Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
File: _QB9d6vr_l2GsInvuT4C3NMASsY.mft (raw, json)
Hash identifier: VXokUkV6L/dptrbvehUO25qYltAGcolpFfy0lAiTRQc=
Subject key identifier: CD:62:9C:51:DF:A4:45:CA:79:A2:AF:7A:9E:D5:33:BC:06:56:0F:65
Authority key identifier: FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6
Certificate issuer: /CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6
Certificate serial: 01974A0C98B87EE358318F61172291F97DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
Manifest number: 32
Signing time: Sat 07 Jun 2025 11:00:28 +0000
Manifest this update: Sat 07 Jun 2025 11:00:28 +0000
Manifest next update: Sun 08 Jun 2025 11:00:28 +0000
Files and hashes: 1: _QB9d6vr_l2GsInvuT4C3NMASsY.crl (hash: H7ixOM45Hv5MdF5EoSRe/PykMJ0N5yJuuuH1VEvhxV0=)
2: bWo1p2kvLDaN2hfsArhL9srtb9s.roa (hash: UWHNEgib/6NKUlAE0qvnRy4yH/056aCyLvDBcALH7NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:98:b8:7e:e3:58:31:8f:61:17:22:91:f9:7d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6
Validity
Not Before: Jun 7 11:00:28 2025 GMT
Not After : Jun 8 11:00:28 2025 GMT
Subject: CN=cd629c51dfa445ca79a2af7a9ed533bc06560f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:e5:2b:80:22:a1:dc:dc:88:05:b5:c1:73:
c6:34:74:e8:56:bb:24:2f:3c:14:68:0e:be:bc:c3:
58:fc:40:55:7e:b4:07:26:96:30:76:f4:33:60:ea:
ed:2e:78:a5:a3:c3:2f:1d:8d:04:18:86:1e:e2:ae:
30:bd:1b:2f:74:b8:9b:ef:48:f1:8a:3e:10:ec:0e:
89:9c:a7:8d:d5:74:b4:22:0a:6d:65:f3:a6:a9:07:
c2:74:03:4c:66:21:32:b6:8d:a9:e3:64:2d:39:0a:
4b:22:1e:48:a2:22:98:d2:91:94:03:d9:f9:96:36:
03:8e:e5:98:d4:66:0d:06:fe:ee:01:26:0c:8b:fd:
40:8c:b2:22:82:bf:8f:d8:76:d2:84:82:96:a8:88:
de:8b:1b:4a:cf:15:3e:b3:5c:50:0b:2c:bf:a5:3c:
64:ff:c4:89:d0:eb:95:45:3c:f0:de:27:49:f8:d8:
cc:6d:07:03:5b:e5:19:88:3c:00:88:ad:24:14:60:
fb:fe:f7:d8:f1:da:ee:ea:cb:ca:21:20:8b:aa:46:
3c:b4:85:98:00:d6:79:fa:6a:29:62:4d:c9:d9:dd:
59:cd:68:fb:3c:92:92:54:39:5d:dc:7a:ad:36:48:
9f:e9:8f:3f:fa:7e:1d:0e:91:f6:27:3f:1c:50:c0:
8f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:62:9C:51:DF:A4:45:CA:79:A2:AF:7A:9E:D5:33:BC:06:56:0F:65
X509v3 Authority Key Identifier:
keyid:FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:48:2c:08:81:78:1b:c2:96:9c:fb:ee:9f:76:0c:56:ea:24:
b2:4d:e5:95:f2:85:28:03:00:f6:43:5a:91:76:18:3c:79:e1:
78:b4:97:b0:57:53:5e:26:52:1d:c8:b4:02:b4:8b:f1:fc:91:
e4:a5:cd:81:a0:ab:01:e3:d1:bc:bc:40:f9:87:df:99:47:38:
b5:c5:79:e1:3b:9d:8f:7e:fe:0f:5a:83:d8:87:ba:5e:69:71:
7a:06:5b:eb:82:0c:1e:ae:d1:82:9c:eb:33:0a:5e:25:27:73:
c4:c7:69:a0:ca:9e:ca:87:e1:df:d7:ee:ae:cc:95:aa:57:89:
7f:ba:6f:ca:d9:21:c6:ca:e3:e3:fc:66:ba:92:9c:e5:63:4e:
e7:8f:9c:9d:0c:f2:40:b7:2a:4f:42:5b:15:7b:e2:f8:f1:9b:
e6:e2:a4:13:ff:dd:14:36:f2:38:d6:0a:cc:06:3f:99:ce:a2:
19:2a:6c:15:db:40:b0:38:36:91:50:18:a4:ed:c6:22:d7:ec:
0c:4b:7f:06:4b:b7:07:03:63:68:2e:d6:4c:9b:04:30:1a:61:
c4:d9:aa:e0:a3:fc:96:2a:ae:17:9d:6d:80:d4:99:3c:d6:53:
7d:d8:e4:94:5d:0e:9f:97:c1:50:13:94:ae:0e:2c:f7:f4:2b:
66:b5:39:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:29:30 2025 by rpki-client