Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
File: QLt2qpbfjrfWd3s1clLhEVUjh4U.mft (raw, json)
Hash identifier: yRruSS6PKghKC3deXfvTEUvrA552uI4semW6jkcxv/w=
Subject key identifier: B2:4D:77:65:EE:82:57:C3:01:9D:2A:83:D7:31:9B:68:F4:72:8F:7E
Authority key identifier: 40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
Certificate issuer: /CN=40bb76aa96df8eb7d6777b357252e11155238785
Certificate serial: 0197B6A0BC76D7A9DA75ADA0241ADCB6B850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
Manifest number: 130D
Signing time: Sat 28 Jun 2025 13:01:16 +0000
Manifest this update: Sat 28 Jun 2025 13:01:16 +0000
Manifest next update: Sun 29 Jun 2025 13:01:16 +0000
Files and hashes: 1: 78S4WmbXMNI8p1WLj4U6NB6Bpk8.roa (hash: bBamnPgie/uUwEiZyXlGtHo6lmaBP0c5URwdBpztxDc=)
2: QLt2qpbfjrfWd3s1clLhEVUjh4U.crl (hash: JT1fjaegpAfqk2/Urus1sn3zG93glT2RTk2I2Z8qTp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:bc:76:d7:a9:da:75:ad:a0:24:1a:dc:b6:b8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bb76aa96df8eb7d6777b357252e11155238785
Validity
Not Before: Jun 28 13:01:16 2025 GMT
Not After : Jun 29 13:01:16 2025 GMT
Subject: CN=b24d7765ee8257c3019d2a83d7319b68f4728f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:75:a8:f1:54:b9:f0:09:c4:df:4d:60:3a:
0e:83:8d:e2:bc:38:2b:3a:73:0f:6c:62:f5:95:fb:
7a:eb:cf:81:e6:dc:74:31:8f:c0:a9:0d:cd:25:72:
95:b7:12:9a:b5:11:9b:c7:f2:f2:8e:8d:c4:10:ed:
e0:9a:f4:7b:88:e1:5a:2a:27:f4:98:66:6f:0f:c7:
f9:e0:c6:ea:95:21:83:c2:ec:4b:77:d5:5b:6c:6c:
27:6e:2b:bc:ce:24:e8:71:69:1f:3f:07:df:f3:11:
1b:0a:9b:ce:28:3a:a8:fa:e2:73:6d:4f:13:9b:6d:
af:6e:6d:bf:26:c2:c8:56:23:84:ad:64:6d:b3:3b:
d2:15:09:fa:f2:80:95:75:9a:bf:65:31:0b:f2:cf:
08:33:fb:1a:ad:0b:31:29:a8:30:26:65:d5:88:13:
47:ea:84:29:cc:6f:72:67:25:da:12:5b:98:dd:04:
37:ba:f4:5c:57:8c:9e:1b:85:0a:25:04:16:14:9d:
ad:c0:85:ef:b9:eb:0f:0d:47:c6:13:79:64:e7:48:
e5:c5:ce:e4:54:69:21:5f:93:07:14:16:92:36:59:
82:8d:23:84:eb:07:5d:58:5d:10:5b:6f:2e:a5:b2:
fb:b0:a2:d5:c7:c8:3b:db:68:cf:bc:4f:67:97:01:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4D:77:65:EE:82:57:C3:01:9D:2A:83:D7:31:9B:68:F4:72:8F:7E
X509v3 Authority Key Identifier:
keyid:40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9c:a6:59:81:af:46:6a:5b:02:34:16:85:99:48:2d:ff:de:
f0:a9:ef:30:bf:d4:6e:73:42:0d:b6:6b:f5:b6:83:57:ef:7f:
b7:80:31:82:aa:79:6e:de:00:9c:b2:7e:b1:a0:68:f6:5b:91:
8d:63:17:66:7e:32:bc:2c:d2:8a:61:d0:d4:dd:d2:da:85:fd:
4f:35:f7:37:fe:54:03:67:0c:20:a0:eb:59:38:0a:16:1b:3f:
ef:07:50:cf:f6:6d:7f:88:74:c1:18:1b:58:46:cf:d6:42:e5:
9e:4d:ce:99:84:a9:1f:c9:a1:4b:c4:69:df:b3:d4:e2:98:e1:
9b:e8:1f:dd:37:1e:f6:d5:62:99:77:7d:33:ce:b2:0f:e0:65:
e5:08:80:7c:b5:a8:1e:5e:ed:36:48:13:e0:56:b7:13:d5:06:
19:82:d4:5f:77:47:55:f8:3b:1b:82:d6:f1:43:68:9a:05:4e:
67:ba:1b:53:28:c4:d6:ed:65:bf:b3:42:b2:c3:8e:39:24:6f:
9d:26:5a:33:6e:2a:b8:39:33:24:1a:01:b6:38:b0:64:02:e3:
b1:4f:17:18:cd:fb:1b:03:a1:3c:e3:e6:57:43:0a:97:62:ef:
10:61:9f:24:78:e3:54:66:10:48:a8:05:0d:13:1a:75:95:4c:
ad:b1:33:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:48 2025 by rpki-client