Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier: hcf1kvcTwhOwaqhASrqZV2g9LDBy1lIRBVP3nrmMTYQ=
Subject key identifier: 35:B1:60:E0:C1:86:54:38:88:7A:94:32:07:92:E4:D2:70:87:30:7D
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 0197B70EA0A0A50FDE7A030311E5E6288EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:18 +0000
Manifest this update: Sat 28 Jun 2025 15:01:18 +0000
Manifest next update: Sun 29 Jun 2025 15:01:18 +0000
Files and hashes: 1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: HejyAIDDwHxCJCBTbN8cNmdtooBlJ9HeV7Ov9BdVluk=)
2: osrkqaQb3qx2EG4vPDrSx-jUbRs.roa (hash: 60lpTHLn4dLpnmjc421kdUFig6Uy9lDHTrD8OxkZHo4=)
3: xkbe7-bpi_soiL6y9FjVY-pZjq4.roa (hash: DD/O2GJZO7TOSqwXXJo222/YwW4YcV/75ci14nBdOpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a0:a0:a5:0f:de:7a:03:03:11:e5:e6:28:8e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Jun 28 15:01:18 2025 GMT
Not After : Jun 29 15:01:18 2025 GMT
Subject: CN=35b160e0c1865438887a94320792e4d27087307d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:89:ea:5f:43:0a:3b:43:f9:ca:72:0a:07:c4:
7d:0f:9a:36:f8:2c:48:44:49:8e:39:da:25:60:47:
37:a4:63:04:74:31:08:97:c6:fb:9f:d4:87:8e:f5:
33:1d:4f:13:3d:ab:e0:bf:a8:68:03:b7:89:1d:ad:
cc:19:75:d2:8e:5a:36:55:c0:31:73:af:42:88:a5:
a2:b5:22:8d:2b:a2:6b:22:95:03:87:45:cb:a1:83:
f2:95:f0:da:dc:52:4b:a5:48:d7:57:bf:16:3a:46:
97:32:37:a2:6f:16:46:1c:69:d1:24:c8:2a:f4:6b:
bd:bd:f7:b3:b5:08:41:b5:e7:7e:ad:66:82:fd:1a:
22:f1:41:41:19:d3:07:88:5c:cb:99:c7:c4:e9:98:
5c:a5:33:7b:8d:08:44:1e:05:a9:94:63:35:ee:f1:
23:47:60:56:ff:5d:e1:a1:75:d0:4d:c2:8d:30:58:
dd:24:55:7d:29:93:e4:22:2b:2d:cd:ca:38:8a:f6:
96:16:de:fc:7f:be:1d:37:f7:4c:ea:18:eb:01:cb:
90:d9:87:27:8d:9a:06:fd:99:e7:5f:08:51:e9:6c:
18:35:3f:d6:c0:2b:c9:15:bb:3b:55:5f:05:d5:7b:
72:73:0c:09:dd:4a:33:79:da:32:dd:a6:27:4f:78:
9d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B1:60:E0:C1:86:54:38:88:7A:94:32:07:92:E4:D2:70:87:30:7D
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f9:86:a1:74:8c:30:71:25:ce:90:8f:8e:ea:db:2e:66:dd:
71:c2:63:32:d0:e2:23:81:c2:6c:a3:f3:62:8a:32:9c:ba:52:
54:8d:cc:08:55:3f:d2:33:40:1d:07:41:7a:6e:f0:5d:b2:53:
ed:2c:a1:c9:cb:74:5a:3a:d6:df:0f:4c:ca:39:66:5a:f9:55:
9b:58:b0:58:18:54:43:2d:2b:09:8b:23:d3:b6:b3:27:34:1f:
73:64:8f:b7:6f:62:09:5f:99:9e:9c:c3:93:1d:02:76:8a:84:
75:8d:b3:14:1e:f4:c6:a4:ee:e9:38:4c:98:eb:c5:25:8a:fd:
11:54:21:3c:24:9a:5b:1f:2f:dd:2b:fb:15:26:72:29:e0:60:
e1:ed:88:82:85:2e:db:ca:74:25:e0:54:23:98:25:b8:2f:34:
b0:68:ca:2b:09:84:58:52:27:f5:2e:59:38:b9:a0:98:86:a5:
55:9c:c0:0a:ab:ad:59:75:97:4a:f0:a3:ab:8c:61:8d:1c:c0:
b2:e0:e3:e7:a4:5c:ff:b7:3b:b4:c4:68:4c:cd:eb:fb:49:2d:
6e:dc:a5:73:29:a6:e7:bc:99:8a:6d:37:53:b5:a1:09:5f:8d:
69:6b:6a:52:96:e0:15:a3:ac:a0:ec:bd:3f:72:f9:f0:fc:0b:
56:5e:78:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:55 2025 by rpki-client