Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
File: QlbgyzjNYSXO4U5Jcii4SQodQOk.mft (raw, json)
Hash identifier: 96aZEw9zGDngmsQ6618fPwGPDX03hJa9vceZuM2xT9s=
Subject key identifier: 6C:97:E3:7A:CA:98:85:75:4D:CB:1B:15:E5:95:E8:A8:51:3D:1A:ED
Authority key identifier: 42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9
Certificate issuer: /CN=4256e0cb38cd6125cee14e497228b8490a1d40e9
Certificate serial: 0197B77C697310896DA6BE6E042404A43B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
Manifest number: 0511
Signing time: Sat 28 Jun 2025 17:01:13 +0000
Manifest this update: Sat 28 Jun 2025 17:01:13 +0000
Manifest next update: Sun 29 Jun 2025 17:01:13 +0000
Files and hashes: 1: QlbgyzjNYSXO4U5Jcii4SQodQOk.crl (hash: peW6sZgYNqsfl5xZOJ3Czt0JAH+jZj1nC7YklAIJILI=)
2: ekPIeumjzc0aQ-0qnlrmTiVhDJI.roa (hash: MI/BYhVlkTAuExjmOk0h+DG2/B/CqzwrvfdzA0OS10s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:69:73:10:89:6d:a6:be:6e:04:24:04:a4:3b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4256e0cb38cd6125cee14e497228b8490a1d40e9
Validity
Not Before: Jun 28 17:01:13 2025 GMT
Not After : Jun 29 17:01:13 2025 GMT
Subject: CN=6c97e37aca9885754dcb1b15e595e8a8513d1aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:6d:27:3e:3b:13:e1:12:76:e9:55:07:72:
1f:71:83:cb:6d:f8:f4:c7:ab:69:0e:fa:ea:d3:6a:
45:c4:cb:3f:a0:f4:9e:0f:22:b8:f6:d3:c2:4e:a1:
05:56:5f:00:94:92:95:78:8e:ec:79:6d:20:e5:31:
06:d3:40:a1:8a:54:0e:8e:f1:86:cb:8b:c2:73:16:
40:95:3f:28:a9:bc:71:d6:d1:d3:c2:4b:aa:a6:f5:
8c:06:13:57:b2:e8:2a:0f:1f:bb:f0:76:d5:19:94:
ab:8f:3f:d5:68:8f:6e:77:c2:34:af:53:da:37:dc:
5f:32:ef:92:0b:9d:8f:fa:76:f1:f5:8d:90:9a:ce:
bc:ef:3d:28:c5:27:39:d7:e5:0f:27:52:9d:fb:01:
0c:79:09:f3:03:47:f6:96:25:aa:02:a6:de:5c:5f:
4c:fc:3a:9a:5b:f0:27:02:4f:81:25:0f:66:b2:df:
63:5f:b4:a8:f6:30:fb:5c:7a:e3:c8:67:0a:9b:a3:
57:f9:c3:ed:e6:47:4c:c7:e6:ef:cb:46:58:65:e4:
56:a9:63:e0:81:e3:a9:20:b2:ac:17:0e:60:b5:a5:
40:c3:b1:80:88:8a:75:ef:6b:bf:ba:eb:3e:1e:bf:
43:cb:62:96:c0:3c:21:06:98:24:5a:20:dc:79:a0:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:97:E3:7A:CA:98:85:75:4D:CB:1B:15:E5:95:E8:A8:51:3D:1A:ED
X509v3 Authority Key Identifier:
keyid:42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5c:c4:c1:95:f3:0e:8b:e9:c9:f7:a4:f7:04:99:4c:41:ce:
2e:fe:f6:80:ea:ec:56:14:ac:6a:b8:fb:f4:33:80:af:51:89:
e7:69:98:b1:06:a9:c4:b4:0d:97:c6:53:87:88:17:2a:90:03:
a8:ed:88:8c:fa:c7:9e:21:e4:74:54:bc:67:fc:c1:db:ed:b9:
37:24:dd:21:9f:22:c5:87:4d:35:a9:00:68:8a:49:6e:ba:95:
e0:fc:9e:34:b6:dc:2c:ca:79:51:3e:bd:50:54:01:d9:98:80:
1d:77:e0:06:b5:d5:6a:e3:fe:94:4a:91:e1:c1:11:ca:13:e4:
82:0e:a7:d6:c5:43:30:42:74:a7:2b:ae:f6:aa:1c:4a:6a:a7:
c4:a6:ed:68:b2:bb:54:a1:98:44:cb:8c:97:23:bf:db:50:c2:
ea:74:b1:25:36:3c:e1:9f:f2:f6:27:0c:95:59:d8:1d:11:c1:
f9:be:8f:fe:31:bd:7f:bd:d4:ba:9d:70:b0:ad:4e:06:d4:c5:
d8:6b:c2:a8:ee:7b:b3:9f:41:47:99:d1:97:11:c8:1e:83:24:
6b:f3:e8:a4:2c:43:f0:e7:cb:b5:d0:fe:39:f9:56:f9:36:e0:
5f:e6:99:24:88:e0:fa:78:88:0a:7d:de:16:85:b6:bd:4f:0c:
3e:19:da:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:46 2025 by rpki-client