Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
File: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft (raw, json)
Hash identifier: Q8S+ysc7QGmvT80pwgLm2lrv3WiosvQgMwhYwOQf08U=
Subject key identifier: 97:DB:A5:BA:2F:F6:47:4F:1A:FB:63:CD:A7:55:12:A3:38:4F:BF:77
Authority key identifier: 42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
Certificate issuer: /CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Certificate serial: 0197B8FCD5D69F99F524C517781F4D390534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 00:01:06 +0000
Manifest this update: Sun 29 Jun 2025 00:01:06 +0000
Manifest next update: Mon 30 Jun 2025 00:01:06 +0000
Files and hashes: 1: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl (hash: CYuwV//gCHcsjASVKk3kCvTlh3PKTORc/El5OqGoVCM=)
2: T5gr7GnqjE8y7ukPZ3Upa6e15rU.roa (hash: IygW4LAvMnA+EIcJ9N6BryWosUgw51JGwDaJIPLdjAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:d5:d6:9f:99:f5:24:c5:17:78:1f:4d:39:05:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Validity
Not Before: Jun 29 00:01:06 2025 GMT
Not After : Jun 30 00:01:06 2025 GMT
Subject: CN=97dba5ba2ff6474f1afb63cda75512a3384fbf77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:b1:02:5b:df:90:3f:bb:da:e8:73:44:f6:
b5:38:3e:e0:7b:6b:36:3a:fb:4f:85:6a:58:8c:41:
a9:67:9d:de:8f:3a:ed:e0:f1:e2:26:ac:1c:31:22:
09:b2:26:dd:68:a5:00:48:9f:f0:79:4a:ea:e9:b9:
20:ee:42:98:ac:50:95:48:f7:d8:ea:3e:38:a9:75:
d7:c2:30:9d:19:b3:20:ac:aa:b6:9e:f6:57:fb:e0:
8a:30:9d:d4:ff:02:3b:e7:e6:ad:dd:cf:be:6a:16:
e3:12:82:05:89:2f:67:d4:e9:20:e3:d3:5f:be:ef:
bc:1e:48:49:e5:f9:86:79:39:67:ad:a6:0a:28:de:
2f:ae:c8:43:af:23:9f:07:8a:70:9b:d1:b2:e4:65:
b1:81:2d:44:fc:20:67:87:19:56:45:97:a2:b7:ab:
39:b2:d3:36:72:fe:21:a7:a1:19:cd:84:0b:9f:ca:
34:2e:1b:a8:5a:2e:90:7b:94:6c:58:4a:1e:34:d1:
67:0f:f1:9b:89:e8:a1:f5:c2:9e:68:8c:02:ac:c0:
bb:f3:7e:b6:80:7d:73:61:4e:d6:fa:3d:58:1a:af:
24:84:e0:a9:66:95:76:84:64:b9:9f:83:63:1c:b8:
c7:86:e4:72:a4:f7:3c:47:bb:15:d3:c7:c9:4c:e0:
a5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DB:A5:BA:2F:F6:47:4F:1A:FB:63:CD:A7:55:12:A3:38:4F:BF:77
X509v3 Authority Key Identifier:
keyid:42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:36:da:b6:c7:d2:4f:cb:52:b0:fc:d3:8f:15:d0:e4:5e:1f:
66:29:f5:02:b8:aa:af:37:77:7d:a6:48:0f:f9:36:5d:5a:e6:
9c:18:8f:9d:58:95:7e:63:b4:d4:aa:70:33:97:1d:04:e5:59:
31:64:f2:60:7e:53:22:9d:6b:ce:65:3e:8c:4a:1a:11:91:34:
c9:4c:27:e4:0d:72:c3:06:72:01:13:9f:55:e3:43:cd:dd:a0:
d5:0e:27:db:2d:9e:21:7a:86:0a:7c:4e:76:da:b2:13:d0:e8:
a9:49:aa:7d:02:6c:45:44:56:10:a6:1e:f3:a5:06:8e:e1:2f:
1b:6d:4a:75:9a:72:c7:74:a4:e1:51:75:03:f6:05:ca:25:32:
83:fa:68:61:2e:1f:8f:39:26:92:f1:c5:66:ba:ab:c4:a7:00:
f2:cc:ce:5f:52:c2:33:df:f2:8b:22:5a:ba:5a:73:a0:48:ac:
fe:6d:01:7f:21:bd:b8:9a:de:08:97:7d:b1:4f:ad:21:35:62:
87:6e:1e:82:5c:c2:6a:2c:a2:f0:6d:72:b1:1d:8e:81:02:ea:
5e:46:06:00:d1:96:48:01:0e:fa:c8:4e:c0:1c:b7:9c:5d:dc:
f9:0b:88:14:07:8e:b4:d5:b9:6e:aa:8e:fe:0c:40:1e:4a:b8:
6b:9c:ac:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:19:43 2025 by rpki-client