Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
File: QXc-Xx1p3qDAHzE5eWLn10tD17o.mft (raw, json)
Hash identifier: q4snWqEouU3Xy8hbF6B2qp1PTRAoFk6HTvJEOEDzQE4=
Subject key identifier: B1:1C:E2:3E:58:AE:89:19:10:37:62:84:89:88:23:2A:86:D3:66:80
Authority key identifier: 41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
Certificate issuer: /CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Certificate serial: 01974742FA785D1ABDD5A7F8EBAF4B6C5D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
Manifest number: 1509
Signing time: Fri 06 Jun 2025 22:01:01 +0000
Manifest this update: Fri 06 Jun 2025 22:01:01 +0000
Manifest next update: Sat 07 Jun 2025 22:01:01 +0000
Files and hashes: 1: NQOLfJVX_vVpBv1f8Gp913T9yy0.roa (hash: stjbo1zNgVaXdBLW+9MS1MMZaoclllk3ul73C9N6vmM=)
2: QXc-Xx1p3qDAHzE5eWLn10tD17o.crl (hash: BLmvR8fjnRbebLahoKP5+HMCHb7iPIqaFwNQnTpQmzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:fa:78:5d:1a:bd:d5:a7:f8:eb:af:4b:6c:5d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Validity
Not Before: Jun 6 22:01:01 2025 GMT
Not After : Jun 7 22:01:01 2025 GMT
Subject: CN=b11ce23e58ae8919103762848988232a86d36680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:fb:8b:f2:ec:1a:a0:61:81:91:f7:4a:f7:
2d:dd:96:d5:4b:9a:21:d1:eb:d6:96:65:cc:83:49:
4a:64:b2:15:c9:aa:a0:82:8e:cc:09:56:9d:1e:03:
8c:80:32:de:4b:74:bf:56:b7:49:a4:97:19:df:4f:
87:03:d6:0b:5f:4e:c0:9a:94:03:c6:b0:be:c8:a0:
75:81:02:97:25:bf:ad:17:53:64:7a:e4:d2:92:6f:
2c:15:d1:e4:57:41:7e:34:98:f4:4f:22:97:03:3f:
93:dc:ef:73:8d:b0:be:3e:0b:04:75:2f:e2:38:a4:
96:b8:11:2d:4b:84:04:63:ef:65:19:bc:e9:8a:3d:
37:ce:07:36:06:2a:0d:da:ed:7b:b7:1d:cc:48:27:
b4:38:e4:f6:90:05:59:17:6e:08:1d:0a:95:10:d6:
b4:2b:55:3d:8b:4f:01:40:aa:5e:1e:ce:18:48:8c:
2e:e9:5e:f3:60:1b:14:36:6d:e2:1d:4f:2a:0f:89:
85:94:a8:b0:3a:68:32:23:38:0d:dc:cb:32:45:8c:
7c:42:36:03:ac:df:c8:ce:a7:48:11:d1:48:ac:05:
fc:18:3b:e0:fb:c5:5b:4c:8e:55:94:69:77:02:49:
56:9b:54:7e:61:de:21:34:e8:4f:45:c8:a3:b7:20:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1C:E2:3E:58:AE:89:19:10:37:62:84:89:88:23:2A:86:D3:66:80
X509v3 Authority Key Identifier:
keyid:41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5e:b7:1c:2a:aa:bc:b3:89:e0:c9:36:9f:1c:6c:1a:09:58:
cd:e4:e6:a5:a3:36:88:e8:72:b8:e0:bc:f3:e3:1a:89:e2:73:
68:4d:e9:0d:a2:1a:da:40:b8:41:8a:94:95:4c:c0:17:38:bc:
8f:6e:0c:8d:18:05:b1:fd:35:46:68:d5:01:b8:06:99:72:d7:
55:8d:96:66:37:54:5e:56:56:9a:e3:bf:fd:f8:7a:b8:33:96:
34:a2:15:ab:aa:93:34:ad:c7:b6:9e:25:68:5e:71:24:88:fa:
b4:bc:f9:e8:42:4d:c2:08:4b:67:4b:a2:c4:98:46:d4:6f:6d:
28:12:e4:90:9c:6a:f9:04:fd:f7:16:57:ee:30:f5:a1:cc:ee:
9a:55:ad:dc:90:42:2b:54:7f:43:27:5d:57:49:aa:f0:8f:aa:
75:05:e2:3e:67:1a:5a:3f:50:a1:c3:8b:ef:4e:6c:7a:ad:9f:
4c:9f:ae:69:21:bc:73:08:a6:0c:8f:8d:ae:62:16:75:ea:ae:
26:7e:29:97:68:3b:bc:19:ed:d5:be:f4:c9:27:fe:6a:3a:2a:
cc:bf:86:89:23:c5:1e:be:b1:07:df:7c:7b:1d:26:b9:f7:d0:
3d:f6:92:31:60:27:54:ca:4a:d9:a6:da:0b:c1:2d:cd:90:a7:
0e:72:db:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:24 2025 by rpki-client