Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
File: _QV2-GPffjIbHKUFDOLC3S_K2wk.mft (raw, json)
Hash identifier: rQXRTO+8y5IFNszyMEUTWY4vrg50qqpmEuWGAsbkZN8=
Subject key identifier: 2D:4A:5F:5F:D9:DF:2C:EF:4B:C9:BA:4D:12:86:54:8E:22:0E:10:62
Authority key identifier: FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
Certificate issuer: /CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Certificate serial: 0197B7EA83C31859BA2D987053298990A5ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
Manifest number: 0C36
Signing time: Sat 28 Jun 2025 19:01:28 +0000
Manifest this update: Sat 28 Jun 2025 19:01:28 +0000
Manifest next update: Sun 29 Jun 2025 19:01:28 +0000
Files and hashes: 1: _QV2-GPffjIbHKUFDOLC3S_K2wk.crl (hash: nbO/X+vqM/vgpgnRmdu30uZ8jwMBjB0pUXBX2+v7VRs=)
2: pV6U6t20LPmoE06QzHTKIt1mCdk.roa (hash: 4w6WEHf882+u2XxLJjz6oTPtOsIJ8lQmZFWVpNl8GG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:83:c3:18:59:ba:2d:98:70:53:29:89:90:a5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Validity
Not Before: Jun 28 19:01:28 2025 GMT
Not After : Jun 29 19:01:28 2025 GMT
Subject: CN=2d4a5f5fd9df2cef4bc9ba4d1286548e220e1062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:20:b5:ac:e4:03:e4:13:5d:b6:50:b0:84:
dc:8f:86:21:b9:75:74:fd:d1:ba:d1:1b:a8:08:b9:
c9:41:4e:11:f9:5f:61:06:f6:d8:fc:33:4a:6c:b0:
f3:a1:a0:ed:dd:46:d8:80:b9:f7:be:a1:fb:3a:53:
18:e7:2d:4a:f3:f6:21:97:53:b5:68:ca:9a:37:ab:
a3:f5:c3:5d:ab:f3:fb:ed:1f:48:38:06:2b:b1:87:
1f:fa:98:5c:cf:50:03:b1:ea:23:eb:6f:f7:27:b8:
b2:ac:41:ea:c0:e1:53:2e:06:4d:61:37:f2:a9:75:
15:f3:b5:7a:44:a7:1d:48:07:c9:91:94:ae:ea:fc:
4c:11:05:5d:bd:64:f4:15:7a:38:1a:ab:44:41:b5:
b1:94:b4:60:37:fa:00:5a:5c:d3:81:15:12:01:cf:
67:3a:7d:2b:52:13:f5:ed:10:df:84:48:d7:92:76:
ae:5f:76:6c:45:7c:df:2b:41:f8:bc:f6:d4:1d:88:
d9:2e:d7:12:db:85:33:52:72:6c:a9:df:70:02:29:
7c:92:e6:f7:08:8f:44:f8:c3:22:a9:72:9f:4b:f6:
33:09:7d:b9:d4:44:e3:24:f4:6c:84:77:05:e9:ce:
a9:b2:82:b0:9a:92:a8:03:55:cb:16:b4:f7:0a:76:
a1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4A:5F:5F:D9:DF:2C:EF:4B:C9:BA:4D:12:86:54:8E:22:0E:10:62
X509v3 Authority Key Identifier:
keyid:FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0a:9c:8b:d0:f9:74:12:c9:42:c5:70:ac:6a:b4:7a:04:f8:
2c:b8:c5:60:42:18:52:7d:a1:e2:76:48:25:70:bd:18:fc:96:
ad:75:b9:fc:6c:c9:64:61:13:46:a2:4b:ef:e5:7f:fd:af:4b:
83:4b:f2:f5:18:2f:38:d2:4f:fc:14:cb:f9:50:1b:b2:a2:88:
1e:b9:20:f0:f4:01:d7:3a:f1:ec:5d:9f:6d:58:10:64:95:1b:
d7:e5:08:e8:11:97:68:d6:84:2e:3e:9b:c2:ba:ca:99:96:83:
cf:57:0c:13:37:82:77:24:cd:97:24:c1:20:4a:8e:88:60:db:
f9:cf:64:b3:50:f9:8e:8f:e2:22:36:e8:70:4d:13:39:85:ba:
05:fa:d1:70:12:6e:a3:da:72:96:a7:28:b4:46:9e:30:ee:67:
ed:6c:c5:5c:b8:7d:a6:1b:eb:f5:c9:92:72:02:31:84:57:40:
44:03:93:a4:ef:c2:0e:22:3f:f7:93:e4:2f:86:a4:17:f6:e9:
64:08:ce:90:7f:02:ca:a1:f5:3b:f6:36:6d:f3:a2:07:ac:15:
43:d6:70:30:b4:09:d3:8a:08:fc:c1:cc:fa:f3:1f:68:53:c5:
e4:0f:a3:32:99:4b:20:4b:86:52:e1:af:ac:00:06:2c:dc:81:
12:6b:b8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:13:00 2025 by rpki-client