Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
File: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft (raw, json)
Hash identifier: q1U7aFWrsIu8/rySqH57WrvgZqdkndG0Fnei1j2D7W8=
Subject key identifier: F4:11:5B:13:E9:53:39:48:5D:55:54:DA:DF:22:B5:FC:AF:09:3C:CD
Authority key identifier: 42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
Certificate issuer: /CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Certificate serial: 0197B70F4012FB3BFEF1F9D705A8AFF24447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
Manifest number: 06ED
Signing time: Sat 28 Jun 2025 15:01:59 +0000
Manifest this update: Sat 28 Jun 2025 15:01:59 +0000
Manifest next update: Sun 29 Jun 2025 15:01:59 +0000
Files and hashes: 1: HF0LqW6Nn7yrC4zWZGNegGbZJQI.roa (hash: ZufShUH8VmdZ1SaW4ZA1zfhMayCSiwCUVqOn6kPrIf0=)
2: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl (hash: i5RKPmylHgeVwwEuuI4VuPl+HFDgLMQSDpoI0NertaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:40:12:fb:3b:fe:f1:f9:d7:05:a8:af:f2:44:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Validity
Not Before: Jun 28 15:01:59 2025 GMT
Not After : Jun 29 15:01:59 2025 GMT
Subject: CN=f4115b13e95339485d5554dadf22b5fcaf093ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:eb:33:a5:0c:bc:77:c8:26:c6:2b:35:f2:d8:
f7:0c:6a:47:31:01:43:cf:63:5b:ff:e4:14:76:3c:
b3:91:38:5c:1d:e9:4d:19:de:80:08:a8:a4:5a:b8:
a9:f6:e2:f3:a8:b8:e3:f3:a6:64:32:f8:bd:c1:4d:
82:41:8f:b4:52:f7:6b:c0:ee:4e:56:a0:56:4a:da:
1e:46:25:59:4e:6e:f3:2a:f6:c9:60:72:9c:cd:81:
bd:24:95:1c:71:03:d0:c6:79:bd:f8:5c:bd:81:22:
b1:92:29:0f:6f:2d:1b:f5:df:3c:0b:fa:ea:78:ce:
a2:6f:a9:9a:99:e8:6b:e7:ed:c1:9e:70:a6:e9:59:
07:19:95:98:cb:92:8a:49:22:aa:e3:5a:c1:df:82:
9b:9e:78:99:9a:6e:19:91:b5:2e:d0:ec:e0:14:e4:
65:55:e1:61:09:38:77:c1:17:1e:92:d4:82:6a:d6:
6c:3b:a4:e2:9b:d2:d0:52:b9:8a:3f:dc:19:13:be:
52:21:d6:e5:37:c4:83:a3:fe:a6:fe:90:1b:14:e6:
d6:fd:33:dc:53:29:b5:36:3e:05:f2:e1:ba:d6:fa:
97:a3:da:19:e2:c4:dd:14:15:df:36:08:76:10:21:
59:bd:ff:ad:c9:8d:89:2f:64:17:81:5d:7a:5b:41:
b7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:11:5B:13:E9:53:39:48:5D:55:54:DA:DF:22:B5:FC:AF:09:3C:CD
X509v3 Authority Key Identifier:
keyid:42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ac:9f:32:2f:ac:63:36:a7:f8:19:96:35:ca:0b:93:70:62:
e6:23:ba:d8:9d:59:c6:42:1e:46:c5:dd:01:ba:7a:3d:7f:64:
83:bd:c8:7a:ba:a8:5a:a5:68:f4:93:b6:ec:45:54:77:e8:f9:
82:bf:79:4c:ba:c8:b6:2a:89:ff:a5:b4:a2:7d:31:6a:4f:d9:
ec:c3:9a:a2:ff:09:25:b9:f5:a6:bf:13:dc:d0:e6:13:8a:98:
a4:4e:a8:99:ad:ef:4c:1c:97:d5:aa:1c:18:5f:99:60:2e:31:
46:9c:2d:01:51:56:dc:31:85:95:08:02:ca:58:98:ab:6f:f1:
d0:1e:b5:dd:82:74:11:77:12:f7:90:33:f2:b4:a8:99:da:40:
a6:61:06:9c:11:3c:2c:a6:ec:cf:49:12:d0:f0:70:b3:e7:84:
97:1a:4f:ce:cc:77:29:83:32:f7:f5:a4:76:6a:42:74:46:ce:
3d:71:87:8b:8a:3d:e1:82:3a:50:a5:58:71:ef:53:fb:71:00:
bd:7f:d9:0e:a7:4d:61:70:c0:cd:21:0a:56:9b:03:7d:64:4e:
32:34:e5:39:3b:5e:c7:d7:1d:5e:8f:2f:33:a5:c1:b5:72:50:
c0:93:0f:cd:a0:29:ed:98:73:ad:6a:58:41:f9:b1:27:d6:65:
e1:c9:2f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:44 2025 by rpki-client