Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
File: QlQ5sMp_FNqpthsRvRe9zBunOGw.mft (raw, json)
Hash identifier: ZvyGHX3RJAN2OzzCERVurKB7SFIP3Tp+fVNRK1R2dfk=
Subject key identifier: 67:A9:49:20:F3:EB:64:61:E3:E9:95:DF:98:4B:E2:E2:3D:34:25:1F
Authority key identifier: 42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
Certificate issuer: /CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Certificate serial: 0197B8214F313FA6AF88CD9FE6FA50C52892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
Manifest number: 059A
Signing time: Sat 28 Jun 2025 20:01:20 +0000
Manifest this update: Sat 28 Jun 2025 20:01:20 +0000
Manifest next update: Sun 29 Jun 2025 20:01:20 +0000
Files and hashes: 1: AKOMQZeZNylU7lZ2jfftfFZ_Z4U.roa (hash: Nv09RJ//WYPjGsqetOMSZHjfsxpAq/7Zyyhfe6u1lRs=)
2: QlQ5sMp_FNqpthsRvRe9zBunOGw.crl (hash: Bz088tnQNYsEg5r6dLx9Nx2yO7EfkYug0Xd3Pw8jTs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:4f:31:3f:a6:af:88:cd:9f:e6:fa:50:c5:28:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Validity
Not Before: Jun 28 20:01:20 2025 GMT
Not After : Jun 29 20:01:20 2025 GMT
Subject: CN=67a94920f3eb6461e3e995df984be2e23d34251f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:b5:d5:ed:ef:e8:4b:25:d7:15:9d:07:48:
f4:8b:66:98:73:1d:27:3f:c9:2d:b4:a5:43:57:cf:
10:7a:e3:88:69:3c:ea:9b:b3:f0:f1:12:20:e7:df:
5e:35:2f:8d:90:23:6e:fd:00:3d:91:12:23:99:8b:
03:50:0d:b6:6d:c4:ca:2f:41:ea:b4:37:10:e8:af:
c7:ba:50:33:33:b7:02:55:7c:8c:4b:c3:06:4d:17:
7e:5c:00:7a:a6:b8:e5:9b:04:63:aa:76:0d:bf:59:
99:bd:e4:2f:7e:c2:87:11:12:d7:47:87:5e:ad:8f:
65:21:5e:c4:66:d5:94:3e:bc:f8:3a:c5:36:71:1b:
68:a0:ad:c8:00:72:c6:7c:dd:c5:a0:3f:65:43:1d:
b9:a4:6f:28:f1:46:2e:4a:17:43:49:24:a2:0c:95:
c0:2a:85:8b:d1:64:17:8c:90:5f:9c:e4:d1:9b:38:
c5:8c:6f:40:df:63:d8:6f:39:e9:44:25:d8:b0:81:
a7:7e:3c:67:2a:46:a9:c1:e6:d8:06:18:af:25:26:
7d:6c:a9:3f:14:7b:f5:05:05:43:a7:73:6e:99:d7:
a5:ee:9d:d1:4c:ba:ab:a1:7c:65:01:94:57:85:de:
1e:6a:05:33:91:2e:4a:fb:4f:4c:f1:75:97:18:fd:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A9:49:20:F3:EB:64:61:E3:E9:95:DF:98:4B:E2:E2:3D:34:25:1F
X509v3 Authority Key Identifier:
keyid:42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:82:07:ef:df:f1:1d:7f:ee:7d:ed:98:e0:8f:6c:9b:22:d7:
94:76:18:ff:6b:d4:e5:78:f8:dc:4e:77:75:1b:cf:94:6a:36:
05:02:cd:de:ed:d9:c7:a3:29:6d:0c:88:bb:64:75:4d:71:da:
84:ea:92:d5:45:6e:80:eb:b4:e8:b7:ed:a1:55:61:65:93:bc:
98:7c:44:b4:d8:8a:91:43:3e:66:54:33:89:d6:3b:ae:d3:d5:
ae:08:51:d0:28:c1:54:bc:5f:01:e8:63:7e:6c:6e:0d:ad:a7:
87:b1:d6:a7:71:86:bd:47:94:67:ee:92:d6:85:2a:92:6e:f8:
b8:27:f2:c2:f5:23:28:8b:02:55:bc:bd:41:4e:10:9f:01:b8:
4d:ed:96:e4:04:3b:c5:1e:3d:e4:03:af:08:19:bb:ff:17:11:
cb:53:db:92:37:d7:8f:b4:60:c5:8c:55:bf:b1:35:1e:7d:69:
14:fb:70:b3:1f:8b:22:d5:f5:26:f4:c6:9c:4d:17:b4:e3:d5:
8c:13:54:95:27:61:63:d2:06:93:a8:8f:1e:29:d5:87:f6:57:
f4:09:6a:8e:7e:7c:ce:fd:72:d1:c3:9d:78:9a:5f:e5:d2:c4:
4f:84:ac:05:61:99:7d:0b:76:7c:92:7f:43:2e:ce:a0:75:e6:
de:e3:0e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:04:00 2025 by rpki-client