Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
File: QMyB_4LO1hrvhHas56DoGLuuj8Q.mft (raw, json)
Hash identifier: tDg435iqalMQimQii/l59xjUajitVUN2QhSx7vVL3kU=
Subject key identifier: 11:C1:8F:F9:93:36:45:25:8D:CB:98:93:9D:DD:46:59:B4:BF:74:FA
Authority key identifier: 40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4
Certificate issuer: /CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
Certificate serial: 01974A7AC9AA997884430566BA0304782E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
Manifest number: 0BF7
Signing time: Sat 07 Jun 2025 13:00:50 +0000
Manifest this update: Sat 07 Jun 2025 13:00:50 +0000
Manifest next update: Sun 08 Jun 2025 13:00:50 +0000
Files and hashes: 1: QMyB_4LO1hrvhHas56DoGLuuj8Q.crl (hash: kZfTx5kt1G5/2ZieAGSd//7ZVzYqTqV6yn5XZTHhzZk=)
2: f9PiBsdXGMaiketrG3G5PjbB6oI.roa (hash: OKMBW/Wn+8xzvLZOORxBkZ/Gr6+Ikl3rSLUfT+IRWSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:c9:aa:99:78:84:43:05:66:ba:03:04:78:2e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
Validity
Not Before: Jun 7 13:00:50 2025 GMT
Not After : Jun 8 13:00:50 2025 GMT
Subject: CN=11c18ff9933645258dcb98939ddd4659b4bf74fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:52:8d:b8:da:75:de:b7:4c:2f:fd:b2:c1:
c8:be:ce:03:9c:7e:a3:f2:c4:e6:e6:98:9b:90:85:
0b:f2:23:da:a2:5a:75:12:10:13:53:0b:ea:f6:6e:
7d:1a:a8:f7:f4:b3:09:ff:e7:4d:23:8a:87:72:56:
a2:80:5f:38:b7:c5:a9:15:5a:03:38:2f:be:7c:3a:
aa:b1:43:63:27:84:a3:bb:c6:02:89:a0:45:37:b6:
e1:2b:4d:4d:fc:18:8f:76:da:4b:aa:89:13:8a:09:
a5:07:33:8b:15:cd:9e:6f:dc:97:7d:d8:1f:6d:b9:
83:c1:5a:a6:e8:5f:d7:6d:a6:82:dd:b0:18:34:f6:
99:62:d1:35:71:a1:1d:c8:95:de:a8:3b:6f:9f:3b:
f1:fa:eb:21:71:99:a8:c7:62:12:58:74:44:41:f5:
24:8e:0e:3a:0c:44:b6:65:ee:46:ea:15:43:89:12:
43:a1:ee:2c:7a:fc:82:9d:af:98:95:13:1d:79:e3:
01:85:62:bc:d3:4d:e9:13:20:78:80:79:3b:37:d3:
fa:cc:8e:26:ee:59:f2:5a:b0:81:a2:ab:c5:35:87:
bf:72:e3:e2:9e:15:93:76:a0:ec:3a:b6:9a:dc:87:
a7:ce:f1:e5:19:04:05:45:b4:c6:15:c7:d4:f5:c2:
42:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C1:8F:F9:93:36:45:25:8D:CB:98:93:9D:DD:46:59:B4:BF:74:FA
X509v3 Authority Key Identifier:
keyid:40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c4:a9:71:b6:45:de:01:7f:a6:e8:1f:e0:65:e9:47:98:5a:
0d:72:fd:7f:91:33:a2:3f:60:15:1e:b4:ff:39:f8:e9:ea:2e:
33:1e:fc:dc:a6:0b:9c:7d:74:d1:02:5f:c9:4b:ef:8d:f4:c9:
0c:c4:43:a8:34:ab:98:ba:e8:84:2f:94:d0:03:34:65:1b:de:
7c:b6:35:8a:1f:ab:85:7f:60:2b:92:ea:c3:bc:c6:2f:54:40:
fd:c0:18:16:da:a2:8a:b4:0a:3a:78:10:34:09:a8:b1:c9:af:
44:4b:64:47:cf:dd:40:8d:cc:2c:73:79:5c:2d:c6:41:d4:6e:
2a:55:7f:d4:68:1b:3e:f3:76:9f:3b:01:18:a9:dc:49:a7:41:
8b:aa:7b:d2:b3:19:2f:d8:f1:79:e5:86:a9:04:8a:41:bb:88:
ff:01:6e:a9:fa:8a:b8:30:9a:bf:7a:c0:69:64:fb:51:25:0f:
8b:a4:61:85:89:1b:e8:84:cb:64:cd:ce:d1:95:70:ee:34:87:
18:39:b6:c2:f4:53:2d:2e:4e:d8:a8:f3:9a:fa:62:f2:f5:42:
93:a8:a8:83:f2:8e:e7:ef:5d:87:48:9f:a5:37:a0:59:3c:7d:
b3:8a:6d:72:02:ce:8c:18:12:96:2e:5a:39:7d:98:4c:f8:fc:
68:87:41:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:31:12 2025 by rpki-client