Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
File: Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json)
Hash identifier: gufXQ0yuSno9dFS5Lw57V+PVrfgUzF24QDpgVTbc54s=
Subject key identifier: 40:0A:1A:22:E1:3B:9E:76:28:04:5E:C6:47:AB:CE:5A:1C:CF:B6:8B
Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Certificate issuer: /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Certificate serial: 0197B6A21134F86BCB684705555C40F61F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:02:43 +0000
Manifest this update: Sat 28 Jun 2025 13:02:43 +0000
Manifest next update: Sun 29 Jun 2025 13:02:43 +0000
Files and hashes: 1: MCPNj8vuGzZknoWdqGIIivLkJGU.roa (hash: 4hhwQet2SGHC4RmJ2ByvcZIanR2/yV/AqfOhLRjbUPM=)
2: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: afN8q5c2QQx8dVyBNTIkPXr92XgKOH8COjDxruFR2mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:11:34:f8:6b:cb:68:47:05:55:5c:40:f6:1f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Validity
Not Before: Jun 28 13:02:43 2025 GMT
Not After : Jun 29 13:02:43 2025 GMT
Subject: CN=400a1a22e13b9e7628045ec647abce5a1ccfb68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:3a:2a:f5:ec:36:69:90:88:df:26:47:f4:
4f:a7:53:0a:a3:51:5e:43:25:5f:04:f6:0f:22:6c:
93:aa:a0:7d:e7:80:f2:21:b7:89:ad:15:6c:bc:7a:
6e:f2:41:2b:05:c0:07:fc:02:0e:80:23:a8:a3:24:
32:af:8c:c5:a9:49:2d:c5:a6:f7:14:78:e6:b5:46:
db:13:e8:5f:84:41:da:61:b1:4f:a8:98:52:6c:68:
28:02:06:48:34:08:fc:b3:1b:c5:c5:ba:14:a3:f4:
a5:56:dc:70:ef:7b:23:ff:d4:e5:04:04:ee:63:56:
e2:b3:58:e2:30:a3:e4:9c:18:6e:de:31:64:47:79:
e1:d9:88:97:81:f7:f3:e2:f9:5f:39:f5:e6:57:9b:
ae:3d:63:08:4c:08:6e:23:dd:cc:98:8c:0b:41:25:
d9:14:e0:41:e5:54:38:45:01:47:51:a3:2c:4f:09:
4d:c2:22:05:c4:ea:68:5e:09:56:55:fb:4b:32:34:
d4:34:6b:e1:9f:b6:c1:04:e5:89:56:2c:39:8a:d7:
0c:28:64:05:b5:6c:db:5d:ab:b4:d0:39:fe:50:02:
3a:0b:cf:e1:62:f6:9a:6d:e6:07:1d:72:af:97:9a:
89:c6:d2:42:e4:de:2a:6b:f2:fa:3e:7e:e9:af:94:
dc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0A:1A:22:E1:3B:9E:76:28:04:5E:C6:47:AB:CE:5A:1C:CF:B6:8B
X509v3 Authority Key Identifier:
keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b2:83:4b:eb:51:4f:31:f1:27:7a:c3:a1:9f:a4:d9:97:28:
b1:3d:9e:c9:80:25:91:d9:6d:9d:4a:0b:36:14:4a:a1:ed:ff:
01:4c:93:9c:4f:ca:a2:c0:fa:65:d7:78:e1:ea:2f:2c:2b:d1:
f3:36:e7:00:11:1f:9a:90:47:d4:23:d0:32:1b:b6:d0:c3:11:
16:d2:08:7f:04:55:e5:bc:b6:b0:4b:ce:bd:80:f8:88:9f:40:
b4:c6:e3:3a:3a:ec:aa:24:15:f8:1f:20:b0:09:e4:90:9f:3f:
e8:b4:98:e6:c7:e9:00:c3:be:27:7c:47:72:45:b0:e1:b3:02:
b9:59:b9:ef:20:5f:34:48:01:f1:44:fb:74:f5:0b:a5:67:49:
92:ff:c5:03:bb:d4:ea:e5:98:af:2e:e6:75:52:da:94:19:a0:
6d:ef:ee:10:59:96:a5:4e:aa:16:c0:a7:b0:dc:89:7f:38:ae:
4a:b9:6b:e2:12:3b:80:3e:e4:08:f5:0e:7f:ad:07:f5:cd:79:
0c:9d:73:7e:90:ec:6a:31:73:73:d5:3d:ed:e0:54:0e:2f:78:
fc:17:ff:2f:b5:ca:2e:9b:eb:8c:17:90:ca:e0:eb:88:a3:0a:
41:f2:35:22:08:8c:1d:31:ca:48:56:07:26:6d:c1:b8:a2:52:
b4:d2:13:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:51 2025 by rpki-client