Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
File: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft (raw, json)
Hash identifier: 1iAd54OeQ22X/sFPueGUmBFgOXdwffrVA41UnB4NsRg=
Subject key identifier: CC:4D:EB:BC:9D:20:B2:43:FF:76:EA:F7:25:79:10:63:11:5B:6A:E3
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial: 0197B5FBD13CF9D53F272A3F34D300DA1951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 10:01:08 +0000
Manifest this update: Sat 28 Jun 2025 10:01:08 +0000
Manifest next update: Sun 29 Jun 2025 10:01:08 +0000
Files and hashes: 1: QTfS1SFb7VGTiGiN2dDueV3na8U.roa (hash: PLx/8DSVxOYWpxQe9zNuM4NTWNV61RdgV2qLjo81Rz8=)
2: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl (hash: 8QYUgddyY412r3Q0EEyXQ9ZLdXKD7SI05LXL9sZ+ags=)
3: TeM9OzX8sQpqWpDItBlSbfU5TWA.roa (hash: GQ0DaMaVE4ZcrNCViKsSogvmznrtITdeEy+eY3JUQMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:d1:3c:f9:d5:3f:27:2a:3f:34:d3:00:da:19:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Validity
Not Before: Jun 28 10:01:08 2025 GMT
Not After : Jun 29 10:01:08 2025 GMT
Subject: CN=cc4debbc9d20b243ff76eaf725791063115b6ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:ea:ee:63:df:84:37:e1:54:2d:5e:c4:3a:
1d:24:8f:1e:c4:83:2f:80:94:49:84:88:6f:59:32:
ea:99:68:7b:ad:fb:f0:5e:22:12:e6:2d:b4:cd:1b:
f1:be:55:b4:df:90:d4:55:dc:2e:61:a2:7a:65:98:
de:fe:a8:49:ae:d7:7c:05:3c:78:29:17:99:87:fb:
5f:90:7f:62:ad:69:32:6d:c4:23:3c:f8:99:9b:13:
b5:f2:e3:8e:da:17:ec:9f:b8:21:95:96:cd:66:89:
05:b3:91:39:54:b0:ff:52:ed:d6:8d:68:2b:c3:39:
0e:ac:68:5f:4a:82:5d:81:5e:11:0c:eb:dc:58:83:
1a:d0:1a:30:3f:61:13:58:27:6a:a9:bd:63:19:f7:
0a:36:0b:32:21:ed:8e:b8:e7:cd:97:10:89:26:be:
0b:77:f1:c0:6d:e4:d4:bc:b4:2b:a8:a5:1a:3d:23:
3b:a9:8f:cb:2f:3a:83:8d:f6:dd:0d:fa:67:b5:4e:
71:55:d5:b6:69:44:da:94:4f:a3:a8:59:55:8c:5c:
2a:7d:99:1b:cc:85:56:a8:8a:69:33:73:4e:5d:0e:
1c:a8:cf:97:7d:af:6e:f7:87:db:b3:6d:3d:25:be:
5e:b7:97:d8:0d:81:23:37:54:21:bf:03:dc:2b:24:
5a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4D:EB:BC:9D:20:B2:43:FF:76:EA:F7:25:79:10:63:11:5B:6A:E3
X509v3 Authority Key Identifier:
keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:62:a1:ec:96:0d:5b:7b:31:05:02:d7:c7:b1:58:ae:a5:84:
36:6e:6c:b1:97:10:28:5f:4d:8d:10:bb:0c:0c:ba:c6:94:80:
29:2b:36:59:8b:95:65:a6:ee:60:aa:6c:75:29:c0:48:94:ed:
c8:e4:cf:da:ea:60:0d:57:6b:13:61:f0:56:68:50:c7:73:4a:
6e:03:4c:88:45:7c:f2:f0:01:67:19:6b:5e:49:25:06:16:3a:
e4:40:1d:de:1e:aa:54:1d:3a:ea:37:ec:58:13:ef:13:db:6e:
23:e0:f2:16:f8:f9:b3:32:7e:da:fd:f9:38:27:c1:8e:e4:91:
e3:8c:eb:ed:83:02:95:aa:38:7d:ba:55:6a:c7:71:02:95:9c:
39:df:66:0e:aa:b0:68:89:57:bc:7b:95:45:f6:b1:82:6d:47:
f7:c1:e8:ad:a3:66:1f:16:dd:4a:c3:21:a4:62:17:b0:dd:1c:
ce:d2:aa:4b:48:21:e7:85:4a:18:b1:59:f2:c0:0f:0c:bb:24:
d5:bf:0f:68:f4:81:fe:cc:c3:e4:41:16:06:88:d9:47:2a:9e:
9e:2d:a9:21:bb:cd:4b:a8:cc:95:f3:0b:2f:0e:b5:26:7a:f8:
7f:15:9e:43:fc:97:7d:fc:73:e6:4f:8c:2b:81:9d:d1:19:be:
a3:fe:45:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:05 2025 by rpki-client