Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
File: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft (raw, json)
Hash identifier: JQJYSKMlune68dJbfSrWeop9vtmXXz3t/yRzlh/79jY=
Subject key identifier: D7:EB:78:49:B4:E3:5D:91:F7:84:AA:1E:85:0E:83:22:C1:DB:A2:70
Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
Certificate issuer: /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Certificate serial: 0197B70E6A5E5C97495DD6695605C1B4E2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
Manifest number: 0616
Signing time: Sat 28 Jun 2025 15:01:04 +0000
Manifest this update: Sat 28 Jun 2025 15:01:04 +0000
Manifest next update: Sun 29 Jun 2025 15:01:04 +0000
Files and hashes: 1: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl (hash: x+y+z0dqk4GABU+0MzXZAUHRlYyE6taf/yVBmVPUoEE=)
2: _Yxsd0eiDHHGuFhmQURGYrs_Tng.roa (hash: nE0pyzNZgsvFiQ/2XuRBIkiIZVx/tCbJehUAtaFFq7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6a:5e:5c:97:49:5d:d6:69:56:05:c1:b4:e2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Validity
Not Before: Jun 28 15:01:04 2025 GMT
Not After : Jun 29 15:01:04 2025 GMT
Subject: CN=d7eb7849b4e35d91f784aa1e850e8322c1dba270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:ca:e8:7a:95:23:0e:c9:9b:8b:ec:dc:91:
ce:39:61:21:10:4b:72:50:bc:92:e5:ae:c0:c6:ab:
b6:37:c5:5b:df:75:fd:d9:22:10:e9:bb:22:22:32:
01:28:62:2f:7c:50:43:ee:fb:63:4c:dd:8f:48:39:
48:9c:1a:b0:66:0d:de:72:4d:3c:73:09:9b:f8:54:
cf:91:0c:2a:fb:21:5c:93:07:ec:a4:5a:47:d3:ee:
a4:44:94:95:5e:9b:a1:86:f9:07:29:bd:45:97:6b:
25:21:41:52:91:21:6f:fe:e0:2d:31:c1:af:a9:b2:
d4:1d:0f:94:70:d9:ad:e3:e2:16:de:33:1a:d5:aa:
b6:f9:6b:ff:22:26:03:cf:ac:c0:de:66:7d:8f:74:
43:4a:3c:91:06:9c:ca:56:e4:e4:8d:6b:06:86:be:
c6:1a:fd:94:3f:47:03:67:44:88:c5:6d:14:76:b8:
2a:38:e6:49:70:69:42:92:9a:d6:90:e0:58:4e:3f:
e9:a5:ab:e5:18:1f:27:19:15:19:a8:66:71:b1:b5:
20:bc:01:46:7e:3b:9a:01:c2:13:77:cb:0d:51:0e:
b3:d8:24:fa:ea:a7:cd:f2:84:dd:04:bd:c8:2e:56:
dc:d6:a4:ea:3b:f4:b2:a8:8e:f4:39:f7:05:95:5d:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EB:78:49:B4:E3:5D:91:F7:84:AA:1E:85:0E:83:22:C1:DB:A2:70
X509v3 Authority Key Identifier:
keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:09:17:6b:5b:33:12:af:cf:4a:ae:1e:a4:42:3f:1c:f1:40:
75:b3:38:0f:aa:38:c8:44:ce:f0:b8:69:56:5a:e6:f9:16:fc:
b9:d0:de:dc:a5:5a:21:26:1e:db:c0:b3:e7:91:a6:b2:a5:b8:
12:13:2b:82:3b:f4:10:61:c3:5a:db:b9:ec:c0:f2:ea:65:f3:
24:5c:ee:b3:81:f3:b0:a8:d8:13:74:a4:8b:02:78:3d:c7:c7:
25:48:d9:56:21:b9:ba:ae:0d:0e:65:7a:86:33:6a:fe:63:8f:
07:2e:ac:c4:96:4b:2a:22:48:53:d2:1a:64:73:35:8c:d6:b5:
43:15:52:ff:5f:86:7c:2b:aa:42:23:e5:12:cb:24:f9:22:37:
b0:75:4e:cb:b2:90:3b:e7:db:d7:58:dd:a6:b9:d7:5c:f1:a0:
7e:b4:9d:c7:bf:58:a8:b8:24:8a:64:31:80:eb:01:cf:e7:fe:
86:ef:97:91:3d:4d:20:de:37:a9:b8:81:65:b1:22:94:d5:ed:
e2:a3:ad:7d:31:b7:bb:e7:20:f3:e9:37:47:9a:43:bf:25:26:
77:29:26:30:fb:79:34:6a:a8:85:c0:7e:3b:db:5f:5f:ed:20:
7e:ac:e8:6c:64:49:dd:99:b3:97:9c:16:7d:21:7b:58:47:82:
67:5e:b3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:36:02 2025 by rpki-client