Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: M3U3QfknYcLIFeqy1TwCAs4jDgLYapd5VXPguLovL84=
Subject key identifier: 55:96:D2:25:F2:CD:3F:CD:4F:CE:45:70:70:78:BD:E8:44:88:95:80
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 0197CCF186272E441F15A87DFCE497486179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 1564
Signing time: Wed 02 Jul 2025 21:01:09 +0000
Manifest this update: Wed 02 Jul 2025 21:01:09 +0000
Manifest next update: Thu 03 Jul 2025 21:01:09 +0000
Files and hashes: 1: 3q6-YPpyRU0SXTuI1scDeTuMZEI.roa (hash: zcjue8I7/Ud383gBlguymoi9BmtOE5qsj15wQFoYezc=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: PR8Pf/CrpmoT5Z2VQMUscw9/VWBXpUpWFwKsN6m0q0Y=)
3: iI3eBvPcK_oU8TVqkbYOtwG8vsg.roa (hash: ikZUasg08WdXub3shWtyhp22ZcEuhRbJ+MQpgo0gb1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:f1:86:27:2e:44:1f:15:a8:7d:fc:e4:97:48:61:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Jul 2 21:01:09 2025 GMT
Not After : Jul 3 21:01:09 2025 GMT
Subject: CN=5596d225f2cd3fcd4fce45707078bde844889580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:13:19:f4:f1:ed:50:9b:91:41:66:f0:56:
4c:ee:b0:cd:24:69:a5:5a:47:60:21:93:81:f6:fd:
04:ac:cb:ea:dc:01:20:c4:6c:37:61:a4:34:e0:8a:
d9:14:12:d7:73:5e:a6:a5:75:d6:1d:29:9d:3a:96:
07:fe:f1:d1:07:7d:75:6a:2e:75:af:f1:b2:e1:ca:
3f:4e:e6:59:79:0f:e9:ea:4a:84:a1:30:d3:54:de:
71:fb:1d:5e:3e:5a:1e:80:6a:3a:a6:e9:68:9a:a4:
46:be:36:73:d2:43:51:b8:19:83:d7:5f:0e:19:29:
aa:90:4b:f3:c2:a8:74:47:6b:6a:e5:98:ce:87:36:
c6:47:cc:15:f2:e8:b1:c0:ea:46:a4:74:1f:43:d8:
85:5c:9c:38:01:b9:8b:58:80:35:eb:19:da:dd:86:
b8:46:2b:a3:5f:9d:c2:24:ff:e7:a2:35:89:d5:4e:
35:c2:b0:1a:6e:b6:a6:3d:e1:53:40:19:7a:35:b8:
4c:52:f1:68:ee:0f:15:5f:00:93:e3:0e:45:e7:f3:
2e:a4:a1:09:b9:c2:ae:15:b6:ae:a8:03:eb:00:02:
23:43:98:fe:46:64:3c:a4:e4:51:ab:84:ea:75:8b:
02:29:98:e7:fb:94:f7:66:02:90:8c:b6:4d:4b:ed:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:96:D2:25:F2:CD:3F:CD:4F:CE:45:70:70:78:BD:E8:44:88:95:80
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a6:71:e9:6e:65:04:64:7f:c3:b9:b7:64:ba:b5:a0:ee:2c:
7b:51:5a:4f:6a:49:ca:89:d5:01:8e:5b:6c:24:40:67:ba:9b:
c2:08:41:7f:e2:fc:e4:86:e9:5c:f9:bb:13:8f:e0:76:31:b6:
5f:f6:a5:20:24:5e:56:40:f0:30:b4:26:f6:6f:13:59:2e:47:
1f:37:ba:0c:dd:f5:f9:12:b9:5e:26:1b:19:72:88:f1:aa:ae:
66:3d:84:a3:73:d3:d9:d3:d6:ba:44:56:62:2a:53:34:f6:5a:
ca:1a:2a:e3:88:a4:49:cc:59:fd:10:b8:a7:e0:3c:92:4c:dd:
8d:2b:5b:31:1e:3d:90:f4:cc:ca:9c:d7:0c:a0:15:7a:e1:57:
a5:8d:8d:aa:46:a0:3c:1c:2d:1e:db:62:1f:18:c9:54:59:f8:
8b:10:39:16:95:84:6d:d2:77:0d:22:43:4f:49:47:c6:c7:32:
a4:cd:e3:99:5e:19:09:a5:65:02:d5:1d:b2:fe:4a:ac:5d:fe:
8a:ae:06:bb:ae:79:f0:cb:96:ae:de:31:7f:90:a8:88:0d:ec:
bf:cb:75:1c:67:e9:b9:06:d7:7a:e4:be:35:3d:81:a5:8f:14:
6a:6d:06:5a:92:b9:b4:85:c2:b7:44:ba:68:ff:13:c4:00:4a:
46:30:e8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:37:06 2025 by rpki-client