Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier: owC4sht2RqJxesAz4UGQPJKYrzE1x8QWhQhZudFzcM8=
Subject key identifier: 71:0C:25:E8:3E:41:66:BC:8A:8B:0F:8B:44:18:46:AE:31:10:0C:E6
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 01972FDFB19D3422755202EF93B69C4694FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number: 1571
Signing time: Mon 02 Jun 2025 09:01:18 +0000
Manifest this update: Mon 02 Jun 2025 09:01:18 +0000
Manifest next update: Tue 03 Jun 2025 09:01:18 +0000
Files and hashes: 1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: wh/df8vctlp3I7mKHGxRiKtcFSdc+F0JljAj+a/NxLI=)
2: osrkqaQb3qx2EG4vPDrSx-jUbRs.roa (hash: 60lpTHLn4dLpnmjc421kdUFig6Uy9lDHTrD8OxkZHo4=)
3: xkbe7-bpi_soiL6y9FjVY-pZjq4.roa (hash: DD/O2GJZO7TOSqwXXJo222/YwW4YcV/75ci14nBdOpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2f:df:b1:9d:34:22:75:52:02:ef:93:b6:9c:46:94:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Jun 2 09:01:18 2025 GMT
Not After : Jun 3 09:01:18 2025 GMT
Subject: CN=710c25e83e4166bc8a8b0f8b441846ae31100ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:82:54:1c:7c:51:a9:36:2f:08:a9:25:b5:e5:
a9:66:11:98:fc:4e:8f:2a:52:04:fc:9b:e0:bd:68:
9b:d9:a8:f9:c8:ee:75:2e:a4:cc:e3:40:fc:a1:4a:
2f:f6:8f:8a:f2:f9:9e:dc:4d:1a:2c:ba:ec:5f:f2:
3e:77:f5:1f:df:c2:6e:db:aa:9c:70:93:cf:02:12:
d8:b2:e8:de:d2:47:85:23:b2:24:93:12:b2:db:6e:
a2:2b:d9:76:82:dd:2a:36:d9:77:59:2b:1f:6e:36:
6e:98:66:4a:b7:43:2e:62:bf:e8:00:d5:d9:80:68:
9b:60:18:75:13:22:7c:07:15:8d:1e:a5:83:8a:93:
81:d9:1b:93:65:fc:0e:ef:9e:96:bb:c1:c4:aa:8b:
3b:bb:5c:ea:d5:49:8c:0e:9f:1a:a7:55:cc:ec:d2:
d2:0c:ed:cd:0e:96:8a:a6:b9:12:ff:36:8f:f3:90:
08:97:b0:24:f9:fc:c5:6f:83:c4:21:9e:9d:73:4e:
e6:bd:5f:be:3f:78:f5:ac:fb:95:18:3d:a6:ac:f4:
e8:9f:5d:53:b3:b1:24:4f:58:30:6a:e3:17:e7:de:
c2:46:03:a7:ef:83:4b:87:90:be:94:8f:2a:68:c5:
0a:29:e2:02:3e:e4:da:74:d1:3f:a5:66:df:76:05:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0C:25:E8:3E:41:66:BC:8A:8B:0F:8B:44:18:46:AE:31:10:0C:E6
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:49:b5:08:12:40:a7:3b:3b:c9:0c:82:96:85:21:ac:0e:55:
77:8b:dd:04:2a:cc:75:97:12:53:aa:1c:4a:39:d6:5c:7d:d9:
a9:93:12:ae:5d:88:22:ae:fb:82:aa:81:ac:97:19:d3:19:9a:
f2:db:83:8c:2a:ad:5b:3a:cf:eb:55:23:be:f7:ea:00:97:24:
16:b2:90:f1:b4:9a:9e:65:97:2c:da:6b:b3:5b:70:40:e1:f3:
49:a3:c2:7d:2a:c5:d6:6f:63:fd:a7:a9:47:7f:fe:bd:ce:cd:
32:74:d4:89:1c:e0:71:0a:a4:a0:66:32:da:bd:c8:71:ed:51:
ea:cc:1a:4b:4e:44:d9:27:c1:35:a3:29:b4:0e:b6:48:a7:6b:
72:27:30:46:8d:68:6b:42:4d:e4:c6:da:7a:47:96:60:ac:90:
c0:53:d7:80:3f:89:8b:1b:30:c4:b2:99:e0:06:2a:87:8d:3c:
41:f2:e8:e0:88:41:cd:b4:f3:a0:6e:3e:20:93:df:11:1a:a9:
70:15:52:d1:77:42:a2:97:92:45:e7:5c:17:87:ca:34:71:03:
8e:35:d9:d1:94:b5:7e:fe:e7:ce:85:59:e1:eb:3e:98:6d:0d:
d7:9d:22:7e:35:23:cd:13:45:a9:1b:51:ea:1a:32:c7:8c:51:
bd:52:5d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:26:50 2025 by rpki-client