Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
File: QX7IKFpWXfUpSjs7YD_fkZTm760.mft (raw, json)
Hash identifier: YI4124UKZKTyxYdlLmCPbGeVnqAhwVCnZZYJ36aVXkg=
Subject key identifier: 98:61:B1:55:46:E3:F5:E2:91:B5:9B:21:62:3F:FD:B6:12:9D:55:EF
Authority key identifier: 41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
Certificate issuer: /CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Certificate serial: 01976AE15E80FEF3A7E1A9160F39E6AA3566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
Manifest number: 0372
Signing time: Fri 13 Jun 2025 20:00:44 +0000
Manifest this update: Fri 13 Jun 2025 20:00:44 +0000
Manifest next update: Sat 14 Jun 2025 20:00:44 +0000
Files and hashes: 1: QX7IKFpWXfUpSjs7YD_fkZTm760.crl (hash: GtM46oXnxCb+yiILHlZUNMX/toDMF4CohD4TODDOib8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:e1:5e:80:fe:f3:a7:e1:a9:16:0f:39:e6:aa:35:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Validity
Not Before: Jun 13 20:00:44 2025 GMT
Not After : Jun 14 20:00:44 2025 GMT
Subject: CN=9861b15546e3f5e291b59b21623ffdb6129d55ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:e2:c2:99:14:9f:e7:9a:98:d2:98:21:b6:
cc:1e:7b:8b:ff:f3:90:27:4c:e6:b1:b1:2d:1f:8b:
3b:f7:d1:11:56:b7:b8:63:7f:6a:03:72:61:1b:0b:
02:65:01:fe:52:78:34:06:a2:da:7c:43:30:b8:e3:
e2:01:8d:de:ff:f2:af:bf:45:2e:c3:11:d3:05:d2:
d9:59:fb:10:3c:02:7f:28:02:02:d4:7c:84:12:eb:
15:2b:60:37:a8:bb:84:15:e1:d2:8a:96:11:f9:f9:
88:34:c6:de:3b:ac:13:2d:06:45:49:a8:2c:12:2d:
38:af:c3:23:e4:8b:3e:bd:19:72:6b:b1:2e:84:e9:
6e:67:24:38:a6:77:da:99:9b:1d:d0:eb:9c:4d:94:
0b:9d:59:04:76:4c:b5:6a:be:50:36:ba:a3:96:f5:
42:57:f3:30:c6:65:fc:98:e6:ec:c8:a8:8e:e4:47:
18:27:f3:1a:a7:76:70:8e:3b:b5:fb:3e:c2:ab:6d:
4c:13:cd:f3:5b:0e:a9:e5:cf:10:9f:21:1d:72:d4:
fb:7a:ba:46:da:ef:ce:3b:63:08:a3:08:72:f6:85:
81:42:95:47:2b:89:71:a6:e6:07:b9:5e:c3:69:1b:
05:61:e1:6a:cc:8a:1f:8b:85:33:b7:37:5e:b7:4f:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:61:B1:55:46:E3:F5:E2:91:B5:9B:21:62:3F:FD:B6:12:9D:55:EF
X509v3 Authority Key Identifier:
keyid:41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3c:d8:9b:9d:9f:0a:e2:ad:7e:09:73:41:13:28:33:0d:f9:
bf:ea:07:94:bf:8f:cb:2f:55:1d:dd:2a:bd:88:af:3d:55:f3:
1b:35:91:55:b0:14:80:63:35:cf:8a:1a:9b:87:5c:69:66:8c:
81:a6:7f:07:5f:d2:cd:da:25:ec:69:90:c0:33:8c:22:df:5d:
fc:b1:e8:a4:0d:b5:63:37:20:ac:a0:c4:6b:fc:12:78:0f:08:
10:98:dc:a6:ed:6d:f6:99:e3:b3:fe:12:09:60:7e:13:3c:65:
19:f0:c7:a8:3a:26:77:6e:d4:64:47:fb:b5:ef:91:8f:76:1a:
ff:da:70:5a:cd:9f:fc:99:0e:22:33:94:c3:04:e1:5f:b1:03:
0e:c6:45:bf:69:40:55:62:df:b3:fd:10:31:17:6a:60:fe:69:
68:af:81:aa:51:7b:dd:4c:58:53:fa:48:a3:e6:09:fa:c0:82:
93:0e:65:0a:5b:a4:17:4b:0f:71:00:65:86:ca:e2:51:d7:de:
4e:eb:40:41:f5:b1:c9:3b:c0:ce:0f:59:a7:11:08:98:61:0a:
ad:a2:2c:d3:98:87:e9:77:91:b4:66:67:77:81:8a:98:4b:c4:
d7:74:b3:06:af:98:9c:37:17:0d:fa:18:8a:a8:58:f4:a2:ee:
92:01:e5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:13:06 2025 by rpki-client