Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
File: qI1YyAfJSdssH18nPx78TfGlxVM.mft (raw, json)
Hash identifier: WY5rDv+hFi6YY3G8JMWp6QpN0dDHlAAlw/i4g+JhjnU=
Subject key identifier: 2C:7E:1A:CC:3F:1B:C2:1C:E0:E9:81:F0:1C:E0:E5:96:D8:5B:DD:D4
Authority key identifier: A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53
Certificate issuer: /CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553
Certificate serial: 019745F94FEDF0E5FC871C2A2E21701BD800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
Manifest number: 06DF
Signing time: Fri 06 Jun 2025 16:00:56 +0000
Manifest this update: Fri 06 Jun 2025 16:00:56 +0000
Manifest next update: Sat 07 Jun 2025 16:00:56 +0000
Files and hashes: 1: qI1YyAfJSdssH18nPx78TfGlxVM.crl (hash: mikNxQz/0HfhUg+yabGgPLhcMR2861xa9eNWvPHxTgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:4f:ed:f0:e5:fc:87:1c:2a:2e:21:70:1b:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553
Validity
Not Before: Jun 6 16:00:56 2025 GMT
Not After : Jun 7 16:00:56 2025 GMT
Subject: CN=2c7e1acc3f1bc21ce0e981f01ce0e596d85bddd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:ad:31:70:79:c3:51:4f:c4:41:f8:a8:20:
1f:7a:e6:16:9e:8a:20:e4:03:1b:5f:cd:7e:94:a5:
72:6e:7f:6b:53:b5:72:e8:74:e5:cb:5c:b5:30:8b:
d6:bf:5c:cd:b9:9a:ab:23:f6:0e:6e:39:8c:4b:75:
32:dd:73:7c:cc:05:7a:16:69:67:3d:df:40:71:3b:
b6:30:7d:86:2e:e6:7b:00:5b:46:2e:0c:f9:27:8d:
16:84:b5:7e:ce:9a:4f:bc:ec:7e:13:b3:e6:cf:e3:
94:67:63:67:84:7b:f5:51:f0:e6:18:ad:73:82:39:
ea:a0:04:e5:e9:ca:9a:53:9b:ef:26:55:86:79:58:
cb:6f:fb:d8:c3:33:96:13:72:f4:52:77:c4:b9:f9:
04:8c:76:2e:ae:44:1b:7f:55:b8:9c:0f:a7:c6:c0:
e3:01:47:c6:07:20:cd:61:7e:53:89:cc:f7:33:ad:
37:8b:9a:b2:ea:16:e5:2a:89:13:a2:f8:5c:72:8b:
30:58:09:18:77:3d:7b:b3:27:7c:e5:56:09:bb:f7:
8a:e5:ea:7e:56:ed:ce:01:1a:79:d9:ed:31:83:44:
21:01:e2:30:18:ac:08:cf:d4:8c:13:46:22:da:db:
6a:e1:bc:b7:0d:93:6b:b3:6a:a6:7e:76:7f:1e:81:
14:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7E:1A:CC:3F:1B:C2:1C:E0:E9:81:F0:1C:E0:E5:96:D8:5B:DD:D4
X509v3 Authority Key Identifier:
keyid:A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3e:86:37:ba:bf:2e:a8:57:22:f8:7d:d5:2f:3f:32:c8:bb:
a3:60:dd:56:0e:c6:3b:52:08:0f:bb:fe:d7:4e:a2:bf:d6:3f:
35:c3:a6:6b:c5:73:21:c1:84:7e:e0:af:53:ef:f8:d0:76:f7:
e1:9a:e0:28:ac:f1:09:c5:b9:0c:73:53:d1:12:22:4b:3a:4e:
72:e3:3c:a5:1a:23:a9:0f:51:b8:c8:cf:d0:8e:c1:59:ab:fd:
e4:b2:74:a8:d2:ca:42:cc:ce:b9:78:10:d1:6e:fc:e1:6f:49:
f9:1b:b1:33:9b:8a:e8:28:97:db:5a:5d:d6:30:bc:23:8e:77:
94:d7:84:94:f6:ca:20:69:65:0d:2f:c7:3b:a4:f7:23:73:ab:
90:d1:2b:9d:e8:a7:96:eb:5f:a8:42:3a:7b:48:67:31:9b:cf:
25:10:bf:8c:fe:85:ee:b1:fc:33:16:ab:ed:76:83:05:9d:dc:
52:36:88:f6:b0:8d:fc:1e:df:6d:31:da:9e:88:99:e1:e0:5b:
b6:f9:e2:7a:04:4f:70:d9:cf:a6:13:21:ec:35:84:f2:22:45:
9f:bd:be:99:ce:43:eb:1c:d7:49:24:87:53:fd:51:c0:30:ab:
52:4b:e0:e8:26:a9:12:ab:88:82:4a:08:34:46:ad:ee:96:50:
d2:46:77:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:14 2025 by rpki-client