Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
File: qZPrBqu5jUolXPsrMjpl88T3G60.mft (raw, json)
Hash identifier: 1/ybOncITONq/GRfrRp+rGL8kTOW9S14oF19CN4EPMw=
Subject key identifier: 2B:5D:98:48:FB:2D:A5:AB:55:93:09:E7:03:94:E5:3A:11:E8:72:99
Authority key identifier: A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
Certificate issuer: /CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Certificate serial: 019749D648FDCCBE36187E9E662FF722551B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
Manifest number: 0859
Signing time: Sat 07 Jun 2025 10:01:09 +0000
Manifest this update: Sat 07 Jun 2025 10:01:09 +0000
Manifest next update: Sun 08 Jun 2025 10:01:09 +0000
Files and hashes: 1: qZPrBqu5jUolXPsrMjpl88T3G60.crl (hash: BLZq3HOavP0ArJS47ksO3dPPXlrvJ0rjRjlXGuujykk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:48:fd:cc:be:36:18:7e:9e:66:2f:f7:22:55:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Validity
Not Before: Jun 7 10:01:09 2025 GMT
Not After : Jun 8 10:01:09 2025 GMT
Subject: CN=2b5d9848fb2da5ab559309e70394e53a11e87299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:8b:5a:6d:bc:e5:f5:7a:30:81:ee:65:7c:
c0:01:f6:8c:9d:eb:bf:b5:e8:87:3c:0e:07:8c:d4:
d1:4b:9f:d3:e9:8c:90:b0:c1:39:42:17:ce:1d:b9:
1e:e0:16:16:4c:79:19:d6:e8:b3:0b:5c:f2:90:a2:
2f:29:43:48:c4:06:1c:f2:86:74:20:c3:c0:3f:66:
b9:ce:68:e2:55:3b:24:7e:d0:d0:76:d5:f9:60:15:
29:4a:d7:ec:3a:a4:12:59:42:21:e7:b9:42:d1:2e:
d4:90:0d:98:2d:99:84:ea:b7:15:9d:22:7d:9d:d4:
82:a6:bc:38:e0:e2:cc:bf:b9:71:0f:6a:95:a6:df:
d4:7e:87:f4:bb:75:1f:6d:c0:62:5e:be:f0:a9:f3:
05:43:db:1a:ad:7a:9e:69:57:f0:85:0e:cb:cb:4d:
21:af:50:50:87:46:dd:d1:7a:af:e2:11:ad:59:6f:
76:f5:1b:97:f2:a5:1e:5b:6b:d9:31:72:27:27:52:
07:07:ee:9d:c1:47:e2:b3:6f:9c:16:b9:92:f9:7d:
fe:93:86:d9:67:38:c9:87:52:8c:b5:28:f3:7f:3c:
42:9a:ab:6d:fd:00:34:03:28:ac:bb:14:13:cb:c8:
ca:a5:83:5b:e8:c9:7b:94:61:a7:8e:e7:33:d3:3a:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5D:98:48:FB:2D:A5:AB:55:93:09:E7:03:94:E5:3A:11:E8:72:99
X509v3 Authority Key Identifier:
keyid:A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fd:b1:f9:0c:bb:a5:b9:41:92:be:8d:57:56:b9:b3:2c:a2:
0a:ab:71:2a:44:00:e3:d5:ed:cc:4a:dd:60:88:fb:43:05:86:
d5:87:ef:4b:ff:f2:2a:87:e4:25:98:38:17:70:f2:9b:4a:78:
ca:dd:36:35:14:10:1a:63:f2:97:c5:15:9c:e9:22:5c:74:1a:
7b:07:35:81:83:cc:1b:08:d1:06:62:64:78:0f:fb:7c:76:13:
84:a9:a0:fe:06:26:a0:52:1c:9c:e6:8e:7e:af:39:29:58:ee:
7a:b9:d7:9e:f9:d5:4f:89:ee:7a:62:b6:19:ac:7b:a6:05:e5:
db:a6:10:eb:26:85:d5:14:e0:a1:e8:97:d1:75:3c:5b:d4:47:
dd:08:a9:a5:bf:e1:bf:57:21:12:bf:a6:c6:f1:73:49:81:03:
37:1b:8e:34:22:e2:0f:5e:f7:ba:5d:11:c1:a8:4e:1d:5c:fd:
a1:11:46:6d:ae:b8:a8:eb:81:3e:ee:14:f9:b0:a6:c0:a6:62:
7f:ce:0f:32:56:20:9a:33:ff:ac:b4:dd:a0:7b:22:ab:47:df:
a2:a4:cd:c1:41:a7:2f:a3:00:96:8b:53:f7:f5:38:b7:20:44:
43:e7:d8:3f:4b:d4:5f:00:21:09:d7:fc:5c:56:97:8e:4d:ae:
c7:56:f2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:22:36 2025 by rpki-client