Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: 581BHN1HKsyLFakeZTIcv4WPB9ffP/xuyMlu4PMLLD8=
Subject key identifier: 3A:39:3A:AA:F3:D7:EA:DA:97:54:27:13:27:EC:C3:BE:BB:1D:86:7C
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 019758360925744B144F7908A23D238333CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 125F
Signing time: Tue 10 Jun 2025 05:00:25 +0000
Manifest this update: Tue 10 Jun 2025 05:00:25 +0000
Manifest next update: Wed 11 Jun 2025 05:00:25 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: I8aKX42ln+0PomvdZ2Gfj3r79NgZhFYq28sMXMoJp5c=)
2: oQC9sPpcZyPZwpQuNTqhI-X9Nlw.roa (hash: vCUpk6P/EjQs3Tpm0wCNehcuCpZGGg9z5aDmzRFQJKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:36:09:25:74:4b:14:4f:79:08:a2:3d:23:83:33:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Jun 10 05:00:25 2025 GMT
Not After : Jun 11 05:00:25 2025 GMT
Subject: CN=3a393aaaf3d7eada9754271327ecc3bebb1d867c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:47:7e:d2:2f:66:3e:c2:e7:3f:cc:96:47:b4:
a6:c2:e6:64:83:47:71:16:7f:48:36:65:14:75:eb:
dd:6d:8e:4b:fd:d4:7d:82:f7:11:fe:50:de:3f:da:
2c:09:68:7c:c4:26:4d:ba:10:99:05:3b:98:fa:3c:
c5:56:15:cb:d8:ec:e3:af:db:54:fc:b6:59:8d:a0:
bf:17:53:9f:41:07:cf:f0:46:a4:df:32:7f:67:a1:
a6:2d:df:82:f2:ae:f6:ff:21:6e:3d:25:5a:1a:a2:
82:e6:a8:0d:89:83:68:78:8c:4c:09:22:a3:02:4e:
ac:82:44:33:0b:70:ad:7a:5d:f2:f2:a2:9d:08:61:
f3:74:20:8f:4d:7d:40:44:bc:37:0e:bc:51:98:35:
b0:24:d5:e5:61:35:72:bd:f6:a3:18:13:3e:59:40:
55:56:eb:9d:02:cd:24:8a:e9:74:f2:c8:a1:08:66:
62:e7:5e:23:a8:d5:54:45:2e:26:5c:64:1f:a1:38:
4c:a7:21:bc:19:1e:90:6e:7e:fa:5e:21:79:6a:15:
85:be:54:2f:22:24:86:9f:3d:9e:8a:a0:4e:24:15:
b3:cb:3d:7e:c1:f2:c2:66:45:c2:14:41:d2:a4:a6:
6a:77:55:33:9d:49:f7:41:75:27:99:2e:35:cd:f5:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:39:3A:AA:F3:D7:EA:DA:97:54:27:13:27:EC:C3:BE:BB:1D:86:7C
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9b:ca:6d:c3:2d:cc:ee:7b:27:10:95:94:68:5c:5f:83:ca:
b1:98:50:79:2f:41:7c:ef:ae:e9:8b:82:06:16:4e:49:30:9d:
99:38:c8:f5:2a:1b:36:1f:d2:90:17:ea:5b:03:b0:e2:41:5e:
07:cf:eb:fd:b3:89:9f:6e:79:8d:77:f9:93:a8:b6:9f:9c:4c:
92:fd:a2:5f:30:33:7a:32:23:68:18:bf:4c:c5:49:f0:e2:96:
e6:80:d1:81:53:42:30:f2:e1:43:ae:18:e6:28:ff:ed:f6:31:
12:33:1d:5f:23:5f:92:76:86:8d:18:00:0b:8b:8f:f3:a3:29:
53:2e:25:c8:de:6d:d9:fa:88:65:a3:94:e8:ff:7e:e3:47:53:
73:e2:6c:d1:b8:b7:a1:ab:a5:2b:85:88:1e:1d:71:ca:eb:99:
3f:82:f6:c1:aa:5c:6a:d0:69:67:17:81:60:92:13:f0:d9:5a:
7c:73:39:80:48:69:f4:ec:d5:be:15:d1:b9:55:05:67:cd:86:
84:ed:5f:b1:b6:fa:e2:5c:bc:22:0f:14:84:ca:83:09:45:39:
f7:98:0a:1e:40:71:fa:57:7c:40:ed:ce:d8:41:4a:06:14:c1:
de:43:87:34:38:27:b2:b4:b0:15:e8:63:62:ed:43:f4:e5:54:
f3:1d:91:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:22:15 2025 by rpki-client