Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
File: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft (raw, json)
Hash identifier: Bd2wuYYhzEGWL9fmE4/Gp1BwYVJeGUImIFdaJhbjKj0=
Subject key identifier: 34:C2:7D:58:33:F1:B9:0F:C5:B8:13:D0:9C:32:F3:52:81:09:E9:52
Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
Certificate issuer: /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Certificate serial: 0197D029BB38601B4F0B4A83A2CB781E21D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
Manifest number: 15C2
Signing time: Thu 03 Jul 2025 12:01:25 +0000
Manifest this update: Thu 03 Jul 2025 12:01:25 +0000
Manifest next update: Fri 04 Jul 2025 12:01:25 +0000
Files and hashes: 1: 83F_Jp7hhNkTyKzmQu0uAqQ-Hug.roa (hash: /GIKVjlq0TkCjqFIvHfnkG7+yghgu5kkQctxwrpV6qw=)
2: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl (hash: EOKHfQ9pySqwXyEa57CZgFqKIUDlYkv5srbwU6OVVrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:29:bb:38:60:1b:4f:0b:4a:83:a2:cb:78:1e:21:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Validity
Not Before: Jul 3 12:01:25 2025 GMT
Not After : Jul 4 12:01:25 2025 GMT
Subject: CN=34c27d5833f1b90fc5b813d09c32f3528109e952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:1b:ac:b0:f5:34:e6:cf:08:9b:4e:a4:b7:
a9:0a:7e:cd:31:b2:69:ef:66:17:b4:06:14:2a:20:
7b:83:1c:90:d1:b3:82:e3:dd:a7:3a:9e:93:4d:8c:
5b:c8:42:a2:5f:db:b3:90:cc:4b:fc:9f:45:0d:22:
1e:7f:8d:e8:7f:7f:e9:7a:c3:05:b7:dd:da:51:d9:
7c:49:7b:b4:b4:f6:1f:b2:a8:c5:31:19:ae:93:15:
f3:0d:7d:25:1a:e2:fd:04:ee:9e:3c:fb:12:03:6f:
cc:ef:20:3b:f3:a9:74:0a:84:2b:e8:de:e8:3a:cf:
93:85:69:c7:bd:fc:09:72:a1:a4:d0:fa:8b:4b:27:
74:cf:6a:c3:4a:11:fd:48:93:3d:08:f9:eb:46:64:
c8:c2:7f:10:b0:03:89:73:20:8f:3e:53:a0:0b:75:
38:0d:f0:31:80:2c:c2:6a:d4:20:7e:d1:9a:71:fe:
08:e3:13:8f:ec:32:63:d0:fb:d1:40:bf:4e:f2:d3:
44:fc:be:a9:7b:ce:de:da:44:31:5c:b4:cc:38:ce:
0a:a0:2e:b9:ec:10:95:ca:07:52:23:1e:cf:48:ff:
e9:9f:ed:a4:0f:59:c7:c9:11:90:96:41:fa:f0:19:
d8:8b:ac:80:b7:5b:1a:29:87:99:27:f3:a7:d3:8f:
0e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C2:7D:58:33:F1:B9:0F:C5:B8:13:D0:9C:32:F3:52:81:09:E9:52
X509v3 Authority Key Identifier:
keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:25:ab:34:3d:8a:46:88:a9:e3:f8:55:08:ce:91:78:bb:c4:
54:20:e7:14:33:06:ad:34:9a:86:72:ef:41:32:c6:b1:42:f0:
84:8c:e6:db:bf:97:01:86:41:33:bd:07:17:f4:a0:b5:2b:52:
a1:df:68:61:84:84:68:25:4a:df:0b:75:02:71:7f:1d:02:c2:
be:7d:17:7a:51:f9:f2:1f:00:30:3d:52:86:2a:b8:fc:e2:d5:
bb:29:92:5f:7f:a5:54:5b:a0:f2:73:03:f2:6a:6c:a5:c3:91:
3f:ca:0d:08:f1:67:a8:e7:be:a7:46:22:fe:ce:f1:25:19:d0:
3d:f4:db:16:e0:4c:12:14:e6:38:6c:58:41:71:6f:14:4e:37:
5e:13:9a:0e:44:c9:0b:00:6c:79:97:e8:70:e8:4f:4c:20:36:
cf:cb:96:e0:8a:8e:3d:11:68:18:f2:27:51:65:a4:6b:27:9a:
04:d8:7c:e4:b8:78:04:ec:32:49:a1:0d:90:48:98:9f:08:72:
c6:b3:e9:8f:81:e5:b9:28:23:9e:2f:60:21:c7:ba:db:9d:83:
44:04:1f:f7:5d:63:6e:bc:ef:7a:41:52:2a:ed:bd:c4:ac:ee:
81:1e:b9:54:2b:b7:42:8a:36:07:03:20:b9:42:6a:84:18:3d:
11:46:6b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:05:41 2025 by rpki-client