Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
File: QWUyQgoh5CuK0w2iTr9DR96V7zU.mft (raw, json)
Hash identifier: EcbCQLdLARKe+gEhRO1CmwKQGKgEJ2u1FhWN2KrU0rU=
Subject key identifier: 45:F5:B1:20:4B:06:63:B8:87:C8:28:3D:A3:4B:31:11:EC:37:77:10
Authority key identifier: 41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
Certificate issuer: /CN=416532420a21e42b8ad30da24ebf4347de95ef35
Certificate serial: 0197B632DD69CAD897BD23F88BB2464DFAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
Manifest number: 10BD
Signing time: Sat 28 Jun 2025 11:01:16 +0000
Manifest this update: Sat 28 Jun 2025 11:01:16 +0000
Manifest next update: Sun 29 Jun 2025 11:01:16 +0000
Files and hashes: 1: QWUyQgoh5CuK0w2iTr9DR96V7zU.crl (hash: 1RuCZge7NFjUO4ARJsAPU6pHdZajoA4dJSRBTjnvRWU=)
2: eV_HY0yWE8mOE1MRDnB0YcYTccg.roa (hash: 5xM8UD0IporPo6ojXDnvNcFP3vOdI9fe0xTb6m2cal0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:dd:69:ca:d8:97:bd:23:f8:8b:b2:46:4d:fa:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416532420a21e42b8ad30da24ebf4347de95ef35
Validity
Not Before: Jun 28 11:01:16 2025 GMT
Not After : Jun 29 11:01:16 2025 GMT
Subject: CN=45f5b1204b0663b887c8283da34b3111ec377710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:02:76:c6:6e:44:6f:cd:d2:00:2c:ea:09:52:
7c:da:63:30:66:52:b5:1b:50:43:f0:d4:bb:d2:a1:
69:ec:4f:04:a5:30:b9:e4:75:f8:cc:68:2a:1f:6d:
fa:a5:7d:b3:31:51:51:c4:6e:ac:13:9b:e1:72:9a:
d5:ba:a5:eb:a9:eb:2b:e8:3b:0a:0b:f1:55:ee:08:
b7:4e:3f:96:35:2d:f5:13:dd:b4:5e:7c:2e:17:4a:
70:b9:e6:3a:7e:ea:5b:36:96:ef:c4:07:e6:3e:e1:
8a:25:c8:35:fe:58:f8:22:5d:aa:41:a6:1d:a1:55:
18:5f:f1:ce:88:6f:c6:89:59:0d:ec:1f:3f:e1:38:
41:84:54:0b:95:6a:96:93:ce:ae:71:28:a5:02:8a:
df:1a:5b:48:be:fd:4b:71:e7:20:3e:21:10:18:d3:
9d:12:e9:fe:13:42:9a:7c:b5:f9:59:24:d2:1d:a5:
5a:b4:76:49:10:0d:0a:bd:0f:c9:54:f3:8b:53:ff:
d0:1d:75:b2:45:f7:0c:90:33:07:c8:78:09:57:a2:
92:08:0c:ee:02:4f:25:25:36:ff:ce:aa:9b:ed:03:
82:9a:19:18:8f:30:e8:72:87:9e:31:2e:26:09:59:
2d:16:2f:7d:c9:3d:fe:69:be:36:2a:ad:b3:c5:26:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F5:B1:20:4B:06:63:B8:87:C8:28:3D:A3:4B:31:11:EC:37:77:10
X509v3 Authority Key Identifier:
keyid:41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:71:e0:5f:4f:52:6c:2b:14:d8:6f:2c:1a:06:af:99:76:43:
36:e2:ac:ed:87:42:d2:54:59:13:a4:71:4b:e2:be:29:2d:d6:
62:a7:e2:79:e0:78:9a:3e:30:81:10:33:66:5e:5e:ea:0b:56:
c9:f0:af:83:00:0e:95:80:f3:96:57:47:ec:ac:41:b2:6a:c7:
2f:8c:a2:c7:c3:ab:58:35:7f:2f:73:f5:a4:cd:53:ad:98:8c:
f4:76:26:69:88:a2:c1:c9:d2:4c:f8:f9:f5:01:96:c2:f7:ef:
f2:9c:0a:35:3b:cc:fc:fb:7f:b6:ba:5c:31:bd:60:5b:a4:f7:
be:05:20:7f:db:10:66:5b:20:10:ae:00:7a:73:cd:6f:94:b8:
bd:24:7b:38:bc:cc:67:af:de:95:db:83:c8:a3:41:3e:9b:9c:
38:2b:85:59:b9:ae:dc:fd:ab:e1:bd:39:28:60:66:68:f3:82:
8b:a7:17:bf:79:5f:4d:fc:bf:b2:e8:0b:ce:e1:f2:7f:dd:fc:
fe:da:5c:5b:70:f0:58:14:2b:9b:19:fa:aa:3c:57:4f:a9:01:
40:98:51:ec:d8:e1:9c:3c:bf:9f:0a:af:69:a3:77:56:62:7c:
ed:46:ca:aa:ae:f3:48:3a:bd:1e:2b:f5:79:91:1d:21:4d:55:
87:ac:78:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:18 2025 by rpki-client