Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: 4pOocjOc1ypJNzOKY1YwTTJrU+hlMrE8fbFifMRNUS4=
Subject key identifier: 2D:38:94:DE:72:3D:FA:E7:60:D8:7D:29:B5:3F:78:4E:47:6C:36:FE
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 019749D592FD24950A1775191A0DB468EF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 10:00:22 +0000
Manifest this update: Sat 07 Jun 2025 10:00:22 +0000
Manifest next update: Sun 08 Jun 2025 10:00:22 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: JjvIeiwMwuFUJ76SIe/IMHf7XpRcFGFt7ZKV+bLNW1M=)
2: aIPJ4lm4ZyremkDprutiWRNEZ90.roa (hash: Kp0nR22T2kDefAUNT5QJL0kBQwplOU/6USLq0OiGG/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:92:fd:24:95:0a:17:75:19:1a:0d:b4:68:ef:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Jun 7 10:00:22 2025 GMT
Not After : Jun 8 10:00:22 2025 GMT
Subject: CN=2d3894de723dfae760d87d29b53f784e476c36fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:63:0b:79:31:03:d8:9d:77:b4:7c:d5:fd:
91:d5:b8:c5:35:30:1b:8c:ff:1c:25:8f:6c:35:e7:
8c:ea:2f:ab:55:1e:6b:25:31:c6:51:2e:8b:b3:2a:
1b:ba:e7:d3:24:e8:01:0b:ba:63:34:97:00:34:04:
36:f6:e0:9a:37:a9:12:60:80:e9:67:db:e3:e6:b9:
b8:1c:de:2a:b0:ad:24:ea:88:fa:56:61:7d:be:e1:
fd:b7:ce:aa:1f:73:f3:9c:c6:2a:5e:47:c5:1c:c1:
51:b1:bb:e4:2e:a7:9b:bd:6e:a0:16:31:b2:80:c4:
7a:71:9b:e2:f5:66:9e:73:09:2c:ec:7d:bc:85:61:
39:60:df:ae:a7:45:74:3b:0f:44:7f:2e:b4:78:46:
37:cd:68:e6:02:8d:6b:21:b6:ee:d2:e8:24:67:5a:
f9:75:b8:90:bf:96:dc:56:9e:92:84:c9:c8:18:32:
a8:af:64:d3:fc:2e:df:c3:c2:ce:1c:92:cc:56:09:
56:d6:7a:68:36:4f:98:51:eb:92:91:02:19:dc:30:
81:9d:f0:a7:bc:6f:22:f5:73:18:55:5f:4a:e9:fd:
49:2c:6b:ca:8d:80:6d:c2:c3:aa:c0:d5:e0:a7:cd:
08:96:31:a3:28:80:2b:ae:8c:bc:b3:e9:24:29:46:
a9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:38:94:DE:72:3D:FA:E7:60:D8:7D:29:B5:3F:78:4E:47:6C:36:FE
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:86:e7:93:61:28:cd:00:bd:aa:ae:6c:1c:75:b2:f1:3d:74:
ac:0e:95:08:32:b1:6a:02:9d:77:52:a6:8e:31:50:bd:79:d4:
10:a7:77:9c:93:73:e4:77:24:09:79:9e:12:e6:b4:d1:37:76:
d8:e9:88:74:48:ed:1c:4e:bb:67:bd:b7:a4:87:f7:e7:0a:20:
81:ab:4e:fb:9f:55:2a:7b:9a:29:01:a2:13:7f:15:fc:a8:ac:
f4:71:0f:a9:1c:b8:24:a6:d0:38:f8:d1:e1:ee:f6:9e:ac:a3:
0b:46:ef:fd:27:63:e6:e7:13:d9:01:f0:f8:60:bb:7a:ff:6d:
64:e5:f0:ed:16:3a:5d:dd:44:af:fb:40:c4:a1:d3:e3:a6:56:
1f:94:e6:e3:a1:cb:78:d2:66:96:a6:0b:86:ec:85:3e:01:f6:
8b:dc:97:07:e4:a1:f7:92:34:4c:fd:06:be:5b:6d:37:36:6a:
fe:8a:5e:6e:ee:b5:7e:5e:29:7f:53:df:ea:6f:09:ad:0c:4b:
d3:e4:10:b3:ee:b6:bc:2b:08:87:22:15:0d:f4:e8:f6:a0:73:
06:ee:c8:34:47:55:08:69:96:db:0f:c7:fa:d7:ee:b5:91:fe:
a0:9d:22:6e:05:72:48:c9:6f:f8:88:89:95:31:f0:bc:7a:f3:
99:f8:29:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:30 2025 by rpki-client