Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
File: qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft (raw, json)
Hash identifier: jOG0Prz4OTLRagvAoFSY18F/gPnwjUveFKaxGhbt2+A=
Subject key identifier: D9:FD:77:37:5E:8B:7F:36:B2:4A:AB:9B:84:95:D0:08:01:0E:E8:01
Authority key identifier: A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
Certificate issuer: /CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Certificate serial: 01974DB2E5B58D8D837FDF6EBF8FC41E834D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
Manifest number: 106C
Signing time: Sun 08 Jun 2025 04:00:59 +0000
Manifest this update: Sun 08 Jun 2025 04:00:59 +0000
Manifest next update: Mon 09 Jun 2025 04:00:59 +0000
Files and hashes: 1: qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl (hash: bF5OuWUEG972nJS6puy3Tv1JEYyjM+Z1qAVwoA/b81k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:e5:b5:8d:8d:83:7f:df:6e:bf:8f:c4:1e:83:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Validity
Not Before: Jun 8 04:00:59 2025 GMT
Not After : Jun 9 04:00:59 2025 GMT
Subject: CN=d9fd77375e8b7f36b24aab9b8495d008010ee801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:b7:db:39:69:fa:f1:c9:9d:35:3b:ac:74:
45:a5:d8:c5:e3:6f:c5:d8:ba:ce:89:70:48:f8:c8:
bf:40:a0:fc:96:86:85:3c:bb:8e:62:a9:af:ac:b4:
89:40:51:09:65:38:6c:af:a0:c0:61:74:2c:6f:28:
63:cf:8e:65:4e:32:89:c0:4d:0e:24:64:fb:1f:ef:
45:63:af:0e:3e:84:d8:ac:5a:95:fd:10:ba:50:ab:
bf:03:f1:10:38:66:06:00:de:1a:cc:b4:69:10:95:
19:94:d4:7f:e6:9f:6c:95:ff:a4:f0:03:82:e4:09:
ce:02:27:78:5e:90:19:db:a5:5c:3f:65:fb:6d:c7:
dc:35:92:30:df:e5:5e:e8:29:73:99:7c:d9:65:82:
0a:55:4d:ab:6c:dc:a5:a0:be:03:e8:a0:21:1c:75:
66:2a:ad:4a:9f:7f:66:c3:ca:62:52:ad:4a:a9:4b:
6f:2f:b2:ad:97:29:14:f6:cd:ca:a6:33:c5:e9:58:
e8:84:5e:8a:ab:83:a2:1d:de:bd:46:5f:b9:5e:7e:
f4:74:b9:94:1f:35:16:35:ea:bf:50:37:73:d3:86:
e5:3c:e6:67:cb:af:6c:5c:62:28:59:94:41:fb:4d:
68:89:43:f8:c5:9a:06:88:54:63:bf:7d:cf:fb:03:
44:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FD:77:37:5E:8B:7F:36:B2:4A:AB:9B:84:95:D0:08:01:0E:E8:01
X509v3 Authority Key Identifier:
keyid:A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d3:71:52:85:68:fb:f5:32:e7:b1:99:88:e4:ef:2e:4b:d0:
12:29:4e:b0:49:46:b5:f1:5a:4c:12:e0:6c:d4:ab:a0:a0:01:
1a:b4:85:ab:4c:82:19:dd:46:02:4d:c1:f1:c4:bc:0c:a5:7a:
47:65:57:13:b6:5e:44:77:e7:b6:14:97:90:20:30:d5:db:70:
ef:31:b5:5e:3b:77:bd:c4:16:a5:7f:db:a7:69:71:8a:d1:b4:
3c:f5:2f:29:6b:7c:d3:cc:6e:fe:69:1a:a9:59:c7:1d:c3:4c:
db:ca:4b:7f:4c:28:f1:cb:04:06:aa:0b:28:fa:d4:2d:05:f0:
a1:74:bc:0d:b1:86:91:9e:fe:86:4d:7a:ef:05:fc:07:c9:b9:
98:51:9a:e0:19:da:aa:f8:cb:f0:95:d2:1a:fe:0e:94:1f:54:
3e:0c:28:c0:90:4c:69:d0:01:c3:de:9f:60:2c:c5:7e:5f:2a:
e3:fa:7f:e2:a3:f3:d5:04:f7:75:a0:37:55:f0:12:80:ad:4e:
8c:b6:c0:f5:eb:06:c4:62:e4:e5:6c:05:8e:a5:cd:92:dd:8f:
38:f9:f6:56:7f:16:6f:31:d6:2c:da:17:1f:ff:65:4a:5d:6e:
0a:e0:50:7b:f3:ef:b0:42:d7:ab:b1:90:43:60:a9:85:85:fb:
96:f0:36:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:10:00 2025 by rpki-client