Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json)
Hash identifier: +XTvE7/TbpbDJgALZfj0MgwAseLwgtAa39h0yH8diuM=
Subject key identifier: 29:1E:CD:20:FD:84:D7:7D:8D:B8:6D:C0:C5:B0:BC:A0:01:EB:7B:84
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial: 0197586D03F78BE53753E4858545131F34DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
Manifest number: 0865
Signing time: Tue 10 Jun 2025 06:00:28 +0000
Manifest this update: Tue 10 Jun 2025 06:00:28 +0000
Manifest next update: Wed 11 Jun 2025 06:00:28 +0000
Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: DiF0pIbAYlTHGRqI5qC1Lluhu1J61fS9ni/SIPKhuzY=)
2: lwAKLfcPZutkbCs3l1rr65okU8U.roa (hash: wQe65FAh279EvNyxsiAbyzzON1scOJGqaft13LngWyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:03:f7:8b:e5:37:53:e4:85:85:45:13:1f:34:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Validity
Not Before: Jun 10 06:00:28 2025 GMT
Not After : Jun 11 06:00:28 2025 GMT
Subject: CN=291ecd20fd84d77d8db86dc0c5b0bca001eb7b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3d:bb:62:e6:f7:bc:7f:48:d2:07:0c:f7:6a:
3d:7b:df:6e:24:42:ec:95:38:61:74:14:70:c1:01:
a1:58:e5:4a:59:c3:a6:4d:75:ec:43:5f:96:31:43:
0c:07:a0:5a:70:f7:a0:45:d7:0e:1c:fb:6d:b3:97:
c5:2c:ca:5c:bc:b1:69:aa:05:c7:d2:ca:bd:53:c3:
3e:ce:2e:cb:36:49:a4:4b:6e:0f:ff:c6:78:5b:9d:
59:11:71:9d:85:ce:a9:c7:5c:5c:a7:a4:76:55:a5:
44:5d:d1:ab:c7:94:ad:c7:e9:3a:bb:21:76:ea:2f:
d0:3c:05:5a:c7:0f:e0:3f:01:ef:0c:c8:63:cc:e2:
69:82:91:8d:75:de:38:51:2e:f3:dd:00:10:ac:95:
a8:5a:d3:df:89:46:7e:a2:c4:0f:5d:42:c8:ce:19:
3b:46:3a:13:86:38:ba:73:38:59:a8:0e:3a:56:9d:
07:07:ee:19:71:bb:f7:ed:91:53:94:59:0d:dd:23:
09:93:36:ef:16:cc:8c:e5:4e:15:63:86:94:89:2f:
ea:1d:76:5f:ff:e1:cf:85:c1:a2:f8:24:ed:ff:a3:
d7:8d:6e:48:a6:5a:09:c9:c5:16:80:b3:31:68:85:
79:0c:d2:09:76:75:aa:04:09:74:02:89:0d:a7:ab:
3b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1E:CD:20:FD:84:D7:7D:8D:B8:6D:C0:C5:B0:BC:A0:01:EB:7B:84
X509v3 Authority Key Identifier:
keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:20:ee:9f:b9:07:98:ce:1f:e2:62:cc:10:65:25:1f:4a:97:
38:51:3b:70:ed:12:b4:c0:da:8b:12:4b:38:ef:f2:96:06:fc:
ff:7b:38:5b:79:bc:1a:59:52:c9:01:dd:e5:59:6e:05:f8:93:
76:76:6e:a2:d8:c1:8a:db:aa:c6:74:3c:8c:4e:45:bf:05:d7:
2a:56:28:8d:4e:80:db:05:e6:07:50:30:f9:b1:d5:3c:d6:b1:
96:b8:84:d5:df:11:db:e1:37:de:17:66:39:84:d6:35:08:c7:
5a:b5:7c:17:42:a1:4a:b0:ac:47:c1:da:20:92:01:46:b6:bf:
ac:25:72:ff:48:2a:42:9b:29:7e:6b:c4:06:ee:22:57:15:ae:
fc:93:15:b9:9c:b3:bb:35:78:92:e0:1d:30:64:25:d3:1f:3e:
f2:5a:36:56:59:15:e9:bb:6f:68:b8:1d:ad:c3:f4:49:8b:15:
37:ca:9d:b2:ca:6a:11:d1:85:09:30:8a:e1:91:d0:ab:1e:63:
fd:e2:42:79:a3:ae:f9:88:98:eb:8d:c6:a3:1b:ea:e4:f1:62:
8f:aa:07:60:06:60:7a:ca:de:09:93:23:69:56:0b:18:7c:76:
06:bf:59:59:28:ab:38:4e:f7:73:e4:a7:2a:2a:8d:e5:3f:af:
31:85:2a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:23:31 2025 by rpki-client