Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
File: QiF6LVE6n7D84aHPwrPAXAGL2ME.mft (raw, json)
Hash identifier: C4e9DcmPWUs1P+3DnpFzWcsCiO7hk+Nvv/XeiQPnvDk=
Subject key identifier: 1E:ED:BD:A7:F6:99:5D:71:BA:A4:47:18:BD:27:A1:EA:C5:87:13:0B
Authority key identifier: 42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
Certificate issuer: /CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Certificate serial: 0197B820FB06761FDE4DB9849C79FDB4EA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
Manifest number: 093F
Signing time: Sat 28 Jun 2025 20:00:58 +0000
Manifest this update: Sat 28 Jun 2025 20:00:58 +0000
Manifest next update: Sun 29 Jun 2025 20:00:58 +0000
Files and hashes: 1: BF1OaGyaTyDLCWSklyxgYbn9nEs.roa (hash: AVER/BhL6ABrbQlRM/PyN/xXO4yBqy6qEwfqfNZn84A=)
2: QiF6LVE6n7D84aHPwrPAXAGL2ME.crl (hash: fngxP69DfkiGWifA1ea11ZPS860uCS+xnxTcJEqqreI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:fb:06:76:1f:de:4d:b9:84:9c:79:fd:b4:ea:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Validity
Not Before: Jun 28 20:00:58 2025 GMT
Not After : Jun 29 20:00:58 2025 GMT
Subject: CN=1eedbda7f6995d71baa44718bd27a1eac587130b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e9:aa:97:88:40:22:97:91:cf:6e:e4:9c:1b:
f5:2b:89:e0:7a:c2:03:62:8c:a4:40:2f:90:00:28:
4b:74:9c:f3:c1:99:1f:68:81:b5:eb:c1:eb:7e:98:
6e:82:b9:5c:18:0c:43:d0:2c:e7:a0:ac:62:74:0e:
a1:ec:ad:75:f4:c1:30:e1:0c:78:b0:07:79:60:ae:
36:60:0e:57:7f:bc:aa:06:46:39:88:1d:eb:08:1b:
91:a9:63:a9:54:2c:a2:eb:9a:8d:b5:a3:28:1f:3d:
5e:64:25:c6:04:75:cd:1c:e7:db:ac:ed:90:94:f9:
9b:96:5f:ab:fe:ee:ad:7a:0b:6d:48:33:1d:ae:7e:
ae:0d:d6:f3:44:9d:35:74:0c:37:5a:26:b5:00:61:
90:d4:04:87:e4:72:52:57:15:90:ba:05:2d:a4:a8:
2c:f7:1e:15:e0:03:b4:b3:fa:f5:cd:34:ef:69:70:
5c:e0:d0:dc:3f:bc:1b:c9:3a:90:43:b9:87:5b:7b:
75:9e:9b:9d:79:4e:2a:d9:57:50:03:47:d9:34:ad:
18:58:c3:7b:a4:a4:93:16:9e:ab:d7:72:ce:54:f5:
bb:9a:8b:77:9c:a5:11:87:f9:ca:e1:f1:77:5e:b8:
4f:96:ab:ce:0d:1b:41:2e:b6:80:15:78:cb:a1:17:
db:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:ED:BD:A7:F6:99:5D:71:BA:A4:47:18:BD:27:A1:EA:C5:87:13:0B
X509v3 Authority Key Identifier:
keyid:42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d8:0b:ca:fa:55:d3:b4:52:74:73:57:1e:0f:86:7b:ba:a1:
bd:0d:c0:21:a9:c7:59:bc:21:b6:e7:79:81:15:52:1b:0f:83:
4e:6a:9e:f2:96:2b:8f:bd:e7:d9:61:79:6d:d3:c2:26:a5:65:
80:1f:98:f7:c2:48:98:b7:66:eb:58:46:cf:cc:c8:e2:fe:a1:
60:69:44:f6:0e:13:80:53:a9:6c:e7:d1:76:18:8c:c0:7d:f5:
79:7b:86:80:5d:a1:fe:ba:05:31:9a:ab:68:a2:9a:5d:b7:e8:
ee:ef:74:e4:03:b6:62:14:50:9e:17:9f:23:ff:9b:9b:a6:a3:
57:19:ca:c3:93:65:4f:be:5e:ec:91:14:c3:5b:d8:80:b8:da:
63:39:ec:83:30:9c:9a:fd:a8:16:ba:4e:c4:53:af:f5:23:3a:
fb:88:a0:f5:ba:f1:20:f1:52:b3:7c:35:53:67:5c:98:4e:da:
88:dc:b5:ce:52:33:55:04:8f:e5:cd:0e:91:5c:3c:1f:da:2f:
55:e5:b3:c4:f5:63:82:1d:c3:76:21:40:35:ff:46:db:3c:a7:
05:53:f6:46:42:54:52:b5:fa:1c:87:1f:0b:10:0b:3a:79:74:
b0:15:1c:98:d9:da:11:b3:6d:46:09:06:fd:e6:b1:95:7f:f3:
32:20:a9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:25:51 2025 by rpki-client