Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
File: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft (raw, json)
Hash identifier: tEy6nYpru8Oi1AgPjo3bh/uhM3ErPtMZxj+qb9uTN0o=
Subject key identifier: DA:95:DD:DD:C6:49:38:C6:19:F3:10:48:DD:23:5B:68:1D:3F:64:D7
Authority key identifier: 40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
Certificate issuer: /CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Certificate serial: 0197B6A17673B4AA62812B858A593AB61791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
Manifest number: 0DFA
Signing time: Sat 28 Jun 2025 13:02:04 +0000
Manifest this update: Sat 28 Jun 2025 13:02:04 +0000
Manifest next update: Sun 29 Jun 2025 13:02:04 +0000
Files and hashes: 1: 4hn1wVatZQI4O44VQ9afg3_3YCE.roa (hash: Wip87SKY/zyuxOVUXFbAARGlH7AAphh/zZD7B0INIf4=)
2: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl (hash: cfXaoRtdJfMjOPPTlg65kHa+oxlDcxXwjUWwZoqeJ6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:76:73:b4:aa:62:81:2b:85:8a:59:3a:b6:17:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Validity
Not Before: Jun 28 13:02:04 2025 GMT
Not After : Jun 29 13:02:04 2025 GMT
Subject: CN=da95ddddc64938c619f31048dd235b681d3f64d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e1:52:fe:08:72:a9:79:c2:db:dc:2b:0a:eb:
00:49:ac:20:fb:f4:c5:f1:c0:a6:4e:82:79:2f:54:
78:b0:33:0d:3b:a3:1f:df:ab:30:0d:fc:a6:15:16:
fd:7a:6a:d9:78:cf:48:a5:11:a6:da:29:22:8f:f3:
f6:31:c7:b6:e3:aa:11:97:a7:a3:92:e0:85:ba:12:
ce:ee:5a:aa:01:fd:58:39:e8:0d:7a:a5:aa:0b:0d:
d5:83:67:b4:48:ec:99:82:0f:f5:15:65:35:2d:ee:
0d:2a:63:4c:fd:e0:0f:6f:c3:b1:be:2b:db:4d:02:
23:e9:9a:2c:dd:33:c0:0c:48:40:b8:44:22:13:72:
15:57:3a:b8:8f:22:6a:c4:79:e2:24:8d:78:d3:cc:
d0:b2:82:f6:25:6e:87:f8:cc:51:77:fc:11:da:b5:
18:3d:79:05:79:2b:8d:96:da:ac:49:7d:a9:08:aa:
4c:5c:32:9d:a4:2e:c8:53:48:96:8f:5e:e1:84:c0:
3b:ef:62:d1:75:93:07:81:aa:ff:16:d8:83:cd:74:
49:15:79:bf:09:b9:bd:76:25:e9:12:10:54:87:57:
d0:0e:4e:1c:d1:e1:c0:fb:7a:52:e5:7a:ee:c1:1b:
32:2a:4d:62:2f:82:c4:d7:bd:e7:cd:92:aa:af:7b:
89:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:95:DD:DD:C6:49:38:C6:19:F3:10:48:DD:23:5B:68:1D:3F:64:D7
X509v3 Authority Key Identifier:
keyid:40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c3:14:e5:e0:05:29:e3:cc:e4:2e:53:63:46:36:36:c5:c1:
89:db:4b:77:c0:7d:ab:f4:57:94:c4:07:fd:0d:52:b4:e0:85:
d3:c5:59:f3:d3:86:9f:36:7e:23:19:ca:51:2c:a2:25:b2:97:
5b:04:0c:8f:07:50:2f:5d:fd:cd:09:a6:28:5e:79:0c:4c:4c:
d2:d4:20:f2:0e:53:61:c4:70:84:e3:c2:d1:0d:bd:c8:21:22:
d1:9f:57:3e:b3:f1:7c:33:22:23:5c:26:43:fd:55:46:d7:f6:
66:ab:eb:2e:5f:ba:bb:19:7f:91:4c:ba:92:38:43:b1:42:14:
4e:ee:87:9b:09:15:45:a8:6f:5b:aa:1b:18:05:45:e0:30:a4:
89:67:4f:22:e3:1f:85:c7:c7:22:72:04:94:f2:82:eb:a6:3e:
a4:03:d1:a7:d3:7e:a3:83:f9:96:40:cd:70:ab:8b:b2:81:e8:
e7:0d:70:4d:9f:6b:27:7b:9e:77:ac:df:bf:47:6b:7b:29:e4:
53:e9:3f:16:38:5b:13:76:3f:7f:b6:ed:01:39:80:55:c0:1f:
cd:7a:bd:bb:e7:f1:a7:9f:ac:43:ce:7a:80:c5:10:f3:69:b9:
be:dd:bc:cc:5a:1b:71:3f:b1:98:9d:f9:d4:a6:52:e6:4c:dd:
2f:28:20:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:57 2025 by rpki-client