Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
File: QSewwP58CJNeJYcT_PkP6VjuA-4.mft (raw, json)
Hash identifier: k4kNCzl3K2zoXbUHCYXy1MBOQY+ZsSVdi5L8Tj8SFeY=
Subject key identifier: 00:40:82:86:9A:22:1C:0B:B0:9A:BD:7D:23:21:38:E5:A5:68:E7:3A
Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
Certificate issuer: /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Certificate serial: 0197B7B374FC35ADAC733416F9D3130996C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
Manifest number: 0ED3
Signing time: Sat 28 Jun 2025 18:01:20 +0000
Manifest this update: Sat 28 Jun 2025 18:01:20 +0000
Manifest next update: Sun 29 Jun 2025 18:01:20 +0000
Files and hashes: 1: AHAIEOWCHWLKa9JHFINf6irqksg.roa (hash: 0crUb9fChI2AB7u9/en/nHBi9yIJVpozoehFQ2yd02I=)
2: QSewwP58CJNeJYcT_PkP6VjuA-4.crl (hash: RR5Zl1p44EducS5K+4xQq7F+z8xVjEbUMuA40PVfMzU=)
3: iuTZJrZ_xqcN--oZzppXYNl2GLY.roa (hash: EaSRmqObnprgwhDFxETI2q5Xy3PnwGKEyMaUX8iySCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:74:fc:35:ad:ac:73:34:16:f9:d3:13:09:96:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Validity
Not Before: Jun 28 18:01:20 2025 GMT
Not After : Jun 29 18:01:20 2025 GMT
Subject: CN=004082869a221c0bb09abd7d232138e5a568e73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:11:d4:e2:ce:6a:04:c8:8b:8b:5d:83:43:
02:f3:89:44:25:52:e2:1d:bd:9e:29:9f:62:80:3f:
ac:e9:20:90:98:4e:7f:0d:eb:1b:16:ee:e7:92:16:
3a:85:db:d9:96:4c:7e:92:a4:f6:5d:3a:dd:d1:0a:
74:5f:e6:dc:e2:aa:58:89:1d:39:db:9e:b7:ae:52:
aa:b5:24:96:86:c3:be:0d:bc:0b:66:75:65:37:1e:
d1:55:28:dd:3f:a9:e9:bf:68:8e:0a:fb:7c:14:9d:
3a:f1:ed:50:eb:06:20:ef:68:59:40:a2:23:2c:b0:
5f:85:e4:cf:cd:1d:aa:e2:4b:23:f0:54:63:92:ac:
d6:73:d5:b5:7c:76:bd:7b:ce:f7:33:55:d3:5c:66:
05:99:36:3b:e2:76:d7:09:e9:99:2f:66:29:43:85:
48:33:54:7d:50:77:d1:11:7d:3f:e6:95:be:71:7f:
52:fc:e6:62:c2:80:37:f0:88:73:4b:6f:b9:33:3f:
6f:10:b0:11:f6:7e:90:c6:77:7b:03:45:99:36:d0:
66:e6:44:f9:25:fb:a8:24:8a:e7:47:05:d1:da:0b:
c8:0c:11:89:9d:af:8d:68:53:d3:25:82:b2:f0:65:
f4:52:88:e5:bf:70:eb:7f:39:0a:35:37:c6:f3:b7:
7b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:40:82:86:9A:22:1C:0B:B0:9A:BD:7D:23:21:38:E5:A5:68:E7:3A
X509v3 Authority Key Identifier:
keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:62:0f:20:9d:4c:39:15:2d:7f:dc:52:7d:6d:eb:bd:29:66:
23:ce:32:89:ba:d7:cc:8f:cb:79:e9:17:5c:b4:cf:08:88:b4:
9a:d4:ca:c5:6a:1e:e1:39:49:14:b8:7a:e7:b1:5b:6f:c4:12:
d9:8b:42:d6:48:cd:d5:21:91:39:2c:f8:30:04:ff:86:19:c2:
96:60:52:d9:49:c3:62:6c:ee:f0:5e:e7:f0:b5:eb:f5:e7:69:
bc:74:f7:9d:b6:fc:fe:a4:43:b3:ee:b5:90:93:0f:49:0f:30:
a6:9a:42:60:fc:a3:30:af:2e:93:0b:34:9b:7a:5b:91:09:74:
0e:63:50:13:97:1b:cd:ae:d8:f6:8f:3f:5e:60:35:a9:a0:d5:
28:51:ed:fc:b5:8e:92:19:e0:dc:f5:a8:95:44:50:d0:e3:4b:
2b:7e:a7:a3:57:1c:17:51:6c:e2:33:00:4b:e8:4c:c8:3b:61:
79:cb:51:a5:1c:ff:bc:a4:7b:05:27:f6:16:05:4c:03:0c:5a:
85:f6:e9:65:a2:1a:20:a3:16:2e:79:e6:97:7b:d5:94:24:b6:
fb:a9:20:7c:a5:0a:68:ff:40:3d:01:9b:21:3b:22:34:41:f8:
54:d2:4e:0b:69:17:9b:5c:f3:d4:59:1d:f7:7c:5d:ae:82:2b:
11:a9:da:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:05 2025 by rpki-client