Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
File: QiYpIEOCMfMh47gQEIiyD5DAjUY.mft (raw, json)
Hash identifier: EfmijihJ6UCVc0GL+zTn1SW0TVYBuRsKCvACXfhZzj8=
Subject key identifier: 4D:EB:B1:9D:94:82:CC:12:BB:72:9E:37:3C:8C:93:51:A5:2F:A5:C1
Authority key identifier: 42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
Certificate issuer: /CN=42262920438231f321e3b8101088b20f90c08d46
Certificate serial: 019763CC5F8A37B5839185D545C9EA630B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
Manifest number: 04EC
Signing time: Thu 12 Jun 2025 11:00:27 +0000
Manifest this update: Thu 12 Jun 2025 11:00:27 +0000
Manifest next update: Fri 13 Jun 2025 11:00:27 +0000
Files and hashes: 1: QiYpIEOCMfMh47gQEIiyD5DAjUY.crl (hash: qkWE8ZI9552Ep8eT5EdeVN0+VUWl2pLpLo2XV4/pX8c=)
2: vzK0GcfKIhsh5S1UL0NdOS-MO04.roa (hash: tbZrlZm8dX+O2bKlUBHktkojMJRjyTWeZk1UwYb3Lj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:cc:5f:8a:37:b5:83:91:85:d5:45:c9:ea:63:0b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42262920438231f321e3b8101088b20f90c08d46
Validity
Not Before: Jun 12 11:00:27 2025 GMT
Not After : Jun 13 11:00:27 2025 GMT
Subject: CN=4debb19d9482cc12bb729e373c8c9351a52fa5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:c2:1e:e7:40:25:42:06:b7:d7:39:d0:e7:
55:3a:50:b7:47:05:92:76:9c:e8:5b:3d:0b:2d:18:
74:f5:08:10:cb:f4:f9:32:0c:9c:e1:73:0d:52:a5:
5f:5b:6d:66:ae:6c:38:da:26:1c:b9:96:fc:08:76:
17:71:67:03:f6:d6:6a:fd:c3:53:5b:e4:39:92:9c:
32:ad:d5:be:72:a0:28:88:1c:d1:24:d6:cf:e8:95:
ce:1a:04:39:dc:85:b1:82:2e:6b:07:80:17:cc:69:
b8:06:6b:ba:a1:9c:0a:6c:ce:c0:d7:56:29:e0:85:
97:bb:4b:06:8c:b0:2c:45:65:4e:81:27:86:42:d6:
82:b1:4d:f2:8d:3d:59:d3:75:8d:ae:df:a1:dd:a6:
63:06:1d:d9:c9:48:fa:a0:06:63:70:9f:8b:db:fd:
33:45:56:dd:3f:56:1d:e5:43:c3:72:89:d6:af:ec:
09:e7:c8:9d:a2:6b:ac:15:5b:22:db:7c:2f:2b:90:
3e:d2:b1:df:57:e3:c5:96:68:f2:fb:02:b2:17:eb:
d1:90:9d:4c:56:00:0e:4d:d5:7d:7b:f9:08:26:3d:
c9:5f:e9:87:1d:48:f4:8b:52:6d:9a:d4:d9:41:7b:
e9:bd:aa:ec:86:55:c7:95:92:a7:6b:0b:95:0c:f4:
80:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EB:B1:9D:94:82:CC:12:BB:72:9E:37:3C:8C:93:51:A5:2F:A5:C1
X509v3 Authority Key Identifier:
keyid:42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ef:db:6c:18:b0:c8:91:c1:49:41:75:9c:87:88:47:16:f3:
5c:27:89:82:78:cf:31:cb:d0:5e:b2:23:91:3b:bd:14:0a:5a:
0c:b3:c4:29:10:3b:cb:4b:92:d3:15:1c:f9:14:89:99:eb:9c:
74:c0:f9:bd:aa:5b:0a:4c:70:74:b6:55:ef:79:c4:88:fc:3d:
4f:5c:ac:0a:e9:b5:77:12:36:c5:c2:ee:8a:8c:c3:c7:56:32:
68:0b:95:65:07:6d:4a:6e:b0:5e:26:24:b4:45:ca:ac:7e:25:
4e:05:3e:ed:b5:ef:2a:66:b9:3e:86:f7:b3:c0:d3:00:83:c3:
07:e6:29:20:9f:db:79:1b:64:e3:e3:d5:1f:8e:4f:51:b4:55:
e8:a0:a6:df:3d:06:b4:a5:61:02:e6:ed:06:ae:21:15:e6:c7:
bf:ce:54:33:5a:20:7c:47:67:6c:dd:10:2f:fc:69:7c:74:4c:
32:23:ca:4c:f2:26:03:b6:65:89:7e:36:81:3f:92:1a:e2:c3:
40:dc:9f:e0:ba:9c:0a:32:06:25:9c:87:5c:be:52:87:9d:89:
4c:2d:c8:c0:70:50:30:12:15:e6:db:e6:d1:fb:9b:66:e6:49:
7c:ae:1c:b2:ea:df:5c:94:33:22:00:a7:68:1c:30:fb:e2:c8:
d6:99:ff:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:37:53 2025 by rpki-client