Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
File: QdD5FclU2DtKG_GEz7wTjEftpR4.mft (raw, json)
Hash identifier: tSqgoeVuXBbnPk9wQ1XU5n6c8nm/1jwq0OAvmArJ3YU=
Subject key identifier: 92:3A:B9:A8:5E:16:25:E7:03:56:DD:D3:9C:75:10:C0:09:88:BA:8B
Authority key identifier: 41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
Certificate issuer: /CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Certificate serial: 0197B6A23705AC448E7CC6B622705B95AE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
Manifest number: 1247
Signing time: Sat 28 Jun 2025 13:02:53 +0000
Manifest this update: Sat 28 Jun 2025 13:02:53 +0000
Manifest next update: Sun 29 Jun 2025 13:02:53 +0000
Files and hashes: 1: QdD5FclU2DtKG_GEz7wTjEftpR4.crl (hash: svlmLqP2sbHRS4R5z+PH5G+bS3JGE33mBGnC62TxyjQ=)
2: f6uKeUIzMA-uVptKc1ueYhFBFxM.roa (hash: yRxjbOfn/yIPjsEZSwuKIczmA3RcTEjtjojH+74JQXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:37:05:ac:44:8e:7c:c6:b6:22:70:5b:95:ae:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Validity
Not Before: Jun 28 13:02:53 2025 GMT
Not After : Jun 29 13:02:53 2025 GMT
Subject: CN=923ab9a85e1625e70356ddd39c7510c00988ba8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:7f:21:50:31:fc:3d:3d:4f:8c:a2:19:ff:
96:84:6d:a3:92:d8:c0:67:68:59:11:bc:b3:e6:5b:
0b:08:49:dc:50:a9:32:ba:c4:b4:33:ff:5c:35:ce:
a3:d8:e5:07:6b:2e:89:16:df:b1:59:1b:a9:de:63:
d5:f8:91:06:aa:40:bd:e2:c5:83:99:05:84:43:d2:
46:b3:88:13:b7:cc:30:8a:09:db:1e:88:14:4c:1a:
a0:75:f6:d1:27:38:fb:a4:09:39:38:24:b6:86:7f:
ba:3f:58:24:23:29:88:1b:3c:5b:ff:6f:dc:39:46:
80:4a:51:64:58:ab:54:64:51:95:0f:40:93:66:d5:
0d:f9:37:73:14:50:31:4b:7c:62:e4:b9:5f:1a:7d:
45:39:7d:52:90:b7:bb:6c:e9:07:0e:b2:60:ba:38:
d5:96:8e:dc:78:2b:d2:9c:db:9d:18:15:0c:72:2a:
57:3d:40:d6:c7:47:56:81:50:c6:e2:85:a6:b8:32:
3f:89:84:db:04:53:7c:ad:a5:ea:35:25:59:90:31:
5a:bf:24:cf:7e:11:ee:24:53:3f:20:c1:6a:e9:17:
6c:05:5a:df:ef:ec:af:d9:0c:8e:fb:32:36:5f:61:
2f:3e:9c:fa:5c:25:0e:a8:5a:95:56:4f:0b:3e:1d:
73:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3A:B9:A8:5E:16:25:E7:03:56:DD:D3:9C:75:10:C0:09:88:BA:8B
X509v3 Authority Key Identifier:
keyid:41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1d:10:68:44:c7:25:bb:eb:1f:fb:07:bf:1b:cb:39:ed:c6:
bc:8d:b4:e8:99:d0:ba:cf:67:06:2d:f0:ea:ed:08:1e:68:a0:
f0:7c:40:24:87:c0:31:c1:38:ec:b2:01:b7:74:dc:9e:41:50:
d9:d8:d6:70:d3:06:f1:19:be:66:c6:5f:78:bd:76:71:00:4a:
23:91:41:86:b3:d3:64:04:ec:34:81:e4:77:d9:d4:b3:bd:0a:
31:26:60:b6:0c:4d:ca:d4:24:1c:11:45:93:be:d3:ea:a2:07:
d5:08:e2:49:b7:b6:d8:d3:50:d1:28:18:e7:19:9f:69:46:26:
a5:cb:04:39:59:ae:8c:dc:67:54:fa:7d:12:1c:21:94:c9:7a:
d2:71:b4:e3:9c:ed:9c:66:34:82:20:fb:cf:d6:77:bd:ab:aa:
61:5f:3f:cd:d3:2f:f0:b3:56:14:a8:bc:66:13:33:c1:86:5d:
88:76:f2:3c:da:f2:27:6d:ea:ad:c9:4d:3e:d4:54:42:a8:81:
99:47:e0:76:fc:be:5b:3f:ad:e7:a5:6d:02:36:6c:27:6b:a9:
ed:b9:48:89:1c:f2:bf:88:ec:68:91:be:b7:26:a3:ee:ba:6e:
51:21:85:73:6e:4c:27:53:84:6b:21:34:0f:c9:52:a2:a9:2e:
ec:82:38:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:04:01 2025 by rpki-client