Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
File: QucVYSpqaXFPXj8uTLxI_OhKb1I.mft (raw, json)
Hash identifier: 5Cq4vWETyZIEF5qPtU4nVEmsUT/2gPvZf62P+bBmFTo=
Subject key identifier: C0:5A:D7:C5:17:78:8C:6A:51:62:5D:1F:6C:2B:23:4D:45:C6:C8:4F
Authority key identifier: 42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
Certificate issuer: /CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Certificate serial: 019748FAA3B3CDBD879EBC759DCC6B749C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 06:01:14 +0000
Manifest this update: Sat 07 Jun 2025 06:01:14 +0000
Manifest next update: Sun 08 Jun 2025 06:01:14 +0000
Files and hashes: 1: QucVYSpqaXFPXj8uTLxI_OhKb1I.crl (hash: fLVq6ot3a9i0B9XiERyiepbmndkuauV4YV75R101UdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:a3:b3:cd:bd:87:9e:bc:75:9d:cc:6b:74:9c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Validity
Not Before: Jun 7 06:01:14 2025 GMT
Not After : Jun 8 06:01:14 2025 GMT
Subject: CN=c05ad7c517788c6a51625d1f6c2b234d45c6c84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:72:86:c0:0b:17:1e:39:18:83:33:5d:15:05:
30:eb:5e:25:16:f1:cb:25:52:a5:0c:93:aa:a2:0b:
6c:4a:d6:e5:f0:b3:58:48:16:57:23:67:7f:8f:d9:
d5:0e:bc:de:ca:5b:90:7e:b8:21:cb:80:3b:e2:f5:
d0:bc:6e:d3:73:5c:79:66:48:7d:64:36:c9:1c:35:
d0:a3:6d:35:a3:13:5a:3f:57:80:3d:cc:3e:bd:fa:
f2:0d:87:6b:21:26:0c:aa:44:6b:49:5c:d8:46:b7:
7a:34:31:c2:8d:e9:ab:12:15:bc:90:c5:24:da:f8:
bf:9d:eb:8e:89:4f:09:7c:2c:d7:ed:1b:14:d8:99:
36:f8:c6:d4:ce:a6:4c:9b:c3:c6:a8:14:19:9f:b5:
91:8f:ca:4d:25:9b:3c:fe:b2:8a:41:4f:77:ee:68:
93:66:f7:b7:3a:f1:6a:19:ba:6f:c0:f5:d3:55:fe:
d5:c5:c7:c6:2c:53:4b:c2:9b:15:6b:bb:a6:e0:90:
26:22:36:0b:87:b2:13:57:f9:36:7f:17:70:28:bd:
3c:99:cb:75:26:49:cc:71:c3:70:ca:6d:ca:f2:1c:
53:af:15:2c:64:b6:83:e8:c1:9e:d8:3d:f4:a8:f6:
68:45:8e:4b:9f:a0:a8:21:ca:12:54:6e:d2:f9:e7:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5A:D7:C5:17:78:8C:6A:51:62:5D:1F:6C:2B:23:4D:45:C6:C8:4F
X509v3 Authority Key Identifier:
keyid:42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:66:98:d2:a2:4d:83:53:58:65:c3:a8:b2:57:c1:c6:eb:ed:
79:e4:4e:d0:fb:94:de:85:d9:9d:a5:82:6b:9c:8e:01:3f:ea:
77:af:41:d3:be:eb:87:da:c2:8d:38:e0:f1:da:46:c3:e8:2e:
b9:cb:2e:52:30:a5:c9:5a:c3:b4:4c:d1:1c:cc:30:b3:ed:a8:
a8:2a:c3:e2:5b:af:a9:5a:af:22:9f:b7:16:5f:8a:75:57:59:
79:28:77:bf:be:04:21:c5:9c:4e:f9:d0:3b:b1:13:b8:f7:6b:
79:91:d9:5d:fc:26:2e:29:de:40:d3:d3:f6:9a:e5:07:ad:f5:
ab:78:30:c8:ef:38:9c:cf:03:f3:13:6e:61:d7:7a:46:77:e5:
11:b9:26:93:e7:aa:be:b8:ec:0a:69:84:ca:27:b2:03:3a:41:
f3:f1:16:0b:97:34:59:a3:d8:f0:79:03:1b:15:c7:a4:7b:21:
01:a2:10:46:1c:fc:25:2e:67:e5:ae:33:3b:07:09:2b:68:e4:
39:b5:36:c3:48:ed:fc:3e:db:8e:8d:8c:10:f2:e7:1a:f4:ec:
03:a2:c7:25:9f:38:b0:95:ee:85:60:f0:f2:b0:a9:b3:7e:2c:
e1:5d:0d:9d:4e:c8:12:4f:9b:43:57:78:37:a2:ca:47:19:c9:
04:49:df:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:49:47 2025 by rpki-client