Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
File: QdoQ1mXBDhy27GwhUOPmAkBFudo.mft (raw, json)
Hash identifier: GQncbGS27nYIjmbmah0Fc3nC0Nj7gN5c2GvMmUMD5N0=
Subject key identifier: B4:F5:A5:E2:68:FA:F5:8B:6B:95:E2:4D:38:61:81:09:B9:B0:27:37
Authority key identifier: 41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
Certificate issuer: /CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Certificate serial: 01976102393DEE61ABFF9E217A8B6EC6DB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
Manifest number: 0EBC
Signing time: Wed 11 Jun 2025 22:00:25 +0000
Manifest this update: Wed 11 Jun 2025 22:00:25 +0000
Manifest next update: Thu 12 Jun 2025 22:00:25 +0000
Files and hashes: 1: QdoQ1mXBDhy27GwhUOPmAkBFudo.crl (hash: aNtFmQWrHg0rhMijIRukFZdYJFOoalxBCT25jHB1fAI=)
2: j3zO5OguCGwVjS4_cTve-Ba-iMs.roa (hash: djJiO0HYB1/EJ/pv3egGmNDFEP34QgqPKHUoq0TwlWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:02:39:3d:ee:61:ab:ff:9e:21:7a:8b:6e:c6:db:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Validity
Not Before: Jun 11 22:00:25 2025 GMT
Not After : Jun 12 22:00:25 2025 GMT
Subject: CN=b4f5a5e268faf58b6b95e24d38618109b9b02737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:8d:0c:cb:20:27:2b:8f:0f:96:53:4e:fa:
d1:94:a1:e8:89:af:5c:b0:7d:55:89:e0:fd:76:2c:
b7:5a:3a:eb:c4:74:34:09:a4:12:85:d7:89:ed:fb:
59:72:44:51:1c:93:a9:53:f7:9b:70:d3:67:63:56:
a2:f7:72:15:51:70:4e:e2:52:6b:32:13:55:36:ba:
91:97:20:2b:11:c0:0b:14:ce:a6:a2:74:42:63:23:
e9:3a:3d:a3:13:41:86:d8:b7:f9:79:05:20:f2:cc:
5f:12:31:b5:34:fe:fc:ac:2f:58:00:34:48:0e:a1:
88:71:4d:9d:a2:8f:69:af:32:39:4f:1e:4f:85:b0:
a3:4d:22:5f:d3:29:92:d3:19:f2:55:8f:bd:11:99:
13:c4:17:1c:73:b9:20:3f:12:b2:90:7b:da:ae:44:
1f:54:c2:02:8d:3d:48:de:a7:23:ad:1e:8a:3b:54:
df:df:61:15:db:49:2a:a1:f7:c3:12:93:1f:e8:0a:
57:19:91:9b:98:a0:76:7f:42:1b:16:f7:ef:77:18:
04:ac:8b:7a:e6:14:a2:8c:d7:f1:7a:e0:a0:3b:87:
33:f9:0c:1c:95:d0:f3:5a:86:9e:2b:21:ea:2b:f0:
ca:6f:2f:b6:03:7b:3d:01:26:ab:86:3b:7a:c0:8b:
1d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F5:A5:E2:68:FA:F5:8B:6B:95:E2:4D:38:61:81:09:B9:B0:27:37
X509v3 Authority Key Identifier:
keyid:41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b6:83:56:db:a2:00:fe:4e:33:23:f5:d5:00:e9:7d:4b:f7:
05:48:85:41:5a:0a:51:22:de:7f:7b:3f:d9:87:5b:60:c9:d5:
41:28:be:7b:39:43:dc:de:7f:0a:bd:54:d9:3f:17:2f:b1:47:
ea:bc:7e:15:b7:66:6a:0a:b8:e1:78:c7:f2:06:53:08:55:61:
9c:eb:4f:b1:6b:49:90:1c:4f:73:a8:c8:82:7b:b3:06:35:ee:
e7:c7:ec:32:73:59:bb:4f:da:99:b9:d0:7f:2b:c6:22:18:30:
8b:7c:4e:5b:cf:96:63:19:6e:66:97:71:b3:da:8b:f2:5b:7d:
ed:19:bc:a3:d1:07:1c:50:b4:ec:3c:2f:1b:96:25:bc:be:31:
62:d6:d5:56:55:59:08:7e:1c:16:70:06:68:f2:4c:cf:8f:12:
64:0b:8c:dc:6b:ba:fa:cf:9e:75:bb:f7:16:da:22:32:d9:f6:
3b:3c:6d:7c:ca:9a:b8:b6:50:13:1a:84:a1:ed:c2:6b:f3:80:
eb:bb:ff:46:f9:aa:34:a9:68:d4:da:cf:d7:86:e1:de:db:2d:
34:1f:4b:b1:32:c0:64:6a:6d:3f:1a:72:ff:7a:79:69:0d:3a:
13:fb:b8:38:30:88:c9:d8:9b:ba:60:ad:f6:b1:a4:9c:7d:8f:
26:6d:f0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:44:59 2025 by rpki-client