Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier: +oZ6AxnB01FLCvRgoVz08Jep1Rr7WvHXFX1IZJUQO80=
Subject key identifier: 79:7A:77:23:6A:02:A8:61:F5:9F:3B:60:A7:21:B7:9D:3F:0E:7A:55
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 0197BAEB9CC7EB095FFD805B36D2969BF792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number: 0F4A
Signing time: Sun 29 Jun 2025 09:01:32 +0000
Manifest this update: Sun 29 Jun 2025 09:01:32 +0000
Manifest next update: Mon 30 Jun 2025 09:01:32 +0000
Files and hashes: 1: ASgPIcJDfuPjOm8cjrU_yX9d6LI.roa (hash: FoRf6zKDxzFzqNvRaEaSA99AYo7HeXRCWwfxlBkAE5Q=)
2: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: h2bqg0BNqHeypbXzqrCCGEupd43eOgVJYEWp9v64F/o=)
3: jJHHC0ke4zgy7tsBzgOSiuwx8KQ.roa (hash: y6+yWoGbJ/QqPwBhk36qsFBsa4k6khZqZ0ihGtdEnfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:9c:c7:eb:09:5f:fd:80:5b:36:d2:96:9b:f7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: Jun 29 09:01:32 2025 GMT
Not After : Jun 30 09:01:32 2025 GMT
Subject: CN=797a77236a02a861f59f3b60a721b79d3f0e7a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:b2:4b:ea:8f:fd:ea:53:21:d9:ba:be:39:
e3:3d:67:5a:92:5a:88:9d:26:4b:fa:00:d3:57:a1:
d5:55:a7:9f:ac:a1:da:23:0e:4e:53:47:08:30:b2:
5b:09:86:72:6b:3d:ac:fe:49:25:15:8d:00:33:a3:
0d:50:76:db:0d:ec:71:82:52:80:23:a7:d4:d9:d8:
80:37:a7:6f:85:5d:a1:03:d6:87:60:0c:fc:1e:60:
b1:a8:37:f3:09:ff:f9:6c:f0:67:80:21:bb:c7:b1:
24:f0:67:b4:62:91:7d:76:1e:0e:7c:b9:37:cd:ba:
ef:9d:e5:d0:55:a3:9a:0f:00:8f:ba:b2:3e:cf:03:
f9:de:fd:8f:28:73:dc:d7:bf:2a:db:3f:5f:2a:20:
b0:86:73:ce:f3:ac:0d:6d:10:aa:2b:6c:53:36:93:
87:af:e8:50:a8:0d:ed:2c:9b:be:ee:86:fc:12:ce:
38:08:7f:fe:95:68:48:52:e2:dd:2a:41:c4:be:7b:
a0:e8:e5:77:f3:17:b4:b3:0e:3f:e5:f6:79:3f:86:
55:53:06:dc:19:c9:0d:12:bf:4b:ed:01:01:50:f4:
fc:d8:f1:bd:5f:c8:f8:e4:d7:3c:22:cf:56:6f:4e:
03:52:41:7a:d1:b9:93:21:c0:b7:1c:00:0d:fc:3d:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7A:77:23:6A:02:A8:61:F5:9F:3B:60:A7:21:B7:9D:3F:0E:7A:55
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a0:f1:21:ae:21:df:a2:03:bb:18:0a:07:89:97:a4:f8:86:
2f:75:40:da:41:e3:5e:a5:18:51:d9:79:84:d0:b6:d3:e0:5b:
cf:28:f9:32:88:54:56:68:0d:48:a1:ee:93:80:ee:39:10:77:
2e:aa:71:ad:2d:9e:6c:f1:5c:54:40:e3:41:0c:7b:ca:08:3b:
c5:5c:09:b9:c8:c9:69:62:f5:aa:94:2c:48:6a:f6:aa:70:7a:
b1:9f:92:28:6d:04:1c:52:69:ba:9f:10:3b:45:d1:3c:29:c7:
59:4d:0c:07:56:dc:16:c7:7c:5e:ad:9f:a7:d2:a7:4d:4e:f9:
04:79:63:29:94:ca:89:55:23:1f:f9:f7:ff:f0:e2:90:a4:e1:
0f:ed:f5:fd:d4:b7:af:93:b8:b4:52:a1:11:68:5c:68:15:0a:
83:a2:48:15:47:9d:58:a3:d1:53:19:35:67:7e:a1:36:f2:85:
19:c0:3b:5c:ca:32:37:46:f2:c2:b7:27:c2:b5:b5:77:35:c4:
c7:58:40:35:74:b0:3c:8b:f0:3c:0f:e3:e0:e3:a0:fe:09:f6:
ed:fd:6c:08:8d:1d:ca:60:e9:4f:08:a3:da:d3:21:0e:69:80:
6a:ea:d4:a4:66:da:59:50:0e:f6:4a:34:40:00:f0:12:db:05:
46:41:8a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:22:58 2025 by rpki-client