Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
File: QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft (raw, json)
Hash identifier: mgMcZZkeNutAqVCTlGr6fhtK5jPdc7cDNQRTjwTaypw=
Subject key identifier: 1A:7A:A3:1B:58:C6:5D:44:A7:4A:B0:F6:A4:D1:A0:9C:C7:6F:1B:ED
Authority key identifier: 41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
Certificate issuer: /CN=412add9455bc132b730e727051f0b64ba45fcda4
Certificate serial: 0197CA5E0D15A94DEB276D797EBB704A5C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
Manifest number: 02B0
Signing time: Wed 02 Jul 2025 09:00:50 +0000
Manifest this update: Wed 02 Jul 2025 09:00:50 +0000
Manifest next update: Thu 03 Jul 2025 09:00:50 +0000
Files and hashes: 1: DuKvCk6weo_jRBIvDVj8Yjk0KTM.roa (hash: V+Me01+23/zbVQCoEw1CvcMCR84Y0P8j12b7Z3im4Sk=)
2: QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl (hash: whw/53Lqa/c5377ecwp8hAQyuyfeh60pVOJpSYs78pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:0d:15:a9:4d:eb:27:6d:79:7e:bb:70:4a:5c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412add9455bc132b730e727051f0b64ba45fcda4
Validity
Not Before: Jul 2 09:00:50 2025 GMT
Not After : Jul 3 09:00:50 2025 GMT
Subject: CN=1a7aa31b58c65d44a74ab0f6a4d1a09cc76f1bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f6:c4:2c:55:0b:56:b9:f6:b2:bc:9d:cb:b0:
92:15:5e:65:55:ff:41:18:a6:cd:ad:49:c8:f6:d8:
d9:19:7a:6d:17:e2:a8:e0:f3:44:ec:fa:ab:4e:67:
31:e5:cd:9a:f3:36:42:a3:df:f1:33:dd:b7:7a:84:
33:be:0d:56:4f:e1:89:61:b6:90:ce:53:90:20:0d:
0a:42:6e:f8:76:e4:2f:16:f2:b0:c3:f7:f5:ac:1a:
b5:43:d3:c9:c8:c8:80:36:d5:a4:d0:ab:e3:a1:7e:
1c:9a:fd:9f:09:50:2c:75:d8:e3:ff:83:d5:92:8a:
1f:64:7d:8e:bc:1b:0b:c3:b4:39:37:13:ac:10:3f:
ac:f0:17:f3:5f:4c:9a:01:28:ad:08:6e:5c:6b:15:
3c:ea:f8:f1:ff:b0:c2:ca:25:36:b9:7c:aa:a9:af:
83:05:9c:2d:c9:2e:36:d6:9c:77:e3:6a:ed:cc:c0:
4e:6e:5e:a5:cd:d7:26:61:92:1b:10:c5:70:9b:84:
b9:fc:c1:45:6e:8d:80:0b:83:8b:a6:88:ba:6c:96:
35:c3:e3:8b:c8:d9:9c:81:17:f8:a4:e0:17:51:c2:
f2:a9:43:87:44:1a:ad:69:9c:28:cc:6c:da:46:06:
0d:90:07:06:ae:ad:32:ca:9f:16:9e:2c:28:13:02:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:A3:1B:58:C6:5D:44:A7:4A:B0:F6:A4:D1:A0:9C:C7:6F:1B:ED
X509v3 Authority Key Identifier:
keyid:41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b8:76:60:e9:bd:cb:f9:56:6f:46:2d:8a:13:b6:ea:8c:f6:
b2:19:74:d3:ee:66:3d:60:e1:f2:58:0b:76:3f:42:12:bc:3b:
f7:73:0d:06:8f:ab:d1:50:45:bc:d7:af:26:74:17:3d:f6:78:
13:99:0c:89:df:c2:18:d8:57:0e:14:d2:98:8b:35:0c:55:c9:
13:12:21:f0:20:81:4f:44:d1:b7:85:d6:f3:86:d9:1e:26:c6:
d7:d7:d5:ec:c6:6f:31:94:34:80:bd:ad:1b:5a:73:51:45:b8:
b4:e7:ab:8a:b3:9b:0a:b1:95:12:02:92:07:f1:f5:94:20:bd:
02:79:83:43:2e:e2:47:f3:2d:b3:db:9a:bf:b8:62:e1:4d:0c:
8e:61:5d:19:e6:fb:7c:8c:6a:be:50:44:81:fa:84:90:7c:02:
0e:40:75:05:41:3e:81:43:c6:cd:ca:15:f7:36:c9:0a:30:6b:
7d:0c:19:d1:48:26:fc:d5:93:9d:fb:ba:59:ad:c5:6c:31:88:
3c:a6:95:7b:4b:15:1a:df:b7:2d:58:93:34:f5:8e:3e:48:40:
4c:0c:97:cd:fd:d6:da:f1:33:9c:71:4d:3d:bf:e0:ff:26:7f:
0e:a9:20:47:d1:ec:d4:cb:e3:7f:79:47:27:d1:a0:d8:61:11:
1a:8a:0e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:05:44 2025 by rpki-client