Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
File: QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft (raw, json)
Hash identifier: UPVvyspYarvRQ1lbMgnNd7ChGiCRAq6J/ei8ocivlLo=
Subject key identifier: 98:F3:06:EB:98:13:F9:57:AD:7E:1F:49:14:93:C7:EA:38:87:F4:D2
Authority key identifier: 41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
Certificate issuer: /CN=414915cdd322bfe39472536955464a5ff67117c3
Certificate serial: 0197B70EFCAABFF396A080BC7B5B90B613FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
Manifest number: 05C3
Signing time: Sat 28 Jun 2025 15:01:42 +0000
Manifest this update: Sat 28 Jun 2025 15:01:42 +0000
Manifest next update: Sun 29 Jun 2025 15:01:42 +0000
Files and hashes: 1: 1-XrmEJC-kOLvoeP9rgvbg0A53hs.roa (hash: EiYdih7Qfn/m/+BWxzflbgrLM7vuel5hPMdd9Y8tb4I=)
2: QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl (hash: eaqfjZvnR4rAeu6gRAbeEO9fWpa8vrQAdnR4+A5hQgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:fc:aa:bf:f3:96:a0:80:bc:7b:5b:90:b6:13:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=414915cdd322bfe39472536955464a5ff67117c3
Validity
Not Before: Jun 28 15:01:42 2025 GMT
Not After : Jun 29 15:01:42 2025 GMT
Subject: CN=98f306eb9813f957ad7e1f491493c7ea3887f4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:47:bb:59:83:c9:34:be:7c:f2:1f:5d:48:
b9:78:be:29:bc:58:24:f6:b8:c8:e6:32:73:47:dc:
4f:ff:a2:29:4c:98:68:91:8b:f2:e7:a6:bb:89:ea:
e2:78:b2:50:ba:cf:c7:75:f5:fd:3a:1c:e4:9e:18:
94:58:b2:5c:29:25:f5:8f:d9:55:18:08:f7:0d:b4:
21:f6:a6:d1:e3:10:c2:8f:f5:27:00:13:58:84:b5:
69:03:d2:6e:a5:5f:f8:5d:e4:9f:9a:e6:a1:b2:57:
e8:82:97:f7:58:8e:3f:33:52:43:7b:c2:96:a7:71:
3c:d8:b5:8a:d4:aa:f5:d8:f0:d9:5d:f2:03:39:87:
b8:8d:c5:b1:4e:79:fd:8d:56:7c:21:ad:70:33:60:
bd:77:93:4c:b1:e2:81:2e:ba:c2:fa:c7:fa:bd:04:
16:dd:7f:dc:ab:3e:1e:30:eb:27:82:b3:f3:cc:98:
df:29:80:dd:63:65:0b:eb:2f:e3:f1:3f:6c:31:3a:
db:30:77:eb:d7:ac:84:09:b3:52:23:77:c4:b4:a9:
f9:ab:e3:c5:5d:db:d9:4e:79:6d:14:3d:c7:bb:d9:
a9:27:7c:e3:57:de:8c:81:8a:33:24:74:37:00:4f:
7c:1e:64:e9:4c:6d:8e:aa:cf:fa:b0:77:75:5f:a2:
9e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F3:06:EB:98:13:F9:57:AD:7E:1F:49:14:93:C7:EA:38:87:F4:D2
X509v3 Authority Key Identifier:
keyid:41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:85:de:ed:76:2f:34:d6:47:4a:ad:8c:8a:dd:38:1c:fe:53:
0a:8e:2f:c5:79:9f:bb:18:68:17:64:3e:b7:8f:2e:c9:60:ec:
47:8f:97:93:f8:d5:27:a8:ca:b9:2c:ff:3c:28:89:8c:46:29:
1a:e2:5a:da:d3:e8:f4:ab:d1:c3:64:dc:e6:b7:83:07:ea:da:
5b:0d:ed:2a:a4:5c:b5:46:b6:cb:0a:c0:1d:5b:c8:81:d7:b7:
f7:35:d2:ae:33:ef:36:e2:cc:e1:a8:0a:8c:a9:e4:bd:de:42:
9a:bd:3a:a6:d3:1a:8c:77:5f:d8:a2:c7:d2:fc:6e:96:87:c8:
f9:1e:16:56:6e:ec:13:e5:9c:12:32:7a:e1:f7:4b:23:a8:4c:
5b:a8:93:0a:e7:bf:07:6d:44:81:cb:40:31:4e:74:a3:d6:5b:
1b:0c:b1:a8:2b:d2:80:da:d7:69:f7:85:33:a8:b2:fc:26:a7:
03:76:14:c0:55:16:8f:23:42:30:0c:44:2c:2b:32:38:a9:e7:
6b:06:49:64:8c:4d:c2:1b:42:d6:61:d3:e3:f1:61:91:07:e5:
96:fc:66:5c:df:61:b9:c1:4a:b0:96:52:03:e7:dc:41:a4:ba:
e5:a0:ab:10:58:44:b8:36:2b:6d:33:70:0d:46:f9:81:ae:7d:
cb:7f:83:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:38 2025 by rpki-client