Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File: QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier: D4JEq2w7LzYHVPc4LznyqozddLcJLtYY6Is0XIQ5RsA=
Subject key identifier: 3E:F5:6C:23:98:79:37:1D:BA:CA:53:F2:0B:A7:A9:14:7B:42:82:16
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer: /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial: 019767732DEDEBF176439F407CAA997B5796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number: 0999
Signing time: Fri 13 Jun 2025 04:01:30 +0000
Manifest this update: Fri 13 Jun 2025 04:01:30 +0000
Manifest next update: Sat 14 Jun 2025 04:01:30 +0000
Files and hashes: 1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: TVJiPKkFaTuZCozvPp4aPrxg9253p415nyzQkzBZZkI=)
2: e4JEVh_6cDhCUoHK96y7TvtTEf0.roa (hash: xuBEIWySS4QJ6iOhH7VSUCCJB986bi0LqcmYz8ug3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:73:2d:ed:eb:f1:76:43:9f:40:7c:aa:99:7b:57:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Validity
Not Before: Jun 13 04:01:30 2025 GMT
Not After : Jun 14 04:01:30 2025 GMT
Subject: CN=3ef56c239879371dbaca53f20ba7a9147b428216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:6e:50:73:22:ce:d2:d6:37:fa:ed:a8:c3:
9e:59:8d:d9:af:54:d1:a6:a8:de:63:e1:90:8f:76:
03:ea:6a:cb:82:13:4c:db:4f:91:9f:73:ce:de:3a:
52:0f:65:08:8a:d3:9b:7c:01:77:15:13:f4:27:f6:
17:89:a3:8c:c0:c4:5f:61:fa:93:ad:94:1a:65:04:
39:70:34:70:f9:58:0f:9a:98:cf:6a:b8:66:86:a8:
3f:d9:98:3c:bf:d0:c5:2f:e5:db:cb:b8:f8:2c:14:
49:de:5d:31:2e:46:e5:94:5b:d2:91:4a:c0:97:eb:
fd:c1:e5:ce:b3:16:41:4f:ab:43:7b:44:13:03:30:
c1:bd:aa:b6:7c:23:45:c1:17:d1:91:52:23:bc:c2:
2b:69:6b:43:d5:4b:00:91:7b:10:95:6d:3f:4c:20:
b9:64:60:f2:ae:4d:13:db:dc:4b:d8:e0:26:55:a1:
c6:c8:09:63:da:af:6b:c5:6e:67:cc:2b:99:2e:aa:
9f:18:bf:22:86:35:e0:0d:d9:ad:82:ac:57:8d:84:
1d:6a:0c:b4:06:35:ef:97:a5:d4:f7:34:fb:d5:50:
77:ca:b7:da:20:6a:49:ef:30:b0:5d:68:a6:c2:a5:
b6:c4:dc:4f:b3:d6:ef:16:f1:42:5e:0b:22:40:a4:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F5:6C:23:98:79:37:1D:BA:CA:53:F2:0B:A7:A9:14:7B:42:82:16
X509v3 Authority Key Identifier:
keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b7:10:1d:17:cc:9a:e4:2d:ef:de:83:67:75:1d:d7:6a:e4:
96:e1:4d:bc:ef:d8:35:86:00:22:11:55:4a:3c:51:0f:c6:6f:
da:7f:d7:4f:1c:55:12:40:99:30:e3:22:ea:ee:4d:12:e5:95:
38:be:e5:b0:aa:7a:56:20:dd:ad:2a:13:37:17:97:53:01:6d:
6e:b3:27:cd:f5:34:8b:f4:2d:c4:bc:9a:5a:d7:d6:11:d7:c7:
56:e4:53:30:c7:22:cf:4e:58:bf:68:82:ae:43:7c:74:d7:d5:
f5:07:17:99:1c:db:c0:65:40:89:4a:5e:dc:99:a6:03:6b:80:
82:57:9b:ba:d3:05:85:74:f8:a6:bb:88:d8:0b:cc:5c:73:87:
6a:eb:fe:bf:df:98:42:ba:68:44:e6:df:b1:c5:3a:10:44:11:
b3:06:e8:8a:cf:4e:c5:55:b8:76:fd:73:10:7f:d7:de:ea:bb:
08:de:fa:36:25:94:ac:ee:89:13:1e:3d:d6:2e:d5:10:9a:94:
9a:b3:f4:06:a2:e2:3b:e6:be:bc:d4:86:c9:08:ca:54:98:f6:
94:fd:ec:fe:db:1a:64:f1:2e:fd:f0:c4:a3:fc:3e:8f:8d:0a:
1c:66:90:87:32:09:1a:c7:2e:77:9a:36:7f:3e:dd:47:33:f9:
0e:38:5b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:59:25 2025 by rpki-client