Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
File: QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft (raw, json)
Hash identifier: f1YHCUdpLQr6hhE8uEMu2r1Ycb2AYQxpFZ28wwPA5R8=
Subject key identifier: D4:BF:1B:CF:B1:FF:7D:5A:35:3F:88:93:8F:F0:3E:E7:BB:B4:59:6F
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial: 0197B7B35B3F58588188A81B08FC58204855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
Manifest number: 1549
Signing time: Sat 28 Jun 2025 18:01:14 +0000
Manifest this update: Sat 28 Jun 2025 18:01:14 +0000
Manifest next update: Sun 29 Jun 2025 18:01:14 +0000
Files and hashes: 1: HM44YU_keUzYw0-k8-_A-z_iUEg.roa (hash: SXS4UlPdGWp6+QLYLhTDdcpIKj693zGOOUmfQDbJfCI=)
2: QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl (hash: nK9FmqynHxcPpHsasp4JaSP2zu9HZ9inD4eVXdK9DWA=)
3: kh936l2vxgccX_jvVlzYGLxpdnk.roa (hash: 1aSc0Ne3PFeWf8CzHXerC/R90wO3YKjdcfKwJxtbP2I=)
4: yR56vcKwFBMaxDiG7yY2cvJ4n0Q.roa (hash: iQ1t4A53B7El/PSKuRvXWWegJvuT/fcPU9ZHNFZ4LFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:5b:3f:58:58:81:88:a8:1b:08:fc:58:20:48:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
Validity
Not Before: Jun 28 18:01:14 2025 GMT
Not After : Jun 29 18:01:14 2025 GMT
Subject: CN=d4bf1bcfb1ff7d5a353f88938ff03ee7bbb4596f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:34:c4:4d:57:c8:46:9a:55:a5:76:b4:5b:e0:
2b:a3:da:b2:4c:2b:79:33:da:7e:9c:e0:cb:5f:fe:
7a:61:ca:8d:52:6c:51:e3:16:9f:fc:40:49:d4:05:
d6:94:42:08:ce:f1:2e:b5:c0:fc:9a:1a:06:df:7a:
a2:09:b0:7e:81:da:70:9a:26:60:c9:6c:f4:5c:f2:
46:8d:3c:53:d7:6d:d9:08:d0:9f:0b:ec:4c:40:9a:
2e:e5:28:3a:54:74:3e:cf:3e:2f:6e:b8:3c:0b:ee:
f1:4f:55:e7:6c:6d:2f:b0:a6:fe:b3:bd:84:c0:45:
9e:e8:84:4e:2a:79:8f:36:37:9c:29:17:ec:a0:88:
d0:19:37:3c:b6:48:df:de:c8:05:2a:db:7c:ff:8a:
df:4b:2f:96:29:cd:92:3a:40:8e:d9:b3:d6:4c:48:
33:8d:0d:f3:20:06:a5:60:18:6d:9f:e2:08:7a:b1:
dc:71:70:3e:9a:84:2c:e5:bf:9a:f6:19:ae:81:ef:
98:19:ff:be:27:d6:c7:a1:2c:1b:82:1c:14:03:4c:
57:91:d2:77:cc:be:c6:59:66:1e:7b:44:da:d3:50:
6f:4a:f3:f9:cd:52:09:b2:a0:11:da:a1:d3:b3:98:
6a:f8:39:8f:e4:b6:80:16:48:47:2d:b4:ab:87:57:
c5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BF:1B:CF:B1:FF:7D:5A:35:3F:88:93:8F:F0:3E:E7:BB:B4:59:6F
X509v3 Authority Key Identifier:
keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:66:2e:05:49:af:20:fb:60:2d:5b:cf:45:dc:e2:1a:02:8c:
f7:c3:a9:59:11:70:02:05:94:ec:ad:3a:2b:33:36:64:0b:42:
22:0c:ad:28:3b:e2:cb:7d:87:2e:79:d8:fc:33:9c:f3:3a:db:
44:69:cb:80:2b:a5:f6:c2:b6:5c:f7:d1:71:00:b9:ca:83:da:
72:60:ef:01:c7:fa:e1:23:d7:2c:05:79:c1:6b:93:f5:67:e3:
55:a6:32:d1:ca:66:a8:7d:43:8d:35:96:85:f8:b9:59:72:39:
80:fd:86:8d:05:eb:52:1f:ea:58:c4:92:b9:42:4c:61:7c:b1:
91:f4:86:e6:59:cc:e0:07:d3:27:53:c7:a8:a5:8e:96:b0:e7:
76:7c:19:80:25:d6:c7:93:50:85:d9:24:7b:57:2a:d2:6c:af:
e5:3f:aa:15:40:13:9b:b0:5b:25:d7:82:f2:43:45:c1:d5:4e:
93:fd:67:55:12:f4:70:3c:67:ae:24:92:62:57:7e:30:9c:a9:
c9:66:a0:ac:20:6a:1a:54:58:3c:9e:c7:de:7e:44:30:fb:5c:
9d:ea:52:46:38:9e:14:1e:d9:24:b0:7a:5b:75:d6:fe:22:e4:
50:a2:13:7b:a8:39:57:b3:21:4b:3d:65:63:65:80:d2:ca:4e:
aa:b1:dc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:30 2025 by rpki-client