Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json)
Hash identifier: HVAmCCRj+yWG99DSlOmzAFzmhQa+i9+hsYk1Lj/ksCo=
Subject key identifier: 85:04:66:50:6C:9D:3B:B4:9E:35:28:73:DB:45:3B:41:87:77:6D:3E
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial: 019760273FA719F27DD40D26A88E6C70C565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
Manifest number: 0869
Signing time: Wed 11 Jun 2025 18:01:14 +0000
Manifest this update: Wed 11 Jun 2025 18:01:14 +0000
Manifest next update: Thu 12 Jun 2025 18:01:14 +0000
Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: t+IYp5bvMtBwOKfWrqjNsG7ZNnIEJoFeuJlWhXLEK1c=)
2: lwAKLfcPZutkbCs3l1rr65okU8U.roa (hash: wQe65FAh279EvNyxsiAbyzzON1scOJGqaft13LngWyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:27:3f:a7:19:f2:7d:d4:0d:26:a8:8e:6c:70:c5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Validity
Not Before: Jun 11 18:01:14 2025 GMT
Not After : Jun 12 18:01:14 2025 GMT
Subject: CN=850466506c9d3bb49e352873db453b4187776d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:5d:d0:d4:26:47:eb:41:f2:cb:3c:4f:77:
c8:db:42:a6:49:33:23:24:5e:d4:98:5c:cb:d0:c6:
89:79:24:8d:e9:0c:d3:5d:87:d0:29:26:77:bd:4a:
1c:84:f1:f2:f0:52:5f:ce:b9:b0:d1:cc:ab:1f:03:
2e:9f:ff:51:c9:f3:4c:7e:20:bd:2d:30:01:e6:6a:
c7:f3:bd:ff:58:d9:90:f1:68:e5:e0:be:98:8b:b0:
8a:24:ea:4b:ce:57:f7:11:76:bc:ff:26:bc:1a:bd:
f7:0e:69:eb:d1:ba:bf:d3:f5:e9:cf:17:3e:45:32:
c5:2f:ce:a6:23:c9:98:2a:1d:58:69:89:41:9b:d0:
29:28:1e:37:ca:dc:3a:1d:83:7d:3f:6a:72:0c:a8:
40:a0:21:d3:56:ea:ae:08:07:af:34:17:2e:b0:3c:
4e:f3:40:48:38:4f:6a:97:f2:40:c9:c1:e7:18:ac:
c7:4d:63:c7:dd:ba:50:00:22:21:fc:47:fd:c7:40:
2f:79:62:91:0c:88:9a:ad:35:3c:c4:0a:73:e2:43:
55:1f:f1:1f:99:fe:3c:04:93:a2:ff:6e:db:79:f2:
c7:af:29:2c:49:1f:99:e3:92:79:e6:a6:d1:e0:d2:
15:eb:ff:c7:25:2b:77:fc:53:a4:6f:ad:dd:6f:de:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:04:66:50:6C:9D:3B:B4:9E:35:28:73:DB:45:3B:41:87:77:6D:3E
X509v3 Authority Key Identifier:
keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ca:0d:eb:6b:c3:96:6d:d4:84:6f:40:f7:e0:ea:81:3c:b7:
1c:2f:6a:ea:1e:8b:ce:ff:0a:b1:8e:ab:5d:96:29:50:45:f0:
94:98:a2:d4:24:99:48:a1:aa:3d:d1:6c:46:0b:48:72:e2:b4:
77:b2:3c:57:94:02:b5:c1:5a:9a:45:d7:e3:ce:bc:30:73:0e:
bc:fc:bf:07:c0:3c:21:bc:4f:0d:ab:6f:66:d2:59:0c:c4:8c:
7d:3f:89:1e:aa:2f:71:55:7e:fc:b5:39:c2:c5:cf:7e:fb:4e:
df:1e:d4:8b:4f:07:6d:52:77:95:32:11:db:a2:c4:65:0d:de:
3b:77:6b:87:c7:28:0e:c1:48:73:48:6b:c5:ea:8c:ec:cd:f4:
41:92:c5:74:d9:13:e2:90:d0:5a:d8:06:de:6f:9d:41:76:42:
c1:ec:8b:39:0e:fb:a8:07:13:02:f9:c3:4e:25:58:f3:93:08:
73:24:53:29:f6:da:af:e7:68:e5:1e:c9:5b:d5:e9:89:32:cb:
15:6a:03:f6:34:81:01:3a:fa:18:1a:49:62:90:f7:c8:29:37:
e3:93:ef:bf:8a:3b:69:cf:c5:7b:a9:5d:13:4d:98:55:f3:dc:
b0:35:dd:f2:5c:76:2c:d2:fd:e0:74:04:42:f5:17:cb:91:ec:
ba:cc:d3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:36:01 2025 by rpki-client