Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
File: QbKQBTJFsRKlim1YlN_cf2dCLos.mft (raw, json)
Hash identifier: BHkIvinEebZ/WGjpEXC3a7XQmNZ6yGKS01qgUljL12I=
Subject key identifier: E7:89:EE:B0:77:60:31:77:77:48:DA:61:B1:84:3F:FC:D9:3C:9D:46
Authority key identifier: 41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
Certificate issuer: /CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Certificate serial: 01974A7A68F26F1EC8D4C4F2E84AE13046C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
Manifest number: 0969
Signing time: Sat 07 Jun 2025 13:00:25 +0000
Manifest this update: Sat 07 Jun 2025 13:00:25 +0000
Manifest next update: Sun 08 Jun 2025 13:00:25 +0000
Files and hashes: 1: QbKQBTJFsRKlim1YlN_cf2dCLos.crl (hash: iR58arnXVX0wbD2yeofkus3qUHA/UAgY0l16kgWBQjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:68:f2:6f:1e:c8:d4:c4:f2:e8:4a:e1:30:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Validity
Not Before: Jun 7 13:00:25 2025 GMT
Not After : Jun 8 13:00:25 2025 GMT
Subject: CN=e789eeb0776031777748da61b1843ffcd93c9d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:06:b7:80:64:5a:a9:55:2a:ae:91:16:cf:
0e:e8:be:49:34:c6:b0:09:04:47:89:62:bf:6b:37:
62:d0:6d:db:00:36:17:12:f0:60:5f:ba:f9:64:3a:
b7:d3:b6:02:d1:cb:d2:17:7f:78:5e:1e:47:8f:0f:
77:4d:0a:72:63:4c:5b:6f:65:f1:e4:14:a9:85:69:
a1:cc:be:f9:51:f0:42:8d:2e:aa:2f:95:15:f4:58:
fb:df:f6:2b:d6:3a:44:59:27:b3:8b:2a:ab:ff:c9:
8b:02:a7:51:b1:58:1b:1c:60:ff:4c:97:e0:06:26:
45:85:d0:f3:69:c2:4e:bc:e3:d0:82:03:ac:a5:f7:
46:dc:65:5f:b5:65:ad:a8:3b:c6:28:cc:a5:b4:79:
9a:d9:a8:df:c7:c2:fe:92:d2:60:e0:1c:56:a7:41:
ea:a3:36:24:3c:0e:df:fa:0f:03:26:c6:29:34:a8:
09:27:23:4f:b6:e7:0a:9f:12:47:62:4d:bb:e0:93:
83:a0:87:01:51:7c:c2:3a:8c:e2:4d:99:93:f7:b8:
e0:95:d8:f8:34:40:69:78:74:81:4d:f8:66:f0:24:
4e:22:7e:97:19:40:81:b6:43:50:93:d1:38:80:3c:
c0:62:45:bf:cb:1c:65:80:ce:2a:44:23:c2:b6:ca:
78:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:89:EE:B0:77:60:31:77:77:48:DA:61:B1:84:3F:FC:D9:3C:9D:46
X509v3 Authority Key Identifier:
keyid:41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f3:4c:20:9f:1b:4d:d7:5c:4c:95:1d:ee:7e:ac:62:a0:97:
aa:15:27:f6:89:16:33:2c:f9:be:3f:a4:0c:f3:7a:66:3e:b7:
c7:85:b1:0e:ca:45:ea:8b:29:34:df:a8:ed:99:6e:2b:7b:4e:
26:95:c0:02:97:cc:4c:1d:32:da:e1:a6:78:fb:e2:2a:c8:1f:
73:cf:a2:0d:d1:c0:51:be:f0:1d:d0:a2:82:44:2d:1d:62:1e:
dd:4a:1f:54:dc:89:d1:1f:3d:21:91:87:cc:81:40:e8:73:34:
89:c1:59:35:8c:67:ac:fd:46:4a:70:4a:5f:2f:58:9e:89:d5:
92:e0:22:20:51:f3:ee:a6:b9:55:81:bc:3b:d7:35:11:37:71:
54:e4:0e:0d:5f:02:ae:3b:c7:f3:2f:00:ce:f1:f1:15:ac:fb:
b2:f1:71:8d:65:b4:85:b8:32:5d:f8:a1:b9:2a:7a:55:1b:8e:
bb:0f:b8:31:c1:ed:c9:04:c7:47:6e:a6:80:9d:b6:84:4e:c7:
ad:29:07:94:7a:82:cb:94:bd:32:60:e5:15:1c:5f:1f:88:57:
70:5c:fa:7f:35:f5:d6:7e:77:e9:95:3b:91:2b:39:24:9d:e3:
39:d6:e6:1a:3a:28:65:23:b2:fc:00:cf:13:5b:80:45:eb:35:
26:85:b9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:21:34 2025 by rpki-client