Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
File: Qfg9IXNOBVXHoTxIVhygt3V6ago.mft (raw, json)
Hash identifier: gsSCQVj6QMqys1LII23jBWId6yZN4sT0CxwGb3IWREc=
Subject key identifier: 82:72:6F:17:5B:82:A0:01:B2:72:8D:63:07:B2:A3:AE:A0:C7:C7:1F
Authority key identifier: 41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
Certificate issuer: /CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Certificate serial: 019746D476A56AA3B3CE45562E63DEBA9C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 20:00:17 +0000
Manifest this update: Fri 06 Jun 2025 20:00:17 +0000
Manifest next update: Sat 07 Jun 2025 20:00:17 +0000
Files and hashes: 1: Qfg9IXNOBVXHoTxIVhygt3V6ago.crl (hash: GhJPLbt78QsA+3PerJzYYAMpLnJDoqWrX4ySuGJqBQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:76:a5:6a:a3:b3:ce:45:56:2e:63:de:ba:9c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Validity
Not Before: Jun 6 20:00:17 2025 GMT
Not After : Jun 7 20:00:17 2025 GMT
Subject: CN=82726f175b82a001b2728d6307b2a3aea0c7c71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:19:ca:a5:b7:a2:93:ff:e3:cc:ec:b3:7e:62:
63:b3:2b:07:0e:16:cc:8f:81:cb:fb:bf:49:ca:45:
d5:7d:f2:aa:c3:39:68:83:b7:6b:e2:37:44:a1:30:
3d:6d:26:97:ab:3d:e6:91:fe:ab:11:43:8e:ea:1b:
44:22:14:b1:14:bf:0e:1b:d3:d1:39:3b:45:09:48:
7f:f4:63:cc:45:b4:41:7a:d8:a5:b0:06:88:69:6a:
ec:fc:9e:a2:26:d5:c8:78:a8:6d:65:34:af:a7:9c:
30:9d:29:71:48:d2:e3:56:62:f0:fa:fe:e2:2d:1d:
ae:02:61:6e:fc:ef:5f:7b:3b:02:c5:45:63:6f:81:
75:7c:f9:ae:e9:40:36:cb:ab:64:3b:29:16:07:77:
d8:80:19:39:ff:ce:71:27:4a:78:da:5a:22:70:af:
6c:3f:cd:b9:ff:07:38:97:cf:56:b3:d4:76:f9:88:
a9:02:d9:ee:ee:1a:c2:db:48:01:52:33:9c:20:3d:
86:fd:b6:26:61:6e:c4:47:98:78:1e:52:d4:36:f2:
5e:8a:dd:4a:da:c0:5e:5c:2a:36:0b:d0:66:a8:3e:
2b:65:2b:b9:c0:91:b7:4f:46:da:3c:16:d9:4d:20:
9b:09:55:37:fd:ed:20:6b:09:5a:5b:3f:3b:5e:00:
ec:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:72:6F:17:5B:82:A0:01:B2:72:8D:63:07:B2:A3:AE:A0:C7:C7:1F
X509v3 Authority Key Identifier:
keyid:41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a4:f8:71:45:d6:8c:d3:51:7d:53:51:7b:51:cb:87:12:43:
8f:e0:43:55:5e:10:07:8d:39:c2:3f:72:ac:25:05:e1:bf:70:
0c:3e:90:89:0c:59:55:03:68:95:f2:9e:0a:c1:dc:1c:01:cf:
79:a1:d8:e9:4e:30:c8:30:19:95:75:02:ac:1a:c3:5f:bc:fb:
1a:c4:a7:bc:4e:07:dc:66:2a:ee:12:fe:c7:55:3f:53:09:23:
38:e4:04:82:2a:86:39:f2:e7:5d:1a:13:3a:bf:76:fa:5a:28:
27:0e:b3:67:7d:16:38:5e:6d:a9:98:e0:39:57:22:f8:b3:ae:
6e:dc:a9:4f:f9:6d:b4:1f:d5:43:5f:f9:d2:9c:92:b4:3e:31:
ec:da:e0:ca:54:d1:cb:40:a0:f8:09:d1:51:e2:3c:90:3e:f1:
a5:a6:f8:f5:16:4d:ff:f5:58:9f:cb:9e:4f:42:8c:87:36:da:
32:b0:c9:2d:01:b3:af:27:69:da:42:3a:be:2a:c7:fc:68:fe:
5a:d5:10:2c:b0:e2:9f:74:c0:40:54:83:b8:1b:59:20:af:7c:
2c:cc:a4:6e:c1:9a:41:01:b0:a8:d6:17:fc:0a:a6:e4:a3:74:
c2:ef:f1:62:6e:54:3e:6d:b8:bc:10:d0:27:14:26:89:b8:c7:
6e:c5:c3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:04 2025 by rpki-client