Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
File: QiYpIEOCMfMh47gQEIiyD5DAjUY.mft (raw, json)
Hash identifier: OdkW3cM535SDnRRYxh4wq0ixNU+Mnz/NcMp6pKb/4E8=
Subject key identifier: 4A:6A:99:AC:C4:7D:47:91:40:70:CE:BE:08:86:D9:7A:A5:F9:D9:DA
Authority key identifier: 42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
Certificate issuer: /CN=42262920438231f321e3b8101088b20f90c08d46
Certificate serial: 019758361CA01CB5F4E61ACF2559228426F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
Manifest number: 04E6
Signing time: Tue 10 Jun 2025 05:00:30 +0000
Manifest this update: Tue 10 Jun 2025 05:00:30 +0000
Manifest next update: Wed 11 Jun 2025 05:00:30 +0000
Files and hashes: 1: QiYpIEOCMfMh47gQEIiyD5DAjUY.crl (hash: ktnge+ymIWuwpVG6I23tZ87WnbSx069KkppCPN5ijJY=)
2: vzK0GcfKIhsh5S1UL0NdOS-MO04.roa (hash: tbZrlZm8dX+O2bKlUBHktkojMJRjyTWeZk1UwYb3Lj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:36:1c:a0:1c:b5:f4:e6:1a:cf:25:59:22:84:26:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42262920438231f321e3b8101088b20f90c08d46
Validity
Not Before: Jun 10 05:00:30 2025 GMT
Not After : Jun 11 05:00:30 2025 GMT
Subject: CN=4a6a99acc47d47914070cebe0886d97aa5f9d9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:ea:ff:4a:4b:11:0d:11:18:64:41:4e:cd:
b2:b7:d0:5b:3d:34:26:0d:b6:40:ae:d3:8f:8a:9a:
92:e6:14:bc:24:c3:c5:da:8e:ac:41:f9:3d:a2:48:
7a:39:13:56:bc:b2:3f:d8:b8:90:9d:0d:d6:9e:bd:
7d:12:b9:79:d4:95:43:21:9b:e3:7d:cf:cb:f8:2a:
80:0b:70:60:b4:71:41:46:6a:cb:aa:44:26:c5:ef:
58:01:f3:00:ba:5b:51:15:35:38:d2:94:63:7e:b6:
85:9c:ad:fe:c2:04:8a:45:eb:10:9c:5f:b7:fa:2a:
5c:54:03:85:44:b5:15:15:d9:0f:d1:1a:1e:1f:a2:
e7:91:89:c0:67:d4:8a:82:c0:7e:00:c8:ae:21:3f:
9e:e9:39:ea:fe:af:7a:0b:21:0f:4c:b3:ac:29:89:
34:7d:aa:c1:12:1b:ef:5e:34:2b:5b:e5:e4:95:1f:
18:42:cd:84:a6:ac:33:14:71:0a:3f:a2:a7:ab:60:
d2:d3:7b:cd:6a:63:d9:0e:40:2a:6d:77:19:0f:e9:
40:70:95:7c:29:9d:57:b4:28:a0:d6:fb:60:98:54:
e1:35:4f:ae:77:e8:2f:37:e2:43:ef:df:1d:8b:be:
cc:4d:b7:d1:26:89:5e:39:f0:82:79:c2:77:78:b5:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6A:99:AC:C4:7D:47:91:40:70:CE:BE:08:86:D9:7A:A5:F9:D9:DA
X509v3 Authority Key Identifier:
keyid:42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:72:cb:cd:ce:5d:6a:e7:28:62:8d:3e:85:c7:73:67:53:af:
36:60:a6:94:37:09:9a:ab:6b:f7:83:05:02:04:f0:30:f1:16:
67:1d:43:64:73:fe:58:24:f0:c8:91:77:90:18:38:24:1e:27:
25:a3:f3:cf:48:86:15:01:57:43:56:03:e2:95:92:f8:58:ea:
ab:43:33:df:69:42:f2:d1:a9:e0:6b:a2:58:36:80:24:1f:2f:
51:1f:6d:ad:77:c9:19:cb:74:f5:fb:38:a3:7d:ad:3d:eb:3f:
98:48:cd:4f:27:6d:5e:c1:aa:89:2b:c8:4c:8e:94:d0:79:84:
f9:bf:f9:be:b5:b9:f8:ea:48:76:59:59:27:48:42:5a:30:96:
6d:63:87:f5:80:c8:34:10:d3:46:cc:e5:2f:2b:1a:a2:3f:cd:
86:66:c0:29:8f:9e:a8:f5:76:fd:64:53:7d:e2:db:85:bc:f9:
6a:28:d2:84:89:b8:5c:68:40:37:6f:f2:e0:c4:56:58:21:d3:
39:e4:d4:e4:40:24:7b:99:e0:12:57:5b:7e:8e:02:54:17:0c:
ad:d6:a0:cd:5b:e5:a0:e7:00:e2:18:b1:c1:02:78:9f:53:0c:
b1:c0:07:a2:46:9f:23:55:ee:f2:a7:c8:7b:ac:ce:35:3b:49:
58:96:6e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:48:54 2025 by rpki-client