Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
File: QZHlgmJw9J6umZ1InoXezMhHc4s.mft (raw, json)
Hash identifier: vqrBkLlnaXzrmRXOxdEpD9yZtgDl/sz0sMmMAU3KRlk=
Subject key identifier: 49:43:99:EC:92:17:28:BA:FC:99:75:F7:BE:1D:DD:98:F1:DA:5F:C2
Authority key identifier: 41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
Certificate issuer: /CN=4191e5826270f49eae999d489e85deccc847738b
Certificate serial: 01976E19AECBFFF3F0D52B35A618AF4E5E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
Manifest number: 10AB
Signing time: Sat 14 Jun 2025 11:01:06 +0000
Manifest this update: Sat 14 Jun 2025 11:01:06 +0000
Manifest next update: Sun 15 Jun 2025 11:01:06 +0000
Files and hashes: 1: 5a04uRMLuLPqwpXzKrFBWV5ma_s.roa (hash: pqBMscBUXLlLFYQmwhp2Q/lEjdKvHVjvXqUWPX0LeGM=)
2: QZHlgmJw9J6umZ1InoXezMhHc4s.crl (hash: dPdKd0Ds+Zta3YtJkCODxFuTw0daJvvlgJvCZzDiADs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:ae:cb:ff:f3:f0:d5:2b:35:a6:18:af:4e:5e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4191e5826270f49eae999d489e85deccc847738b
Validity
Not Before: Jun 14 11:01:06 2025 GMT
Not After : Jun 15 11:01:06 2025 GMT
Subject: CN=494399ec921728bafc9975f7be1ddd98f1da5fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:3f:87:02:46:b8:c7:d0:1b:7e:a3:33:f8:
48:5d:f2:05:73:ad:e1:25:62:8e:e5:0e:20:dd:42:
0e:85:85:71:e9:74:4e:5c:92:84:a9:5f:72:7a:f0:
0b:dd:e5:e8:89:a7:ab:c1:12:e0:e3:2d:41:2e:5a:
d3:2b:6a:9b:9b:7e:de:25:96:a4:85:19:7f:49:93:
b7:d0:fc:ed:2d:f6:b0:32:cc:fe:9b:83:f3:f3:16:
76:4a:83:54:c1:b4:20:05:35:d1:46:1c:21:03:ed:
9e:37:e3:21:18:f9:94:f0:2e:f5:3b:3a:34:33:4d:
e7:a4:bf:f2:09:f4:05:ff:d2:35:6c:7a:a8:2e:cf:
29:3f:10:6a:d7:c9:60:29:58:f6:6e:5b:c9:31:b3:
88:63:c5:f0:2a:25:aa:d8:60:c0:7f:ee:36:ec:af:
ca:14:06:db:00:91:00:6b:25:c1:74:75:e7:bf:4d:
74:af:b9:ff:7c:78:8b:a4:15:07:13:c5:c5:25:db:
68:67:c8:27:0d:7b:3e:eb:8d:85:d1:d4:63:d7:3f:
e5:2e:ca:75:dd:ac:9d:63:7a:61:1e:b6:c3:00:91:
a7:ed:84:83:02:f2:ae:2b:85:db:8c:14:6d:c5:a1:
4f:0e:6a:8a:2f:55:d4:2a:ba:04:d9:7c:54:df:b1:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:43:99:EC:92:17:28:BA:FC:99:75:F7:BE:1D:DD:98:F1:DA:5F:C2
X509v3 Authority Key Identifier:
keyid:41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0e:f2:d1:e9:c4:a9:41:40:e1:ce:e9:10:26:08:95:0b:d0:
b8:b8:e2:b7:1c:a3:98:ab:56:6c:39:37:15:9d:1e:06:e3:b1:
c1:38:09:d5:cc:ba:49:d1:0f:f1:3a:0c:6a:52:eb:a1:10:b5:
08:5e:00:74:88:44:a6:df:a8:2e:f1:e6:da:8f:5f:c9:5e:b8:
c6:04:70:a7:fd:44:e7:a6:ed:cf:2e:3f:b5:60:51:a8:74:0c:
f3:84:53:3e:cb:bf:e3:6d:44:71:43:49:47:23:92:b4:a9:9d:
08:2b:2f:07:2e:f8:44:9f:54:d8:ca:48:87:f7:bf:05:8f:29:
f6:30:d0:1d:75:d4:f4:c9:c1:c2:7a:85:ce:2c:ba:bb:2a:22:
83:00:d0:c9:0c:c3:22:e4:8f:7d:e8:fb:e4:cc:b6:9e:b2:00:
8a:b4:bc:fb:32:98:29:13:0f:8d:23:74:58:e8:ff:5d:f3:3d:
99:81:06:fe:6d:46:be:85:92:ec:d6:de:a7:c7:c7:4f:6a:e5:
1d:10:00:a6:78:10:ec:6c:59:a1:8f:e3:3a:e1:00:f5:a8:e1:
34:31:19:c9:ec:37:88:e7:05:8e:f8:59:85:58:89:a1:f7:dd:
88:0d:6c:18:00:8f:58:7d:08:7a:b6:39:14:82:fd:1d:96:94:
f1:72:e2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:27:48 2025 by rpki-client