Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: aMmN+7bDd76qdZgYV1huuCec6tNBgyQySMUM5Is4u7Y=
Subject key identifier: 2A:13:22:FF:AB:56:48:4B:44:60:7A:62:03:45:D4:90:16:3D:C7:1E
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 01975E019573403EA51229C456AD0759B97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 1262
Signing time: Wed 11 Jun 2025 08:00:51 +0000
Manifest this update: Wed 11 Jun 2025 08:00:51 +0000
Manifest next update: Thu 12 Jun 2025 08:00:51 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: OAGWw2uWidE3CK8aaTGj6Mv3LnA6IVlxK7GcXaWJ+nw=)
2: oQC9sPpcZyPZwpQuNTqhI-X9Nlw.roa (hash: vCUpk6P/EjQs3Tpm0wCNehcuCpZGGg9z5aDmzRFQJKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:01:95:73:40:3e:a5:12:29:c4:56:ad:07:59:b9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Jun 11 08:00:51 2025 GMT
Not After : Jun 12 08:00:51 2025 GMT
Subject: CN=2a1322ffab56484b44607a620345d490163dc71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:20:39:b4:f0:0f:9c:de:4c:ad:bb:2c:60:c4:
93:6c:61:ce:0a:4b:f0:42:24:21:6a:c5:40:5e:a0:
f3:4e:36:0d:c8:2d:b7:4c:4a:fa:75:1c:50:6f:29:
9b:43:11:e5:6f:c5:21:f1:df:f3:4b:c8:a6:86:8b:
5d:60:7e:a9:6b:28:d0:eb:c7:5b:51:21:d1:4f:73:
38:19:22:3c:ef:ea:13:99:6b:da:c2:a5:26:20:4e:
e6:05:ec:51:1a:33:2f:28:29:3f:c2:88:18:8f:e9:
b4:8d:36:cb:2e:d3:bb:16:3f:04:89:e5:8d:90:be:
e3:2a:f9:77:07:77:24:a7:e2:d2:24:69:90:f1:b9:
5b:19:fe:7d:a8:97:aa:4d:60:11:a9:d0:69:15:f7:
0e:a0:6d:f5:eb:b2:48:d3:50:95:da:ab:ad:5a:79:
81:09:32:7c:8a:3f:01:63:ec:d5:f7:24:c1:4e:dc:
55:65:6e:36:27:74:13:29:53:de:9c:88:c9:7b:72:
4a:47:8a:23:3b:f4:35:29:ed:60:4b:a5:a9:d1:8f:
f7:4e:5d:55:28:07:e4:e1:d7:14:50:cb:53:50:f3:
16:9b:e3:69:e6:54:c2:aa:fc:8b:9b:e9:8a:bf:cb:
4a:cd:92:52:ea:7f:bf:df:2e:fe:a9:d6:64:81:b4:
44:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:13:22:FF:AB:56:48:4B:44:60:7A:62:03:45:D4:90:16:3D:C7:1E
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9d:3d:a8:b2:24:87:94:2e:d2:14:1f:7c:fe:c7:ac:54:bc:
c1:cd:4c:ab:6f:8c:76:71:ec:93:f5:91:a9:75:11:24:f8:1f:
d6:35:ac:79:59:78:b4:77:82:f6:05:62:13:15:bf:b9:7a:e8:
6b:12:7f:e5:4b:d3:20:96:d6:c0:29:c9:fe:4b:12:2b:d3:2e:
b6:53:e7:85:d3:8e:7a:67:7a:f5:e8:fe:e9:ac:f9:ad:4a:05:
a8:c2:7e:8e:58:14:9a:a7:f8:fb:65:1d:fb:a0:bb:fb:b7:16:
4d:21:b0:8c:28:e0:3b:8d:cc:a9:ca:bf:9a:12:95:9f:2a:13:
7d:e4:d4:a2:38:88:aa:a2:3b:89:c0:c6:6a:34:91:e8:b6:76:
55:d5:10:fd:14:73:58:1a:37:eb:75:3f:86:91:d4:14:e3:a3:
9d:2b:3a:68:71:62:be:f9:3e:c8:dc:e3:96:f1:1d:f6:7c:d0:
32:1f:2c:a7:fc:b4:b0:e7:5c:85:ef:d7:a3:7f:2d:18:1b:cd:
47:8d:41:da:ae:7c:50:4f:c0:d8:38:1d:3d:d6:39:6d:ad:a4:
aa:02:83:57:61:91:89:81:d1:cd:3e:88:87:da:b0:08:9a:e4:
98:8f:05:19:84:d9:f4:93:dc:2a:32:b3:7c:fe:1f:bf:09:3a:
50:0f:69:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:14:46 2025 by rpki-client