Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
File: QYJu6QJw_dFCOvgJByYAZxjfxs8.mft (raw, json)
Hash identifier: Gw6YPP+IeA99al4pj1TCAxthZ+fVJ0EGDeqcH2KaD4o=
Subject key identifier: 2D:10:5E:58:AF:1A:31:FB:E8:AC:53:A2:B0:16:4E:43:ED:FC:CF:E4
Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
Certificate issuer: /CN=41826ee90270fdd1423af8090726006718dfc6cf
Certificate serial: 0197610259A972C853CB2822AFC0012342FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
Manifest number: 14DD
Signing time: Wed 11 Jun 2025 22:00:33 +0000
Manifest this update: Wed 11 Jun 2025 22:00:33 +0000
Manifest next update: Thu 12 Jun 2025 22:00:33 +0000
Files and hashes: 1: QYJu6QJw_dFCOvgJByYAZxjfxs8.crl (hash: NK+EIht6An0gutRxX1qp4dB63m/wNTFDclgBBj2ZQo0=)
2: fDR4cU3XqJg4t0VKZWBpSExwqRA.roa (hash: sdNAH+4UVUlBbNGnVcweAz337i8Vp0M6ubrDrxe2cuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:02:59:a9:72:c8:53:cb:28:22:af:c0:01:23:42:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf
Validity
Not Before: Jun 11 22:00:33 2025 GMT
Not After : Jun 12 22:00:33 2025 GMT
Subject: CN=2d105e58af1a31fbe8ac53a2b0164e43edfccfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:63:ae:df:8d:b1:41:ab:82:8f:8a:37:3b:
ac:70:13:67:ad:49:04:56:95:9b:48:53:55:60:d9:
83:02:59:ba:85:cf:86:1f:df:e8:4c:2c:ca:6c:2d:
af:f6:02:72:b1:11:cd:38:62:45:7d:f0:7c:e2:e2:
ca:28:cf:0a:7a:9d:d9:c6:f9:5d:e6:c3:fc:09:6d:
77:da:de:9a:6b:4b:ad:dd:12:93:62:16:a5:a4:7e:
d2:ff:d5:4f:de:0a:c2:58:44:19:e2:ab:47:19:a0:
81:8e:e6:cf:77:13:45:f6:86:2a:82:f3:17:53:c4:
9b:1d:b2:f2:5e:81:6a:c8:a4:7a:49:be:9b:3b:c0:
ee:df:2d:1b:b2:13:3f:b0:c0:2d:b3:85:88:54:1d:
71:9c:e0:3d:27:22:13:dc:f1:c6:99:d7:d3:4e:e8:
cd:3c:1f:9c:cf:8a:bd:ee:9a:3d:1a:55:2f:0d:ac:
d1:c0:f1:73:42:ef:6f:10:8d:46:52:cb:e7:34:a6:
ce:44:10:a9:76:e3:4e:22:30:9c:dc:aa:23:1e:ac:
b1:f5:9d:ac:3e:5f:4f:db:2b:4a:ab:f6:aa:e5:7b:
b6:c4:a1:b5:73:44:97:75:cd:f6:a5:fd:76:9a:5b:
ed:8b:22:6a:7a:3d:b1:8b:ac:c5:9b:76:68:ef:5f:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:10:5E:58:AF:1A:31:FB:E8:AC:53:A2:B0:16:4E:43:ED:FC:CF:E4
X509v3 Authority Key Identifier:
keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:00:99:e9:fd:37:09:35:80:66:14:de:df:90:5d:16:ce:75:
3f:e9:20:1e:08:f9:b2:08:54:41:56:3c:17:fd:1a:28:bb:30:
f9:a6:8b:93:c8:e0:46:77:7e:97:c1:74:b2:68:a7:07:39:fe:
3c:cd:b0:34:ba:b0:7c:8a:02:c0:98:87:27:75:34:aa:44:a2:
dc:9d:11:c2:19:26:35:54:75:73:6b:20:37:05:61:16:50:59:
71:0b:5f:87:94:0c:8c:78:49:be:04:e9:8f:2c:d4:44:ec:4a:
ba:6b:7e:bc:09:c1:77:17:75:12:02:03:41:27:ab:e8:7e:a9:
55:fb:01:d5:db:2b:4f:c7:55:f3:79:8f:da:b4:f4:f4:cd:89:
75:d0:49:2f:da:e7:e3:60:c6:a2:c6:f4:33:ad:91:27:06:09:
53:8a:8a:bf:69:77:a7:68:25:35:87:c8:99:33:12:c4:d5:65:
ec:96:16:b3:e1:62:a3:ff:d0:5d:3a:89:0b:ec:bb:ba:a8:ab:
fa:a4:e8:a6:26:5c:3d:54:9e:9f:bd:67:f2:98:e8:16:6d:de:
4c:13:36:58:df:26:42:e2:61:83:7b:28:13:42:95:a8:1d:0f:
35:82:d6:ec:8f:a2:51:3d:95:2b:62:f8:51:fe:fd:64:b2:ad:
60:34:be:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:49:21 2025 by rpki-client