Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier: sOQirGGZdApKxU95qW+T5foxf1IRKFdVnFJIM4FL/9g=
Subject key identifier: B3:C0:CF:D5:F5:6B:20:4F:06:BF:FC:1A:E7:1B:35:62:19:34:FD:69
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 0197B9A1DBDF027F527D8BC3CF5227B0C5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number: 0D47
Signing time: Sun 29 Jun 2025 03:01:21 +0000
Manifest this update: Sun 29 Jun 2025 03:01:21 +0000
Manifest next update: Mon 30 Jun 2025 03:01:21 +0000
Files and hashes: 1: GQOl6LTvNyPMyG3KjW9Ajp0Bvpw.roa (hash: eZX/fpaYpvDnXloavaVJKtIU2XKfpzNfzwR74TFia7o=)
2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: sLdd/T8SP1CnFS/qHwqQHGrqgKtqZruMHToBGRqKxc8=)
3: b5Ug6NPJo2XtezY8UVzxnmPE-i0.roa (hash: VB+B1HYKvDBDwa8bPpxYYXoTuHADEZJRpgBpaSqbPu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:db:df:02:7f:52:7d:8b:c3:cf:52:27:b0:c5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: Jun 29 03:01:21 2025 GMT
Not After : Jun 30 03:01:21 2025 GMT
Subject: CN=b3c0cfd5f56b204f06bffc1ae71b35621934fd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2a:35:09:c8:e5:3e:66:d9:c0:48:d4:98:3b:
b8:e9:70:17:94:d8:cd:3d:b6:a9:39:82:59:b9:44:
61:cd:00:ec:30:a2:32:e9:d2:73:2f:43:f4:22:d6:
37:9f:40:77:45:4e:ba:20:50:f6:8d:ab:3f:44:23:
3a:89:7f:1d:bb:6f:ad:33:69:01:f2:b9:bd:fa:2b:
cc:18:9e:0f:6a:2a:ab:e3:5f:63:0b:70:99:7e:98:
2e:39:0b:a1:e6:bc:e5:31:7a:11:4f:34:43:23:d7:
33:07:74:66:0c:8a:6b:b4:9c:9c:f0:9b:11:b5:15:
38:34:a6:60:95:b0:fd:ec:ce:35:35:6b:08:20:28:
7b:1a:75:73:d8:25:0e:af:d9:e2:c0:b8:0d:a6:db:
d5:ab:15:d7:9d:5c:e8:7c:7d:38:a4:7b:ea:fb:71:
64:19:17:a1:26:c1:53:65:9f:49:ef:8f:5a:d8:75:
df:21:d4:10:0e:fc:87:70:e7:d7:00:71:68:79:ac:
57:d9:2c:8a:e5:e1:3d:d2:78:36:af:30:05:c0:77:
24:bc:99:57:2d:6a:97:bf:1f:90:3c:61:16:a6:f6:
56:17:44:4f:0a:61:5e:01:af:68:9e:25:14:83:86:
0a:e4:ae:9e:c5:25:87:7b:ee:a4:65:27:70:80:07:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C0:CF:D5:F5:6B:20:4F:06:BF:FC:1A:E7:1B:35:62:19:34:FD:69
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:26:30:99:5a:f3:67:68:28:06:d7:a6:71:2a:87:1a:e4:84:
ee:f5:71:1c:ad:38:e6:16:cb:a8:0f:71:7c:55:f8:58:f0:20:
3f:83:9d:57:8e:39:34:b0:b5:95:44:0c:e8:8a:1b:81:e2:10:
06:69:a4:32:09:5d:76:57:9a:73:d6:9e:6b:4f:a4:d0:51:82:
c2:91:57:e7:69:01:dd:f3:8d:a3:8a:13:e3:92:aa:60:89:c5:
a9:e5:59:c6:5f:8a:ae:9a:5e:8e:f0:95:b6:40:31:3f:67:0a:
73:0f:e7:d3:28:a0:cc:c1:05:3f:c8:2f:12:26:3c:13:09:79:
41:83:cd:10:3c:ad:e0:82:dc:73:57:d1:d4:8a:3f:ec:5e:3c:
52:b9:9d:01:ac:43:2d:d4:b7:c8:75:72:04:3b:44:65:eb:21:
2d:06:6d:72:7c:6f:1b:ad:41:82:6c:ab:ca:73:4a:46:50:b3:
82:fe:13:f1:ec:b4:a1:81:a3:c6:be:ef:5a:59:19:2d:5b:9b:
e1:3c:bb:f3:6a:34:f7:ed:2f:cb:ec:94:c1:0e:b7:9f:ec:42:
7e:3c:09:b5:f2:52:78:ae:8a:b1:a6:22:53:f6:63:1d:e4:6a:
4e:ff:45:16:33:b2:66:5e:8f:84:d2:a5:a1:43:61:37:49:0d:
1b:b9:1f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:31:53 2025 by rpki-client