Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
File: QZHlgmJw9J6umZ1InoXezMhHc4s.mft (raw, json)
Hash identifier: NqXdQ/2dm41eEc13cvCnITGG7Ujdf6BdjDt4WKPYexM=
Subject key identifier: EE:78:13:D9:F2:6F:65:C4:32:7D:50:D0:77:66:3D:77:D6:5C:18:AD
Authority key identifier: 41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
Certificate issuer: /CN=4191e5826270f49eae999d489e85deccc847738b
Certificate serial: 0197684DFCCAA3BB8DF68CCC9BB2B54D5779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
Manifest number: 10A8
Signing time: Fri 13 Jun 2025 08:00:30 +0000
Manifest this update: Fri 13 Jun 2025 08:00:30 +0000
Manifest next update: Sat 14 Jun 2025 08:00:30 +0000
Files and hashes: 1: 5a04uRMLuLPqwpXzKrFBWV5ma_s.roa (hash: pqBMscBUXLlLFYQmwhp2Q/lEjdKvHVjvXqUWPX0LeGM=)
2: QZHlgmJw9J6umZ1InoXezMhHc4s.crl (hash: 5PyY/M2a3IZz/1RkrgIvqQuF22TyS9r1s0r9csO//0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:fc:ca:a3:bb:8d:f6:8c:cc:9b:b2:b5:4d:57:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4191e5826270f49eae999d489e85deccc847738b
Validity
Not Before: Jun 13 08:00:30 2025 GMT
Not After : Jun 14 08:00:30 2025 GMT
Subject: CN=ee7813d9f26f65c4327d50d077663d77d65c18ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:60:51:5a:ac:71:dd:ab:bd:02:06:ab:df:
8c:4d:ea:97:e7:e8:5a:3b:78:59:56:fc:d0:3a:c8:
0d:7e:db:ed:50:3b:4e:89:26:86:3e:42:04:5b:5a:
5d:b8:ed:c0:b1:54:d7:f7:fa:79:23:3a:6d:fb:01:
08:3d:69:9e:41:6d:39:5a:f3:72:e5:b6:c3:d5:f3:
d4:fe:0d:e0:4d:39:e4:1e:04:b6:6a:a9:26:87:c0:
d8:a7:2f:d5:f7:b8:f3:ca:51:e6:d8:d8:77:dc:54:
17:23:fc:3a:df:3d:3b:4b:eb:67:7a:af:3c:25:cb:
31:9f:38:d4:9b:6c:00:34:79:a2:69:c5:db:5c:6f:
91:44:6d:ee:c8:0b:09:4a:8c:6c:36:17:9c:c8:c3:
b8:02:12:ac:2d:61:1d:17:24:92:6f:a8:d5:11:de:
b9:4b:8f:0b:c6:95:f7:82:94:78:b6:77:e9:ca:69:
66:d5:b9:4d:e9:d2:bb:f0:da:32:80:7c:c9:9b:ef:
09:d3:ab:ab:4b:d6:9d:a9:06:93:48:b1:97:93:18:
23:1b:3b:90:53:f2:bd:1a:81:ff:29:19:7f:76:8e:
dd:c4:bc:59:75:c2:1e:14:cd:f7:12:e4:a0:db:c5:
2a:fa:ff:b7:32:a2:12:7d:23:d3:0d:7e:61:05:1c:
f2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:78:13:D9:F2:6F:65:C4:32:7D:50:D0:77:66:3D:77:D6:5C:18:AD
X509v3 Authority Key Identifier:
keyid:41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:cf:bd:aa:5b:c4:2e:d1:7b:55:da:b2:6e:72:e9:f6:fe:76:
a9:16:2b:74:48:cd:6b:18:d2:ae:81:6a:2c:f7:15:4b:34:3e:
da:3e:d9:68:8c:e3:c3:f6:36:f1:49:be:b6:13:91:25:b8:21:
8e:9a:7f:e1:ee:a1:2d:8f:8b:91:64:60:90:1a:0a:33:bf:09:
d9:8b:b8:f6:f1:72:e5:3b:ae:96:fa:dc:ce:4a:6b:c3:28:a5:
5a:df:80:b2:48:e1:b1:57:20:9e:79:1b:5f:46:40:e6:fc:a2:
e3:2b:54:52:0c:03:68:e1:1c:e8:97:b1:91:c7:0a:d2:58:d3:
b2:b4:8c:3d:e8:ff:e5:75:f1:6c:6f:86:03:34:7b:a8:e8:cd:
51:4c:6b:5b:25:6d:7b:db:01:73:e1:a8:9a:86:43:ff:cc:d9:
0b:15:6e:36:d5:47:29:a9:f6:bd:f8:d3:c7:5c:c7:25:9b:f9:
2d:62:9a:37:8c:03:a0:2c:5d:f0:c0:ab:82:b4:46:89:f4:54:
2c:a7:28:32:c7:a8:dc:97:4f:10:85:77:65:98:37:17:5f:bb:
2b:ef:6d:a1:7c:71:e4:e5:76:68:e3:55:95:2c:9e:53:55:fc:
ed:45:e5:6f:ab:33:22:3b:45:59:4e:a4:1f:7c:f9:81:08:99:
57:04:fc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:05:57 2025 by rpki-client