Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
File: qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft (raw, json)
Hash identifier: xIicJ8XMG4GUzuAyP1ce0zDgI3cbrNA6rTf8dJJy/eY=
Subject key identifier: FD:65:B7:F0:C2:F0:62:E1:E7:FF:8B:75:1A:C8:BA:38:78:8A:CA:DA
Authority key identifier: A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
Certificate issuer: /CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Certificate serial: 01974C69AA0A15FE09F79B155EC4AAF8DEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
Manifest number: 150E
Signing time: Sat 07 Jun 2025 22:01:22 +0000
Manifest this update: Sat 07 Jun 2025 22:01:22 +0000
Manifest next update: Sun 08 Jun 2025 22:01:22 +0000
Files and hashes: 1: qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl (hash: fCbHfZebHscD8pAwrmcBnoFEfTfKxY65NjJqpJ4ImWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:aa:0a:15:fe:09:f7:9b:15:5e:c4:aa:f8:de:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Validity
Not Before: Jun 7 22:01:22 2025 GMT
Not After : Jun 8 22:01:22 2025 GMT
Subject: CN=fd65b7f0c2f062e1e7ff8b751ac8ba38788acada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:aa:d2:ec:64:d0:87:d7:85:90:2d:af:00:
e1:89:45:bc:8a:f2:e3:6d:a8:3f:18:db:54:63:ac:
fc:e4:af:2e:8f:6d:14:9b:ba:d1:7c:b4:a9:88:44:
a4:c3:2e:af:f9:99:a7:ea:07:a4:bb:e4:a4:83:c4:
90:ce:f3:ab:77:8f:60:7c:3c:9a:00:8e:d6:4d:81:
5e:e6:21:3e:dc:8b:d4:25:dc:49:3c:b6:ac:96:c0:
c0:4d:df:9a:8f:92:1c:a8:0a:f1:ce:ee:0d:22:72:
6e:5c:f3:a3:cd:b8:6b:51:3f:e4:ad:03:87:42:5d:
01:4d:31:e5:c4:a0:5c:de:e5:80:27:5b:53:92:62:
f4:b9:b6:6c:51:b2:90:73:69:e8:e8:99:e5:c3:99:
44:c3:1e:b7:34:16:de:eb:96:eb:3b:bb:42:d9:bb:
0f:ed:a6:25:46:fe:1f:b0:6b:d1:a8:fa:76:51:88:
e8:4b:f0:ae:e6:9d:c4:af:56:14:9d:eb:12:67:56:
6a:71:70:23:ba:68:e6:d9:e5:c5:86:4c:55:61:fe:
18:31:93:44:b4:b2:30:ed:f5:ec:4d:db:bd:56:8d:
fa:43:80:95:86:85:e0:01:58:bc:7e:89:d4:7b:22:
0d:8e:2b:12:75:8b:92:d9:49:c8:bc:a9:51:c0:28:
30:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:65:B7:F0:C2:F0:62:E1:E7:FF:8B:75:1A:C8:BA:38:78:8A:CA:DA
X509v3 Authority Key Identifier:
keyid:A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:39:21:ad:2c:39:2e:62:c8:2b:ca:1f:53:02:28:9a:7c:4d:
70:4b:94:27:71:04:3c:db:c7:bf:03:b3:02:50:2f:4d:d4:ad:
54:46:53:bc:07:bd:ae:e1:2c:1a:5b:2c:4e:a4:5e:aa:5b:2e:
14:1c:ff:48:cf:e6:1f:38:a0:92:72:67:1d:fa:01:27:b7:b1:
4e:4c:71:89:10:0d:b1:fb:56:e8:27:f6:f3:9d:b2:9d:e5:b3:
af:b8:b5:84:f7:9c:40:52:2d:b4:ae:81:68:10:4f:00:b8:75:
c8:8d:06:fe:ae:48:ca:67:18:2d:d3:69:6e:fa:f0:49:2f:c4:
7b:88:05:aa:40:b4:c8:1a:0a:b8:24:d4:d7:ed:60:41:de:d3:
ed:4f:16:1a:67:f8:68:f7:ad:a1:41:2d:0e:21:89:42:8f:74:
19:cd:e9:7d:f5:d9:d3:b1:82:a2:8f:24:1b:f9:d2:22:85:f3:
f3:cf:36:f9:1d:51:05:a4:01:44:64:d9:08:03:d9:8d:a7:5c:
ab:a1:7e:ef:35:99:b0:3f:2f:c5:20:ed:8e:34:6e:e2:8a:e6:
b0:9a:ec:85:d5:c4:8d:ad:ca:22:74:8a:b3:82:de:fb:fa:37:
9d:fc:6f:ad:66:ea:d9:30:1f:f7:74:54:86:5b:73:be:38:30:
f2:da:15:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:06:59 2025 by rpki-client