Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier: DucyxnY9R6WhwqJc9l1Meae94e7tbERIADOZBELqwIw=
Subject key identifier: EA:5E:AA:DF:55:7C:CB:15:B7:D0:AF:40:99:D8:C7:CA:E6:5C:FF:F5
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial: 01974A43D4E9DF9ADE2C5FB2F6ECC3025071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number: 09EB
Signing time: Sat 07 Jun 2025 12:00:48 +0000
Manifest this update: Sat 07 Jun 2025 12:00:48 +0000
Manifest next update: Sun 08 Jun 2025 12:00:48 +0000
Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: gHAXhSXGW03Zs5ih9PoNlRyYtiJ7+nEQvfXI3hXCzWo=)
2: UJVJt5_Arh5oP7MnvKcbCGODOc4.roa (hash: cSJe9mPxkDM+ny/+GoKSWRH8dkU4qbTNsxlZ1deFGeo=)
3: epRoE1oSS28-kMoVUvbovqDaftI.roa (hash: vf7QEJn0ywPdqhUagZXAfAdq0fp3vefGorgZKG9IKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:d4:e9:df:9a:de:2c:5f:b2:f6:ec:c3:02:50:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Validity
Not Before: Jun 7 12:00:48 2025 GMT
Not After : Jun 8 12:00:48 2025 GMT
Subject: CN=ea5eaadf557ccb15b7d0af4099d8c7cae65cfff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:63:d4:9c:8b:5d:2f:d4:f0:d3:05:f5:d2:
96:d2:07:69:e3:4a:4b:2c:29:3c:c4:a5:41:0c:4a:
06:6f:a5:ab:fc:4b:ce:5d:ba:ea:e7:52:3e:d3:43:
31:b3:d9:59:38:b2:db:ed:37:0f:44:24:88:60:c3:
b4:e1:c5:20:b9:79:11:22:80:1d:13:cb:70:f7:fd:
4c:35:4d:33:ae:55:c5:a3:ff:29:b7:02:b9:ca:1a:
79:63:11:a5:1c:35:c4:c3:d6:c1:f6:e0:c7:17:77:
95:f6:79:a8:05:64:e7:b2:bb:72:c2:38:90:19:3c:
d8:b7:06:15:e8:ab:10:32:32:bd:65:cf:df:8f:b7:
55:1a:3d:de:b4:1c:cc:f0:9a:7a:d9:b1:e3:38:b0:
5d:dc:f4:50:d7:19:63:1a:8c:08:2f:c8:5f:ac:93:
5d:61:21:78:33:e2:4a:b8:a9:86:0c:24:9d:55:be:
0d:48:81:57:ec:76:0e:6a:20:a6:70:b1:69:cc:e2:
89:be:90:f6:75:36:13:6a:d0:2c:78:d9:89:7f:83:
92:03:dd:b1:9c:3c:9c:55:43:6d:59:15:7a:a5:c4:
97:ee:9c:03:4e:1d:b9:cb:8e:5c:1c:ab:f9:f7:28:
98:03:2e:68:a8:d1:ce:be:ff:dd:ba:43:cf:37:22:
2d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5E:AA:DF:55:7C:CB:15:B7:D0:AF:40:99:D8:C7:CA:E6:5C:FF:F5
X509v3 Authority Key Identifier:
keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e5:24:39:40:37:e0:32:40:55:98:d8:93:0a:87:5e:04:f4:
fd:2f:b5:11:15:e1:ea:72:72:74:6f:4d:50:25:61:65:83:3d:
a9:18:73:83:38:e3:5d:b8:2d:02:b6:2c:4b:7d:b1:ed:f0:56:
92:df:cb:b6:a7:b4:fe:72:96:0c:69:3f:b5:d7:f5:7e:8c:9f:
a5:d9:21:d8:07:32:71:fd:ea:5e:e9:31:19:3e:2a:dd:8b:7e:
19:ba:44:01:5a:8e:7d:e2:46:80:dc:32:97:d0:3e:96:df:ef:
42:e1:2d:9a:3d:96:05:93:2d:87:be:c0:10:03:f5:aa:a3:f9:
2e:4e:27:9b:25:23:af:c8:66:ba:a3:fc:51:b2:15:86:e8:17:
64:d3:06:5c:81:ae:cc:45:29:26:ae:1e:a6:b9:9a:6f:40:e5:
b3:e7:fd:0f:fa:45:c2:f7:a5:c0:74:58:9d:0c:5f:82:a6:68:
69:54:c8:b1:94:df:fe:3b:32:55:f2:f9:04:45:78:fd:1c:83:
92:e1:4e:1b:ec:6c:f6:2e:5b:3e:6b:b8:50:50:51:b3:ce:5b:
5b:99:c7:78:be:76:98:d4:b5:bb:d1:bd:70:d4:ae:c2:b9:cd:
a2:1f:51:d6:1e:4b:46:aa:4c:2c:f4:81:22:07:0b:be:ed:e4:
69:85:9f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:57:01 2025 by rpki-client