Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
File: Q-BF0CHUiuhhoM5n040VoGdlOjE.mft (raw, json)
Hash identifier: BM62CDNT6CGa6Tt6pUnETYkdffKXMQAJ3AFE3CpKQho=
Subject key identifier: 37:75:D2:A8:BB:96:D3:26:DE:88:90:92:C9:9D:42:DD:31:02:34:35
Authority key identifier: 43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
Certificate issuer: /CN=43e045d021d48ae861a0ce67d38d15a067653a31
Certificate serial: 01974AB1B38948B4C27E0FEA1E237DC4886E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
Manifest number: 0B6B
Signing time: Sat 07 Jun 2025 14:00:49 +0000
Manifest this update: Sat 07 Jun 2025 14:00:49 +0000
Manifest next update: Sun 08 Jun 2025 14:00:49 +0000
Files and hashes: 1: Q-BF0CHUiuhhoM5n040VoGdlOjE.crl (hash: cbb2GpimWrx0y0YaT+aw5vQ+ou7QFqfhDwogpmWnjb0=)
2: XNqUza-1RrV34b84oczapxMF-Cs.roa (hash: Cr97r6Z1ePJazya6FJNCZUabXsw1/WFse2z8LJYuBQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:b3:89:48:b4:c2:7e:0f:ea:1e:23:7d:c4:88:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e045d021d48ae861a0ce67d38d15a067653a31
Validity
Not Before: Jun 7 14:00:49 2025 GMT
Not After : Jun 8 14:00:49 2025 GMT
Subject: CN=3775d2a8bb96d326de889092c99d42dd31023435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:a8:c0:e9:81:78:6f:9c:ba:d1:3e:a2:9c:
c1:3b:c4:00:02:0d:00:89:3c:f5:94:84:39:7b:90:
00:ef:9a:fe:9b:f9:12:0e:5a:df:5a:38:15:9a:19:
21:5e:07:4f:ea:a8:a4:86:47:a9:47:8d:8d:c2:b7:
3b:70:11:73:9d:49:35:2d:8f:d7:95:a3:2a:c0:f8:
1f:e6:e1:1e:fa:2e:ad:2b:01:13:25:21:c8:c6:5a:
9e:e1:11:5d:c2:a8:68:8c:b5:d0:36:56:1f:39:a9:
cc:be:36:45:22:1b:f0:77:79:e6:59:33:5f:cd:5d:
51:3a:46:80:3a:55:a4:29:4a:62:3b:0e:0c:86:71:
15:25:55:42:70:9c:26:1f:87:45:e5:9a:ca:de:14:
94:16:2e:67:34:c7:66:10:05:c3:6e:90:20:40:a8:
08:62:84:53:7d:a6:c0:a9:87:b8:a0:16:7d:29:15:
c9:e4:cb:46:2c:a0:58:7a:93:0b:80:bc:a7:c4:c8:
99:46:d1:c6:22:b4:cc:b9:99:7d:d9:98:7d:94:f5:
79:68:fd:a8:6b:4c:a7:f8:cd:f5:3d:7e:99:ac:68:
aa:d2:27:8b:d9:bf:15:e0:70:cd:31:e9:82:3a:e5:
fa:5e:b6:7e:4a:be:37:3b:a0:64:88:b3:97:9c:d1:
f4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:75:D2:A8:BB:96:D3:26:DE:88:90:92:C9:9D:42:DD:31:02:34:35
X509v3 Authority Key Identifier:
keyid:43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:79:81:38:af:8d:41:37:28:ec:49:ad:5a:ef:a6:8f:3f:2e:
d3:8c:4d:f5:1d:42:fd:64:0a:fc:94:48:48:f4:9c:85:e4:9e:
fc:0a:d4:66:39:7a:1b:84:61:7d:b4:96:d8:bc:a1:58:c5:55:
43:ce:9a:8b:cc:95:a1:6e:b8:d6:64:93:6a:90:18:c7:3d:e5:
b4:ef:14:2f:74:ed:dc:14:18:a7:f3:23:df:5d:6b:01:b3:01:
ab:c3:08:48:e3:09:0a:17:a4:bd:df:ac:6c:fb:f1:c7:a7:6e:
4d:de:30:ff:19:60:ab:1a:79:3b:1d:be:f4:10:84:a3:d6:38:
48:a1:c6:1e:2e:1f:17:df:8c:74:3b:76:be:05:9f:37:44:6b:
20:af:82:d2:c5:c3:54:20:cf:08:7f:e3:5f:79:2a:45:07:d4:
b4:57:38:3b:a9:3d:0e:0f:ff:5e:8a:d6:bc:8c:8a:b1:c9:70:
54:e0:9f:8d:9b:4c:42:c8:2a:f7:a3:80:7c:30:bc:2a:2e:a2:
13:24:6b:68:57:74:f6:9b:9b:f5:39:9b:67:80:60:b5:3c:e7:
f4:4d:5e:8b:85:fc:50:66:c7:b9:2e:06:a9:07:dc:db:86:13:
5b:a8:04:9a:1c:07:36:6f:b7:7c:13:f0:17:f3:13:be:af:c3:
b6:85:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:07:54 2025 by rpki-client