Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File: QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier: IrBLqdi3tSy3jqLIbPIQl7dOq3oUACs9dC/Jsil2Dw0=
Subject key identifier: 9D:F8:AB:B2:BD:88:42:6A:D2:20:A2:6E:25:C0:FE:DD:01:0B:FE:A2
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer: /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial: 019761A7FE24243E0A0E995840F48D5F185F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number: 0996
Signing time: Thu 12 Jun 2025 01:01:28 +0000
Manifest this update: Thu 12 Jun 2025 01:01:28 +0000
Manifest next update: Fri 13 Jun 2025 01:01:28 +0000
Files and hashes: 1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: d46b53dqbhHOINRmo8XqunzC9jzK5usayNv633JKkHc=)
2: e4JEVh_6cDhCUoHK96y7TvtTEf0.roa (hash: xuBEIWySS4QJ6iOhH7VSUCCJB986bi0LqcmYz8ug3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:a7:fe:24:24:3e:0a:0e:99:58:40:f4:8d:5f:18:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Validity
Not Before: Jun 12 01:01:28 2025 GMT
Not After : Jun 13 01:01:28 2025 GMT
Subject: CN=9df8abb2bd88426ad220a26e25c0fedd010bfea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:e4:97:ec:0b:ec:09:81:6c:78:e8:36:39:
87:e2:3a:0a:e0:86:fd:28:6b:a8:2f:84:96:2a:2f:
ae:d0:b5:c8:97:68:13:0d:34:ed:e7:0d:1b:f5:70:
a6:dd:a5:30:5f:77:45:1c:22:34:fb:da:57:43:99:
25:9f:80:1d:e8:f6:8f:7c:87:3f:f1:80:16:57:69:
6f:36:44:8a:7d:90:bf:24:a0:68:98:21:be:c5:2d:
e7:8f:8e:21:ce:74:8e:40:96:67:f1:1c:93:8d:b7:
ba:65:c4:a3:10:59:15:82:94:dd:a3:8a:e4:79:f8:
f1:fa:45:7e:16:fc:cc:fe:42:24:09:a2:7f:68:a3:
fc:e0:cc:49:29:87:20:87:96:8d:8c:6b:f5:c8:13:
f6:e4:63:92:fe:18:be:e0:23:f1:10:e0:d2:27:45:
5f:cd:8c:9f:b3:14:19:24:c6:be:65:df:bb:eb:5e:
fa:6f:b9:f0:fa:29:26:da:bf:ab:99:15:84:07:6b:
7c:d1:c2:6e:45:7c:a4:d6:6b:d8:24:c8:00:7a:ef:
2c:a1:fd:f4:af:69:60:93:66:16:ac:47:ba:9f:58:
17:6a:04:9f:29:f7:1f:83:cf:eb:96:24:4c:05:bd:
16:97:40:88:18:fa:67:25:62:ea:c1:26:be:dc:25:
f8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F8:AB:B2:BD:88:42:6A:D2:20:A2:6E:25:C0:FE:DD:01:0B:FE:A2
X509v3 Authority Key Identifier:
keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6e:2f:93:c7:ae:f3:83:9c:82:93:45:93:24:4d:d9:8d:d8:
55:9c:90:03:f3:2e:35:20:21:13:ae:24:01:3e:c0:99:c6:34:
94:3d:b2:cc:e8:c6:b9:6c:1c:a1:d4:42:80:7d:c2:73:03:74:
0f:94:ff:1e:58:ca:b9:7e:ae:b9:51:28:01:de:17:46:4a:38:
dc:d5:e8:f2:d6:65:01:e2:a2:b8:fe:e5:f6:b9:b5:2b:bb:3a:
28:d2:e1:2d:2f:10:4a:b5:12:59:08:34:c5:f2:a1:9c:38:55:
e0:7d:9d:85:96:e3:8f:c7:97:80:5f:d6:32:e5:7e:36:48:a4:
d9:b9:c4:bb:9c:73:1b:e3:6b:3c:af:a9:c3:8b:f6:9f:59:13:
fe:c0:71:bc:11:4d:a8:93:4b:c9:99:93:05:d6:c4:fc:ec:a1:
74:86:bf:0f:32:4c:e1:79:a8:77:d2:1e:54:36:be:45:36:d6:
e8:d1:f6:9f:e9:62:26:b6:25:11:2d:16:91:f1:36:91:3a:59:
93:55:43:31:ae:d7:4b:b4:82:72:8e:d8:f8:27:60:fe:bc:78:
58:62:7a:02:c0:4d:ff:1f:ce:7b:ef:64:2f:c5:5e:4f:68:f6:
41:e6:29:2c:5e:25:11:79:3f:db:8e:57:83:64:0f:e2:24:9f:
ee:24:3f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:46:44 2025 by rpki-client