Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
File: QclkksAECK1U1zDA62KeOgtQ2A8.mft (raw, json)
Hash identifier: 6zf9tgGBCBvOr7oCLuePoZwT9vymNq6uW13rmxzYeo0=
Subject key identifier: FA:38:C6:54:D6:F2:36:75:AA:C8:5F:FB:5B:BE:23:AD:3F:EC:1E:B5
Authority key identifier: 41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
Certificate issuer: /CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Certificate serial: 0197485517A4091D82D95F0EE9E7F3966B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
Manifest number: 0206
Signing time: Sat 07 Jun 2025 03:00:25 +0000
Manifest this update: Sat 07 Jun 2025 03:00:25 +0000
Manifest next update: Sun 08 Jun 2025 03:00:25 +0000
Files and hashes: 1: EpeCh_PHvVwvR1jtfMGPQVrMsrQ.roa (hash: XKVWPCeZYhwf3z1v0hUSbNv7x/hm4cVMh5YcJnXqtvg=)
2: QclkksAECK1U1zDA62KeOgtQ2A8.crl (hash: Ol7rILVnX0lM51BH5NEjW+nk3hS367XJ1bsXTpH93dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:17:a4:09:1d:82:d9:5f:0e:e9:e7:f3:96:6b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Validity
Not Before: Jun 7 03:00:25 2025 GMT
Not After : Jun 8 03:00:25 2025 GMT
Subject: CN=fa38c654d6f23675aac85ffb5bbe23ad3fec1eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:eb:4f:c6:0b:df:b6:dc:84:64:2e:19:a0:78:
e3:71:17:99:2b:0b:e1:0d:5c:17:5b:7b:8f:b1:4f:
07:30:4c:a6:9c:c1:d1:69:b2:47:75:af:6d:5f:95:
12:37:14:f6:b0:cc:dd:65:70:39:f9:4f:6e:83:73:
d8:bc:87:5b:d0:c5:61:c7:3a:a1:20:02:01:88:d4:
c4:4f:41:7d:ca:31:bc:3f:da:8d:56:e7:28:91:32:
a6:29:b1:a1:60:e6:ba:aa:70:92:f5:bb:4d:42:6b:
c7:b5:ca:92:2c:f1:c0:74:ee:dd:39:a3:5d:73:96:
ca:40:33:92:2c:0c:43:f0:fd:d7:72:37:97:c9:91:
70:8d:f1:c1:4c:54:d0:d2:3f:9e:2e:97:b9:b1:35:
bd:11:25:49:26:d8:7e:89:94:90:a4:41:ae:b8:0d:
c9:ce:1b:13:54:71:b6:04:3f:e2:82:76:b7:7d:7c:
44:ce:4f:5b:7b:c4:4d:ed:a9:ba:b3:64:94:07:00:
88:91:d6:53:c8:c9:6c:f6:93:e8:47:97:e4:7b:ac:
93:33:f2:67:1b:3e:4c:2b:ea:7e:dd:cb:30:55:e1:
4c:01:49:d8:d4:87:4d:8f:b5:c9:62:ed:e0:3e:19:
d3:4c:00:7c:3c:ae:f5:8d:6e:41:f3:0e:cd:12:7d:
59:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:38:C6:54:D6:F2:36:75:AA:C8:5F:FB:5B:BE:23:AD:3F:EC:1E:B5
X509v3 Authority Key Identifier:
keyid:41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:98:ec:1f:09:e4:de:9d:fc:f3:2f:c4:e1:c9:94:7e:39:d7:
60:cf:fb:1f:8f:80:77:5e:5e:e6:d3:fc:46:4c:c4:43:ad:03:
bd:d7:f8:6a:fa:a0:d9:23:ac:2f:b8:49:30:22:c0:19:02:dd:
35:3e:42:09:b2:8e:14:d7:81:ee:bd:1c:82:87:51:5b:48:f2:
53:79:31:a5:16:de:88:51:5f:9f:e2:c0:1b:db:61:34:5d:ae:
37:3b:10:71:4e:c3:c2:17:89:77:04:12:77:0d:e4:b3:78:81:
d4:95:12:bf:1d:9a:25:67:a5:c2:40:47:e2:99:39:ae:0e:ee:
cf:5e:19:e8:49:9e:7d:4e:bd:7c:1a:98:60:f2:12:60:a0:02:
5b:14:94:88:47:fd:8b:d1:59:59:74:a4:3d:d4:26:f9:18:8a:
bf:34:45:af:4e:07:fa:f1:87:15:e8:38:4e:66:e2:28:83:a6:
51:22:26:bc:d3:6c:79:45:f4:bf:ea:83:4f:56:ea:cf:cb:07:
79:e0:ef:ed:7b:89:22:e7:21:3c:6c:bd:9d:16:3a:52:b7:67:
ac:a8:49:12:eb:c1:56:5b:cb:8b:0c:4f:e4:eb:7e:2f:c4:d7:
e8:f0:91:e9:87:23:5d:80:69:1e:c6:d9:d7:58:76:b7:54:f4:
9f:0f:83:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:15 2025 by rpki-client