Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: vWbb9y/gUNqeSC5VftSyp5K3T2/Wkj7mREkFS95Y8ek=
Subject key identifier: 92:E4:81:2F:FB:7F:67:55:41:41:9E:CF:BE:E7:4B:7D:81:F8:DF:70
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 0197B70E91488142B39C3CCFA13939AA4D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 1228
Signing time: Sat 28 Jun 2025 15:01:14 +0000
Manifest this update: Sat 28 Jun 2025 15:01:14 +0000
Manifest next update: Sun 29 Jun 2025 15:01:14 +0000
Files and hashes: 1: G3gmpYNNP9JYrhaqiMsAU_EbEhU.roa (hash: JYCLWmpn2x1tQh9BdgAPsoxEsKAREWa0Chd9mMo9Jyk=)
2: P8r0bc3cljmCfBx136KPQShS3O8.roa (hash: zmPirJcGZiuowifL5CV0/efp4MLtVscwhTPAYNjTuUI=)
3: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: hJwSwLooqHoSuAbYMaDOc8H03DqxK+cMwTCR4DPOUxI=)
4: UEolp0R-hRHKGcTNGe0AoFHIQN0.roa (hash: MIhc/4dE+vXix8ModKbHmu/83XSuv98iPqMBE/1dwmU=)
5: Z4jvQpNliqhDur0DLqjSiIw-Y0A.roa (hash: DfQMPGoZNssvuxBrhCXJLfOHeuzlWhIa//2s8bwFkhw=)
6: bNTthk-6VNC8BPqO0CXb0wpv7Ko.roa (hash: U+k7jHV+TEaRK88+v5GTKPK+suUq7iPi4AwDl7BFsh0=)
7: zMd7m5mxh6U6DbEOt4OgQ4iJ1U0.roa (hash: bhC49t061SBKpaBxLjJKGavc/n4xCA6rE46xrsPt5jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:91:48:81:42:b3:9c:3c:cf:a1:39:39:aa:4d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Jun 28 15:01:14 2025 GMT
Not After : Jun 29 15:01:14 2025 GMT
Subject: CN=92e4812ffb7f675541419ecfbee74b7d81f8df70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bd:cd:c2:4a:f0:61:16:eb:26:dd:08:6d:ec:
3a:d0:a8:4a:89:ab:1b:63:fa:41:a4:bf:19:d2:73:
15:70:29:b8:48:51:32:8c:d6:25:c2:41:57:36:6f:
07:a4:fd:a7:b8:07:cd:e7:7a:04:85:41:f5:d1:f0:
77:d1:e5:e3:ee:03:28:40:7d:cf:b2:4b:1a:67:62:
d4:21:31:db:f3:74:b2:dd:2e:2a:79:5c:fa:91:cb:
c5:3d:ed:7a:36:17:56:4e:66:84:50:d7:e8:a3:cc:
18:d3:27:1e:8f:76:14:a0:f2:21:89:f4:62:3a:27:
8a:14:11:f6:8b:5d:ce:8b:af:87:94:78:a4:ce:0f:
08:01:38:09:ff:89:62:4d:bc:79:cd:98:5d:3f:1e:
73:00:b2:7a:e9:08:d4:ac:79:d1:85:0b:7b:ea:f7:
ea:e5:49:65:a2:fa:95:ee:ef:2e:ac:c0:15:9e:c1:
36:f1:1d:c5:81:1e:d2:72:4d:8d:80:ed:58:b6:b6:
f2:99:d2:25:b6:8b:64:d0:8a:f0:a4:6a:90:05:ba:
5b:c9:b3:ae:88:ea:9c:98:26:a2:c6:b4:d2:ce:d1:
15:19:ac:02:45:b9:8b:e2:53:ee:36:7b:2f:95:c8:
87:ec:1d:b6:52:74:eb:ee:d1:9c:e2:8d:94:16:19:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E4:81:2F:FB:7F:67:55:41:41:9E:CF:BE:E7:4B:7D:81:F8:DF:70
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5a:bb:39:08:bd:7c:5a:f1:ec:93:aa:44:8b:b0:a5:e5:fa:
aa:72:bf:8f:a2:3b:bc:75:96:43:41:82:2d:55:9f:20:27:47:
75:4c:a5:8d:5b:93:c1:b9:a6:f8:98:e4:4d:85:6e:33:62:73:
9c:8c:a7:3f:44:c3:de:db:63:b1:a2:33:11:3b:d3:81:66:02:
41:63:d5:6f:fc:79:ed:55:82:1f:11:f8:d9:eb:e5:46:86:fe:
de:94:57:14:ca:bb:61:8a:7c:43:10:9d:d3:22:49:16:ba:7b:
76:0b:44:eb:52:89:4b:1d:02:fd:18:ee:97:5f:1a:96:ae:fb:
cf:a9:03:11:4f:8e:89:46:7e:c4:6f:e0:fa:fd:a4:e3:6a:13:
a5:f3:39:58:91:03:93:00:7b:93:41:77:64:6b:d6:b4:ae:15:
11:af:fe:09:fb:10:57:1b:46:6a:17:02:11:d8:6e:d0:43:33:
8f:39:26:b7:84:55:3c:98:7b:9b:37:9b:e8:3a:de:58:3a:51:
0e:c1:34:72:08:2e:f7:ed:31:15:06:c8:09:99:b3:03:45:25:
f7:f6:65:f4:96:72:1e:f4:c8:58:a8:b6:fc:ce:3b:79:71:6d:
2f:fa:b8:b6:4a:6c:a2:d0:ea:25:20:ef:27:bb:44:2c:9d:6e:
8d:12:7c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:45 2025 by rpki-client