:d1:7e:f1:53:55:85:b1:13:48:7d:c3:
36:f2:36:93:f0:ec:0e:c0:52:45:43:cd:a1:19:7d:
9b:52:51:6d:ee:4c:93:8f:28:bb:73:fd:25:2e:3c:
c0:cc:54:1c:42:f2:96:4e:26:7d:16:55:dd:1b:bc:
6b:2e:f2:69:09:57:9d:48:34:ee:07:72:1b:f2:98:
ea:a9:ae:06:cd:17:9f:4a:41:5f:14:82:e0:de:3f:
3f:5f:53:8f:a4:d9:55:72:91:a0:b4:e6:a3:79:a8:
1f:be:00:d0:63:84:2f:bb:48:23:c5:5a:f1:47:bc:
7a:95:fd:54:f8:18:2d:2c:48:a8:50:ca:20:79:32:
99:5e:12:83:9f:e1:be:70:4e:46:dc:55:c0:b9:72:
99:27:df:c0:9c:83:86:d6:d3:c9:0a:4c:06:e8:82:
41:57:1e:eb:42:e1:1d:ca:d3:06:39:68:bf:f1:b4:
a5:35:74:95:2b:8e:84:d0:50:d9:7f:d0:e9:84:ad:
8b:5d:2b:09:6c:80:73:cd:41:9e:cd:63:ea:a0:a9:
8f:81:6e:a6:d7:ec:72:57:08:71:a2:ec:31:8b:71:
75:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:14:8D:DC:ED:2A:00:8E:39:C2:82:D6:E0:BF:5A:A2:18:60:A6:A2
X509v3 Authority Key Identifier:
keyid:41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6c:92:19:db:8e:62:2f:d0:fd:5a:b4:dd:a7:88:76:a1:0c:
85:63:a5:ca:61:a0:d3:06:f3:d5:25:ad:79:b8:c8:45:51:e5:
b3:13:d5:2a:f6:c7:61:03:e6:dc:10:4e:83:8f:6e:85:6c:84:
30:14:59:00:50:7b:d7:f2:3b:74:f2:64:4f:f8:ca:7b:96:d0:
08:c4:8d:1c:82:48:d9:b6:d7:e2:e3:a5:54:9d:2a:2d:84:df:
00:d6:66:e3:db:b7:36:3e:67:fe:8a:57:bf:27:0c:cd:67:8f:
d1:72:a2:4e:a2:b6:86:f3:e0:7d:7e:52:da:01:d8:1a:e5:d6:
32:ca:b2:59:07:ab:64:9c:06:7c:a1:ba:f5:55:2d:5d:ba:15:
5d:42:72:d1:8c:e9:ab:13:b0:67:14:c0:4c:4a:c3:bf:5c:ed:
31:a5:7b:b0:69:68:40:d8:c6:9a:84:45:57:61:6c:75:6b:84:
10:97:fe:41:c7:43:3d:6b:d9:10:14:9d:2b:97:21:cb:07:68:
84:cb:65:e0:97:58:85:c5:cf:68:ba:cc:83:15:3d:ed:c3:c5:
a5:a0:c5:eb:b2:29:f6:7e:4c:4b:f0:a0:6e:8e:fa:83:ef:01:
76:f9:0c:10:a4:28:35:fd:b2:b9:36:e3:82:61:17:c1:cd:36:
e8:c1:19:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:33:14 2025 by rpki-client