Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
File: qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft (raw, json)
Hash identifier: cKIdg4bKYu+xUn/TnSfaOXiknf+5+jBBJMt9ACjV12I=
Subject key identifier: AF:40:93:3A:50:0B:0A:7C:32:ED:FB:7A:97:76:60:12:1D:3A:A9:C6
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial: 0197B70EC72CA9649EF8F96E59D1C612B9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
Manifest number: 069E
Signing time: Sat 28 Jun 2025 15:01:28 +0000
Manifest this update: Sat 28 Jun 2025 15:01:28 +0000
Manifest next update: Sun 29 Jun 2025 15:01:28 +0000
Files and hashes: 1: 8CcKJiF0r4FrDqB9K7MCSFJJvag.roa (hash: oH5satYFVvZ45Q+JWd3Hf90Jew1mrnQWjIvCBL11FrU=)
2: qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl (hash: wfo5EhMw7galrsRroGERB5AkMQ0VU/qTQCVZQe23vNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c7:2c:a9:64:9e:f8:f9:6e:59:d1:c6:12:b9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Validity
Not Before: Jun 28 15:01:28 2025 GMT
Not After : Jun 29 15:01:28 2025 GMT
Subject: CN=af40933a500b0a7c32edfb7a977660121d3aa9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:4c:21:e5:85:3d:d5:eb:5c:3d:9b:2d:fa:
c3:a5:0f:e8:b7:ec:e8:02:4d:de:ee:8b:11:a1:11:
36:ee:6d:32:33:e9:8a:87:7f:0c:74:ac:7a:bd:83:
56:49:d8:a4:06:d0:49:40:54:3a:d4:61:d9:8d:fb:
d9:d1:af:0f:7b:2d:2f:93:3a:06:d6:c2:53:51:ff:
ba:6e:f5:b0:bf:42:39:50:24:ab:dc:58:f6:37:83:
99:6b:1d:f8:7f:da:51:8b:91:63:1a:8d:c5:8b:9d:
7e:1e:8d:a6:1c:bc:af:4a:83:f5:4c:27:0b:e5:34:
12:42:9e:90:85:d1:5d:02:3a:17:71:f9:83:53:65:
4d:01:f8:8f:2a:33:d3:bc:d9:02:7b:e5:be:2b:62:
fa:d3:32:0b:b8:67:11:eb:f8:8c:57:6a:38:cb:bd:
d6:b2:85:dd:48:a3:50:0d:a7:38:91:60:df:81:78:
2d:b4:cd:ec:03:a3:87:9f:7b:40:f8:99:58:c5:10:
40:7e:5e:7a:f1:10:ea:90:44:e0:81:b5:96:d1:3d:
85:d4:d0:de:fa:81:fb:d5:8a:59:eb:6f:e2:aa:88:
94:6e:c3:8a:43:ab:43:78:92:a3:74:b6:e5:57:d1:
b4:89:d4:7d:82:c9:9b:5c:fd:c3:d1:50:d6:24:dc:
8f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:40:93:3A:50:0B:0A:7C:32:ED:FB:7A:97:76:60:12:1D:3A:A9:C6
X509v3 Authority Key Identifier:
keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:bb:cd:ec:22:47:36:54:8d:46:15:1c:9c:ea:f8:72:7f:11:
fb:ca:3d:ff:29:ea:22:59:80:d1:13:6c:7b:c1:a2:bb:16:57:
b6:9d:51:1f:4e:66:f1:9a:3c:9f:1b:59:65:a5:78:17:8b:3d:
0a:85:8a:4c:84:a3:b5:6f:92:b2:92:44:f1:38:e3:39:df:a9:
d6:de:69:82:41:52:b4:ef:2b:de:7e:4b:91:58:20:3e:37:18:
20:7c:52:ca:26:d8:e3:fd:95:c4:fd:9e:ca:e5:c1:5c:9e:05:
53:57:f8:fa:0b:54:b2:4b:5c:22:de:ae:fe:c7:d3:9b:0d:ee:
4c:3d:8a:be:53:a8:30:f1:ff:4c:4d:12:61:54:9a:9f:ff:ec:
a4:13:a9:e2:d0:4b:cc:d6:45:81:9f:95:d5:48:1e:e8:fb:0b:
44:63:45:2a:79:6e:ce:e7:d2:b4:51:fb:0b:60:98:22:e3:1d:
e3:1d:b5:10:da:ae:b7:20:94:52:11:19:56:24:4c:e3:94:91:
df:46:4a:e7:c8:53:67:f3:05:60:dd:a1:7a:91:09:a6:c8:aa:
52:68:7f:9d:ca:39:32:ae:05:41:69:a4:76:e0:c8:90:b7:4c:
c4:fe:3d:75:78:da:b1:8f:35:40:a4:79:84:ce:49:e4:86:19:
f5:1d:94:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:14 2025 by rpki-client