Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
File: Qs9KEo0J38S4sDWhLNgx-fewFGk.mft (raw, json)
Hash identifier: 8kS0jqLUiaBGtTXPIRm/CByRavAQJg/gxuDSB7xTSVs=
Subject key identifier: 3B:CC:33:C5:9B:00:07:BA:56:23:B4:E0:E0:EF:6E:A2:45:30:D4:A3
Authority key identifier: 42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
Certificate issuer: /CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Certificate serial: 0197B70E4F86530206D0AC55327D7419299F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
Manifest number: 0ECC
Signing time: Sat 28 Jun 2025 15:00:57 +0000
Manifest this update: Sat 28 Jun 2025 15:00:57 +0000
Manifest next update: Sun 29 Jun 2025 15:00:57 +0000
Files and hashes: 1: 2rG3zP2nsK1WFDdtam1fkefUVec.roa (hash: FYwcLySS6BHsPeqa2YZMNFpU87urYtsqq/j3a/UUmqo=)
2: G4MlXm_89uj6pHE4Hj0jm0JnAPs.roa (hash: IvJvABmtoL2D5H2lLbc36SYTprrxJ3+le+YIp65E/hA=)
3: Qs9KEo0J38S4sDWhLNgx-fewFGk.crl (hash: oQKys571gjaJqc+6rDuDgIt/0nMw74y6XZR+SgKKhfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:4f:86:53:02:06:d0:ac:55:32:7d:74:19:29:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Validity
Not Before: Jun 28 15:00:57 2025 GMT
Not After : Jun 29 15:00:57 2025 GMT
Subject: CN=3bcc33c59b0007ba5623b4e0e0ef6ea24530d4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:c6:e6:36:e4:30:8e:bd:98:0b:da:33:de:
c8:08:77:77:d6:e1:d4:81:f1:51:4e:45:87:fd:84:
86:8d:10:dc:9f:df:fb:e0:7a:b3:56:ad:8f:b6:d3:
18:5f:70:f3:0a:e4:f2:e8:c0:d9:da:f5:ad:c7:a8:
da:ec:54:1b:fa:bf:3a:d7:47:d1:1b:a0:db:62:97:
52:6f:5b:91:37:6a:82:cc:6e:97:dc:bc:7f:eb:40:
a2:8f:61:fb:2e:a4:15:58:3a:f6:84:08:49:a7:9b:
0f:1a:ba:ad:3e:3c:13:e4:e7:e6:0a:14:87:fa:f1:
9d:59:36:8e:11:24:c7:69:3f:f8:c0:ca:09:80:99:
10:38:d1:9f:1e:aa:71:0a:a6:44:07:44:82:94:ed:
68:81:09:e8:c9:f1:d9:ae:fe:dc:87:05:2e:90:55:
d7:1f:7e:27:65:fa:5e:35:7f:6e:92:0a:52:ca:24:
96:23:13:48:97:4e:49:46:58:36:92:5d:ea:3d:84:
71:e2:67:d4:3b:af:45:24:cf:de:d1:1b:35:1e:4d:
4b:14:a2:41:73:42:8f:95:96:75:f5:51:23:07:95:
68:d8:a4:5a:ed:b9:04:2a:4d:8a:ee:68:c2:70:43:
b1:52:b7:38:a1:f8:7e:e2:de:61:45:8e:f6:03:4a:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CC:33:C5:9B:00:07:BA:56:23:B4:E0:E0:EF:6E:A2:45:30:D4:A3
X509v3 Authority Key Identifier:
keyid:42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f1:58:b1:64:39:bd:81:a9:04:e4:34:25:f8:5a:8a:5a:76:
81:07:22:b2:35:e5:3b:56:9e:94:45:f2:e3:fe:8f:80:b8:bf:
15:14:74:79:7a:8e:d5:f1:c8:92:78:00:e1:e9:6c:05:f3:9e:
10:d5:20:b5:e5:c9:aa:30:ad:38:e5:f6:25:b7:d5:c5:a1:52:
ae:37:97:27:00:02:24:b0:79:cd:60:5c:9d:0f:20:ef:93:2d:
76:ec:c9:3a:52:60:e7:2d:35:b3:cb:3e:bf:b1:29:94:f2:1d:
ff:a5:e9:49:37:61:a2:db:35:a6:b6:80:79:a0:95:2a:f1:1b:
3a:77:aa:e9:a5:11:2a:82:c4:4e:b4:3f:95:2f:dc:bb:6b:f1:
bf:ae:6e:6e:34:c8:3e:a2:15:87:79:3e:20:fe:dd:56:01:4a:
d9:d5:e5:55:b6:18:bc:4f:d5:76:00:54:a7:59:e4:33:40:5e:
ac:52:58:1f:89:ad:e4:a1:e7:34:30:ca:f1:93:a7:cb:84:ba:
b5:d8:69:c6:32:0e:2a:2b:72:97:40:a0:fb:91:17:cb:63:8e:
5f:92:f0:48:f3:4e:72:8b:95:cc:fa:89:1a:2c:63:90:99:34:
2c:5e:a2:39:28:35:14:4b:71:4f:9d:a2:3e:4b:86:e3:c7:cc:
93:87:eb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:05 2025 by rpki-client