Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File: QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier: qPrOvtDmMRSOi0Lz61Ed9Z1um7pjoEHsmxnPFw+p8T4=
Subject key identifier: B3:41:56:DF:2C:B4:E8:C4:BB:DF:02:EF:96:0C:CC:7E:D6:13:E1:0F
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer: /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial: 01976D3E61DC3D3DBA76F8297064814C0E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number: 099C
Signing time: Sat 14 Jun 2025 07:01:34 +0000
Manifest this update: Sat 14 Jun 2025 07:01:34 +0000
Manifest next update: Sun 15 Jun 2025 07:01:34 +0000
Files and hashes: 1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: 4O6bEvSKc2CDW7vDgI7nzKum+IiEIMlRblRkK0wg99w=)
2: e4JEVh_6cDhCUoHK96y7TvtTEf0.roa (hash: xuBEIWySS4QJ6iOhH7VSUCCJB986bi0LqcmYz8ug3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:61:dc:3d:3d:ba:76:f8:29:70:64:81:4c:0e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Validity
Not Before: Jun 14 07:01:34 2025 GMT
Not After : Jun 15 07:01:34 2025 GMT
Subject: CN=b34156df2cb4e8c4bbdf02ef960ccc7ed613e10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:6a:9b:9c:e9:78:25:4d:06:fb:53:c2:b9:
af:eb:0d:d1:ae:9e:95:03:81:b2:e0:a4:30:ae:41:
ae:25:b2:27:63:4b:fd:51:52:30:71:64:47:f6:22:
da:b1:35:02:27:b3:48:ea:6f:50:78:2b:79:00:6c:
a0:51:63:a1:72:af:c0:a0:42:47:35:b3:b1:f3:2b:
3a:53:cc:6c:bc:1a:c7:1c:25:d6:35:ac:4d:3e:60:
7e:0e:40:86:b1:1d:7a:b9:4f:6f:b8:5a:d2:aa:46:
1a:56:04:7e:0a:6d:70:1b:7d:1a:4a:53:61:30:ff:
0a:81:a4:2f:cd:69:77:9f:88:9a:d9:ac:d5:09:8f:
89:38:f6:7a:d1:93:93:2e:1e:6c:56:c3:b6:d2:09:
e0:3e:8f:fe:11:f7:5f:ff:c6:f8:4f:1d:fc:da:0b:
75:04:04:e0:dd:73:63:f8:70:bf:82:3f:c6:0b:13:
f2:e6:7c:f7:6c:20:ae:20:e7:f0:5a:3c:77:36:10:
b6:3b:2c:a6:e8:93:58:0b:90:95:3a:08:41:5f:ea:
39:78:4e:91:ad:30:3f:ac:91:de:7b:bc:1c:30:57:
20:28:70:f7:f3:1c:cf:da:d6:6d:24:b7:04:26:e7:
b9:d0:22:c7:07:2f:f7:99:a9:72:9c:7f:15:96:59:
d1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:41:56:DF:2C:B4:E8:C4:BB:DF:02:EF:96:0C:CC:7E:D6:13:E1:0F
X509v3 Authority Key Identifier:
keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2e:ef:3e:a9:d2:41:54:9a:b3:c5:60:c6:21:7d:e9:97:8a:
7d:1c:94:72:4f:dc:e1:29:f2:34:a2:51:0e:a8:de:c5:90:4e:
02:71:97:65:6d:33:62:97:9c:98:04:cd:b9:7c:ca:36:5a:2b:
fe:17:f8:a6:80:7e:0b:0e:7f:96:0f:e6:08:27:be:26:ec:3a:
0d:51:ec:d8:d0:db:27:6d:07:71:a1:ce:67:91:41:9c:7d:20:
04:86:20:d4:05:a5:8e:65:f2:19:e7:09:09:10:54:e2:b4:70:
d6:17:64:a1:a8:ba:1c:5d:09:1e:0f:a6:5c:54:c2:7d:24:a6:
a8:9d:8d:7b:05:c7:8f:4e:44:70:ba:ab:32:52:be:12:09:05:
77:1f:f8:9f:bf:7c:1e:2d:a9:cb:f2:59:b2:86:eb:89:5e:94:
9d:8e:0b:62:59:79:97:2a:e5:84:27:c0:46:4b:7a:5d:ba:ef:
cc:70:a0:e8:ac:85:92:4e:54:1c:47:62:3b:33:0c:9f:83:0f:
f3:8a:7a:0a:be:e0:2d:a4:ad:d4:80:d7:7d:3c:31:a7:30:1b:
5e:5e:75:b7:ea:77:c5:f7:a0:8f:0a:4c:f3:25:06:d7:f4:3e:
18:50:76:8e:00:f5:65:37:7d:a0:2e:81:0f:5c:b5:4f:b0:5f:
c3:2d:5d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:09:38 2025 by rpki-client