Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
File: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft (raw, json)
Hash identifier: l5NlTx+7StRk0Wa05u5mZckDycZj+dubpDcjgVOKfG0=
Subject key identifier: A4:3D:D5:4F:44:BB:DC:37:58:3D:43:12:27:A3:E7:27:21:8D:DE:FB
Authority key identifier: 42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
Certificate issuer: /CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Certificate serial: 0197B70ED259BEC0BBA664819A94D5E2AC48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
Manifest number: 0B7E
Signing time: Sat 28 Jun 2025 15:01:31 +0000
Manifest this update: Sat 28 Jun 2025 15:01:31 +0000
Manifest next update: Sun 29 Jun 2025 15:01:31 +0000
Files and hashes: 1: GjL9gwLKb-oKSYTlHtFQE_CZaJs.roa (hash: mCVCuaWcX9YvC2fV3yIwbRSQDcC/PmXYfMHTWio0d9k=)
2: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl (hash: QhC8XFQbxEIth4dCDwPk68miLm2KMrCOgwVnvZOatsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d2:59:be:c0:bb:a6:64:81:9a:94:d5:e2:ac:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Validity
Not Before: Jun 28 15:01:31 2025 GMT
Not After : Jun 29 15:01:31 2025 GMT
Subject: CN=a43dd54f44bbdc37583d431227a3e727218ddefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:68:1f:b2:94:8f:1d:0e:36:39:b6:a7:4f:
bd:0a:17:ba:fc:97:a2:7a:4c:85:a3:12:84:3a:2f:
a6:7c:6b:1d:1e:ad:5f:cc:0a:1f:a6:86:f3:5d:08:
b7:2a:10:47:6a:9e:f7:3d:38:df:c2:47:c8:5e:a4:
15:ef:85:52:57:c0:c4:f6:60:ec:82:84:6e:08:f7:
36:e7:43:63:8d:96:d0:e3:cb:9e:aa:f5:93:44:44:
70:26:c8:31:90:5c:21:17:05:40:37:b7:c9:04:ad:
e8:72:d7:fe:35:55:bc:cb:88:98:9a:bf:25:96:93:
e8:7b:ac:7c:b8:79:3c:9b:42:17:d7:6b:5a:8d:83:
bf:fb:77:ae:a5:78:92:52:cc:d1:d1:3b:27:9e:d2:
32:2e:81:7d:60:11:c6:f2:e2:f6:b0:73:be:c1:36:
3b:5d:38:82:b9:9b:df:e9:87:ed:5b:dc:ed:21:4c:
0c:74:6d:d7:43:cb:35:3c:86:4d:e5:7a:ba:a8:79:
85:fd:31:b1:84:58:64:f3:6a:9b:af:86:bf:83:bf:
4a:4d:04:12:0f:1d:a3:b8:81:27:af:61:71:82:15:
3c:1e:5e:15:82:1c:e8:f7:43:91:c3:e8:26:98:5a:
39:d8:0d:1b:ec:65:d9:19:39:68:ca:f7:a2:06:37:
a0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3D:D5:4F:44:BB:DC:37:58:3D:43:12:27:A3:E7:27:21:8D:DE:FB
X509v3 Authority Key Identifier:
keyid:42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cf:ec:e4:ab:95:4d:86:60:4f:2a:5c:92:11:d4:76:0f:0e:
8e:7c:23:bb:6f:6c:14:78:e1:4b:ce:6d:a1:d2:56:f9:e2:da:
08:b1:02:21:4a:cb:07:46:e1:fe:16:b2:7f:7f:2f:61:27:9d:
ef:a7:16:22:d7:fd:41:20:71:23:03:ba:42:2b:87:06:cc:a4:
c2:74:68:52:ba:28:f0:95:d0:9e:96:d6:6a:4c:f6:e2:59:74:
4b:7a:00:14:b5:c9:be:33:31:d4:ef:d3:93:1a:3f:0f:47:ef:
08:26:db:64:07:c4:cc:d3:1f:2d:de:c1:a6:7b:55:8f:b2:7e:
77:59:84:b8:3b:56:91:da:3c:f3:bf:43:70:75:d8:eb:30:b8:
77:a4:27:09:f7:47:d6:fe:9a:88:06:cf:f0:2a:2d:14:bb:09:
8f:fd:11:fa:33:04:04:dc:8f:2e:6f:e7:a5:3d:ac:43:98:02:
47:2f:99:34:32:51:3f:23:d7:09:18:37:66:ec:29:86:cc:42:
a5:5b:f0:54:b0:88:78:5a:77:e7:91:b5:f4:80:d8:25:77:9c:
63:2f:1d:d7:a1:8c:23:6a:63:13:43:47:99:19:5f:51:e2:92:
1d:30:65:7f:25:4a:0a:e1:7b:da:dd:0e:cd:c6:32:2c:97:06:
04:70:cd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:29 2025 by rpki-client