Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: jfkaXsWkWcS5IO6BqgYpjJOLFrs48k/GyQVRya9n4K0=
Subject key identifier: 40:27:68:3C:51:D8:3D:8E:C6:B1:F7:B2:75:CC:F3:89:28:4C:CA:34
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 0197B88EE1BF5936A5ADD0067BCB008864BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 0E8D
Signing time: Sat 28 Jun 2025 22:01:00 +0000
Manifest this update: Sat 28 Jun 2025 22:01:00 +0000
Manifest next update: Sun 29 Jun 2025 22:01:00 +0000
Files and hashes: 1: 2NcvU0UpvnNamvYiw-Ck0PihIIs.roa (hash: tZbbyWjYNX8D1xoSb7TrcdUI4Ec9SAHjICqo4Qu+A30=)
2: 4Vo1LbgSg-781dFksjaURY1r5lM.roa (hash: cGkOqX+2Vt3J4A41hGsuYT10AGm/PDPU84x1eGxgeOc=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: Limccdtb9oaK4fZtxSeeiDAYyj1s26U/cJ+D1oFUz1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:e1:bf:59:36:a5:ad:d0:06:7b:cb:00:88:64:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Jun 28 22:01:00 2025 GMT
Not After : Jun 29 22:01:00 2025 GMT
Subject: CN=4027683c51d83d8ec6b1f7b275ccf389284cca34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8e:00:14:da:f2:a4:a2:71:a9:a6:89:d9:57:
d7:93:cb:4c:4b:88:b1:97:16:7c:5f:a1:27:78:1f:
17:48:37:bb:a3:5e:6c:72:a7:d2:1f:3e:e2:9c:05:
9f:11:12:1e:d7:01:30:e2:51:d3:d9:26:0e:c1:de:
15:fb:bb:3e:8c:8c:6e:64:a6:0e:2f:ed:a7:50:0e:
98:53:46:e9:33:60:27:44:b9:a8:9a:55:7c:0c:9d:
39:10:54:3f:23:14:25:5e:65:d2:54:5e:d0:54:88:
b6:54:98:59:f4:7d:3a:0e:29:16:55:3f:eb:48:b1:
6e:39:dc:c5:0c:65:c5:b9:e6:9b:69:d9:99:4f:7e:
b0:7a:c4:9d:b2:57:ae:84:fc:95:7d:eb:a4:76:10:
1c:23:48:74:2d:33:c5:4d:af:3e:46:a9:27:03:d6:
17:11:36:e3:b5:b4:db:fa:79:bc:95:1b:86:eb:f1:
40:3e:49:bf:df:98:1b:b1:02:c3:83:f5:6d:bd:8a:
f2:ef:80:cf:27:00:73:f7:b7:0d:98:04:88:e5:f3:
c4:cb:c9:66:48:65:a4:cb:16:e4:24:1b:bd:89:bc:
64:ee:54:ae:59:a0:14:20:49:02:e5:19:e5:06:c9:
1f:26:90:c6:a2:fa:0c:c0:0a:f3:a0:d1:8e:db:02:
ce:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:27:68:3C:51:D8:3D:8E:C6:B1:F7:B2:75:CC:F3:89:28:4C:CA:34
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:6f:95:fc:7e:6f:9e:05:f7:0e:94:83:72:45:bb:ca:b6:3b:
d0:30:32:8e:ec:ee:50:1a:f3:f6:36:ff:1a:79:70:f2:e0:e5:
3f:57:45:21:f4:7b:a8:5e:70:60:c7:03:f2:e9:d7:ed:a7:8a:
30:e9:d7:f9:61:fb:70:ac:b8:1c:70:cc:2f:44:2f:a4:3a:f1:
b7:78:77:47:6c:12:f1:25:d9:ec:04:60:c0:33:97:4a:c1:f0:
2e:84:b5:e6:df:b3:ef:44:55:0c:b6:38:46:f6:7d:8d:db:be:
c8:4d:48:41:01:fe:56:fd:42:71:05:9e:ef:93:d6:f5:a1:dc:
e0:1d:ed:9f:7c:6f:ca:4e:85:06:e5:4f:d1:da:78:f3:90:32:
b9:94:24:e3:a7:4c:db:50:f9:02:de:c0:0d:5a:04:b9:c9:b4:
5d:f3:34:be:5b:e0:5f:64:b6:3a:4e:4c:93:45:22:f3:19:53:
dc:66:75:4a:c9:ad:8c:5b:93:85:bc:c5:4d:28:02:43:a8:9b:
cb:66:ba:ef:b6:18:5a:e3:c0:08:07:d1:0c:5c:16:87:af:c4:
65:2a:c8:9a:a3:56:60:d8:38:54:94:0e:a3:92:a7:af:35:43:
da:6c:b0:d9:96:8c:76:26:28:ee:7d:95:99:65:cf:fb:73:08:
b1:db:43:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:07 2025 by rpki-client