Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft
File: QpeJWSkM6bssG1thREOEQVta-tY.mft (raw, json)
Hash identifier: /VoqJsUXqtawgevnJcvGBRw0PKXabefCZOw6xe0eXzQ=
Subject key identifier: 9D:71:75:18:B4:61:06:3E:52:A4:2D:60:B9:96:6B:4B:56:86:C4:4B
Authority key identifier: 42:97:89:59:29:0C:E9:BB:2C:1B:5B:61:44:43:84:41:5B:5A:FA:D6
Certificate issuer: /CN=42978959290ce9bb2c1b5b61444384415b5afad6
Certificate serial: 0197B6A0475767A36C3FBE238C2913151061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpeJWSkM6bssG1thREOEQVta-tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:00:46 +0000
Manifest this update: Sat 28 Jun 2025 13:00:46 +0000
Manifest next update: Sun 29 Jun 2025 13:00:46 +0000
Files and hashes: 1: QpeJWSkM6bssG1thREOEQVta-tY.crl (hash: dqD24VpCmZ+8yjiBQsjzGWCBjWzFYMWXmOzVe/1awfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpeJWSkM6bssG1thREOEQVta-tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:47:57:67:a3:6c:3f:be:23:8c:29:13:15:10:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42978959290ce9bb2c1b5b61444384415b5afad6
Validity
Not Before: Jun 28 13:00:46 2025 GMT
Not After : Jun 29 13:00:46 2025 GMT
Subject: CN=9d717518b461063e52a42d60b9966b4b5686c44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:43:1f:6d:f6:f0:42:14:5b:bb:80:ee:a2:
03:d2:1e:25:35:1c:2e:6f:4c:ba:7b:0f:27:5a:52:
5e:4d:4c:4a:98:4a:e1:4f:07:e2:e7:5e:70:d6:fa:
55:df:cb:bf:b6:48:9e:c3:88:2c:a7:8b:b4:93:3a:
cf:7a:a3:e4:65:89:46:12:5c:e6:98:98:83:eb:29:
8c:a7:00:3d:c5:1a:36:86:fa:2e:69:42:d5:ff:88:
84:12:ac:4a:bd:fd:90:6d:d2:94:9f:59:ea:6b:74:
fa:cb:96:0f:84:51:e5:04:54:51:f5:c4:8f:18:98:
9f:3b:22:65:5f:8f:42:0e:58:c7:eb:95:81:ba:a2:
5d:46:bd:99:66:88:1e:05:c0:15:44:2f:6b:33:cb:
1b:38:75:e1:fe:61:54:5f:8c:34:50:a1:7a:c1:6a:
1f:0d:e1:55:e0:5d:38:bd:06:8a:3c:15:69:61:ad:
10:16:05:71:8b:56:22:84:33:4c:29:99:db:a3:a1:
98:fc:16:d3:e4:3c:5b:b8:ac:e2:35:ba:89:33:c5:
c1:af:14:f8:7d:4e:9a:93:cd:45:b8:a1:d2:4d:a7:
84:5c:7e:2a:86:e1:ee:32:00:51:6c:1e:28:2d:23:
6f:16:f2:4e:90:a9:ad:20:f3:4f:80:46:04:c9:9f:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:71:75:18:B4:61:06:3E:52:A4:2D:60:B9:96:6B:4B:56:86:C4:4B
X509v3 Authority Key Identifier:
keyid:42:97:89:59:29:0C:E9:BB:2C:1B:5B:61:44:43:84:41:5B:5A:FA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpeJWSkM6bssG1thREOEQVta-tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:32:06:cc:0b:da:88:63:f4:6c:49:9b:ab:14:4d:58:3d:74:
05:d8:cc:8b:74:41:9e:08:89:96:28:bd:07:57:58:06:5a:ca:
d8:ef:73:57:c1:33:e0:19:19:c7:5f:c6:2c:52:4d:06:bc:5d:
3d:ee:84:a5:fb:9a:67:e1:d8:9d:09:ca:f4:ec:52:23:03:87:
48:49:17:ff:2e:49:05:1d:a3:d6:b9:e9:28:24:8e:ba:8b:c6:
93:0c:cf:46:b0:27:78:c7:91:4a:10:70:f6:73:87:bc:bc:b4:
1d:3c:a0:58:ee:3b:11:bd:90:15:4f:a3:ea:be:3b:55:12:62:
36:f3:22:5a:5d:54:71:9f:f8:36:c8:74:4a:8d:ee:18:04:c0:
64:b0:d1:ad:5d:1a:c3:8b:b7:da:08:3d:5a:89:d8:5c:2e:30:
03:fc:61:57:a7:bd:83:d7:0a:15:8a:c5:19:d5:0a:49:33:00:
b3:5e:36:f9:2e:df:43:e9:d3:be:51:c8:a5:1d:d0:7a:54:04:
e2:f8:d1:a7:cb:24:17:ea:67:75:9d:b8:7b:00:5c:19:e0:9c:
d7:9f:f7:2f:55:06:0c:98:ec:5a:63:8e:b5:b8:55:69:2f:9f:
10:f8:55:b8:6d:17:5f:80:99:a2:96:0d:12:97:09:90:20:a0:
29:b4:8d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:38 2025 by rpki-client