Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
File: qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft (raw, json)
Hash identifier: OlgScqahs/HxGIIoS0jTnZ1bMPZ9YHoP5HRnu5Hf+5Q=
Subject key identifier: 56:17:FD:CB:9F:02:31:A6:6F:33:85:27:5A:39:39:D0:EC:87:7E:4C
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial: 019752A2BB2E8C2E6D06B98C8FC40F8FF314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
Manifest number: 066A
Signing time: Mon 09 Jun 2025 03:01:25 +0000
Manifest this update: Mon 09 Jun 2025 03:01:25 +0000
Manifest next update: Tue 10 Jun 2025 03:01:25 +0000
Files and hashes: 1: 8CcKJiF0r4FrDqB9K7MCSFJJvag.roa (hash: oH5satYFVvZ45Q+JWd3Hf90Jew1mrnQWjIvCBL11FrU=)
2: qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl (hash: cxLnn7SAvs2ZYpxrpw2iJdY3yxFW/0ElizAg9SkFWPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:bb:2e:8c:2e:6d:06:b9:8c:8f:c4:0f:8f:f3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Validity
Not Before: Jun 9 03:01:25 2025 GMT
Not After : Jun 10 03:01:25 2025 GMT
Subject: CN=5617fdcb9f0231a66f3385275a3939d0ec877e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:09:8e:d6:7a:30:41:50:88:8e:23:84:e4:b8:
c3:6f:cd:3b:1e:22:67:d4:c2:0a:62:05:77:6f:56:
27:fb:c5:78:76:c4:11:09:b8:19:54:20:56:ce:53:
87:48:7c:c4:39:3f:be:f1:0d:d7:3c:d9:85:c4:a1:
03:a5:f5:81:01:7e:b7:0e:ae:3f:3f:c8:4e:ff:84:
cc:42:dd:c5:be:18:b3:fd:1b:47:32:6e:86:6c:d2:
d7:fa:bd:5f:00:3c:b1:34:40:a9:95:4c:c4:5d:4c:
0b:25:a5:d2:87:a5:f5:40:2e:f4:e6:0c:4f:1f:d4:
1a:bd:a3:15:5e:b1:8c:a8:cb:11:fa:c9:8c:c8:ed:
e1:e0:53:e9:60:f4:e7:80:e0:74:b6:11:ef:68:4a:
28:70:70:6c:be:43:85:7e:a9:84:dc:79:07:ee:4b:
91:07:32:db:a4:dc:50:b5:90:8a:12:d3:5e:45:20:
79:db:a2:ac:dc:d4:72:d1:1d:a9:26:95:81:a0:2d:
d2:34:2a:bc:22:37:36:92:7d:19:2e:5b:65:3e:bb:
04:22:fc:c8:85:5d:b8:ba:5c:28:0f:3d:06:06:7c:
d0:60:d7:b5:5a:4f:33:ae:29:90:07:67:19:ac:0d:
b1:ee:af:e7:8f:68:5a:5f:6e:f0:fc:77:27:92:44:
b1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:17:FD:CB:9F:02:31:A6:6F:33:85:27:5A:39:39:D0:EC:87:7E:4C
X509v3 Authority Key Identifier:
keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5f:ca:0a:2d:f3:7c:2f:d2:4d:36:ef:9c:8f:e3:3c:87:21:
df:5f:e8:75:b4:f7:a7:ef:c6:b6:7a:bc:8b:b8:b1:e1:d9:22:
e4:fd:0f:41:c5:20:68:58:86:fd:cc:97:3d:22:4b:b3:83:53:
4a:90:c5:97:47:60:26:a2:b6:4f:84:39:42:a0:e9:8f:e3:77:
9e:06:dc:5a:a9:5a:2b:65:a5:1e:84:5b:60:52:20:5e:e0:b4:
86:f2:db:28:23:de:7b:ce:55:71:b6:7f:23:36:20:57:42:4c:
d2:11:d2:9b:c0:fe:17:27:46:e6:fd:2c:1b:72:06:57:c7:09:
4a:ee:c8:7b:ab:db:d3:a9:c1:d0:dc:bc:7a:dd:dd:54:ed:13:
1f:45:87:84:28:6e:03:d8:c3:53:12:43:c0:08:b3:0f:2a:90:
72:18:e0:7c:73:c9:83:85:03:45:ca:24:01:9f:6a:0d:63:fc:
3d:e3:32:9a:31:d0:07:d3:ca:6a:cb:83:81:fd:db:82:d4:47:
77:0f:c9:4d:ae:2c:13:11:81:88:19:8f:d5:c0:c6:e5:96:74:
e1:8a:40:75:12:12:1a:b1:3a:17:41:57:37:4a:0a:92:b1:b5:
a1:f9:da:99:32:24:e4:6d:90:93:d0:57:b9:1d:40:cb:61:30:
76:d7:4b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:02:08 2025 by rpki-client