Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
File: QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft (raw, json)
Hash identifier: oN8Uk4B9ml1zlWP9H1+6TT2mfd8H3HA4jCqha4ZvGMc=
Subject key identifier: A6:71:4B:EF:37:82:A6:6F:86:8B:A7:DC:4A:E4:3E:F5:45:10:14:54
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 0197B6D73F76752CE50EC0C117D812E3EF82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
Manifest number: 07A2
Signing time: Sat 28 Jun 2025 14:00:49 +0000
Manifest this update: Sat 28 Jun 2025 14:00:49 +0000
Manifest next update: Sun 29 Jun 2025 14:00:49 +0000
Files and hashes: 1: QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl (hash: 147BRpoFP2XVSNWKXULaW2ha+s09bzXySRULIbY4TiI=)
2: bC15MrNbvaHvc_M6-zAakBbyrww.roa (hash: w8+yaL/cYfTmT9iePHgIvZ5N3rV9yU+eea+yLs6LsB4=)
3: ey2THT3vxYZt7oPHCFWCPLFWheU.roa (hash: 24QSz9cCbqNcvUaGh3j8TGkQz+MS9kGdeKEW+Heclys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:3f:76:75:2c:e5:0e:c0:c1:17:d8:12:e3:ef:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Jun 28 14:00:49 2025 GMT
Not After : Jun 29 14:00:49 2025 GMT
Subject: CN=a6714bef3782a66f868ba7dc4ae43ef545101454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2a:2b:92:53:4e:21:c1:98:c4:3b:79:9c:b0:
50:96:4d:93:0b:79:45:70:e7:9c:cd:3a:2e:ba:24:
13:3e:9c:8e:bb:fe:7d:ce:df:85:94:69:18:eb:a4:
76:28:bd:c8:2f:b7:80:01:77:93:e2:10:86:d7:4e:
6a:e2:c9:2c:72:75:1c:e2:90:40:43:6d:10:b0:00:
f4:bb:2d:9d:49:8a:ca:92:4c:90:7e:2f:97:70:75:
17:71:69:1b:e5:aa:5a:90:2d:f7:e2:4e:fb:b0:8c:
33:06:7d:bb:7e:49:a9:b8:e5:6b:21:e2:2b:9f:46:
fa:9c:4d:0c:8b:aa:ac:3f:a2:9f:8f:49:0f:19:bf:
2e:14:61:cd:b9:87:cc:db:5c:04:90:4f:36:4e:90:
2c:54:81:14:f2:69:8c:79:5e:71:e8:34:f3:cc:ae:
eb:97:a6:9f:19:3e:81:00:b3:75:32:83:3f:aa:9e:
79:37:1d:8d:0a:6f:d9:db:b3:33:6a:0c:68:96:28:
31:01:ff:fb:5c:ab:79:45:1f:9e:90:07:b9:c8:bc:
10:f8:20:ea:17:ce:3c:d9:61:52:58:f2:e2:05:b8:
73:e9:97:eb:f8:13:58:d4:72:8f:c6:90:3d:c7:ee:
3e:3c:49:ef:78:9e:2e:20:64:10:0b:80:3e:c5:4c:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:71:4B:EF:37:82:A6:6F:86:8B:A7:DC:4A:E4:3E:F5:45:10:14:54
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f8:a4:1b:10:a2:b1:2b:4f:b8:8d:c2:59:b7:ca:e5:e1:48:
b0:49:dd:da:9f:e3:56:e9:9a:cb:92:e9:d7:b6:b4:4b:c1:9c:
6d:8e:44:45:53:bc:c1:f3:72:af:39:97:46:8e:cc:6e:88:4a:
16:31:a9:d4:79:bc:e7:c4:45:f3:97:cd:23:4b:f4:f7:fa:82:
f7:a9:72:3c:98:5a:9c:62:68:45:39:68:f2:95:9a:fa:fb:f9:
6a:e2:2a:9c:fe:12:44:f8:a6:7b:f5:b1:e3:d8:01:1f:25:4b:
fb:79:bd:8a:f4:64:fe:5a:c5:3e:84:f5:dc:38:87:16:6a:0f:
a9:1b:5b:72:9b:29:7b:b5:77:f1:a6:6d:ac:25:e6:d8:dd:8f:
9d:3c:38:b7:2c:cb:96:eb:45:a1:a0:64:f7:eb:7f:7d:01:a7:
9e:46:a1:51:02:cc:d6:07:1b:33:77:ab:c1:3f:ad:e3:f2:4f:
e9:44:a5:b4:7e:e4:fd:32:20:f1:33:fc:79:91:f9:75:02:65:
f7:ec:29:5a:1d:81:24:be:88:b0:ae:cf:d7:2f:64:e5:87:f6:
2d:f1:f4:bb:e8:a0:51:8b:65:c6:00:b8:06:37:81:67:59:a1:
9e:dd:bd:ea:12:f7:d0:8c:61:79:e3:76:d4:d1:0a:35:5d:2a:
da:3e:56:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:28:59 2025 by rpki-client