Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: cfw3LV3TjaRmOjs0LEvf7uYno7yQaIRCZkR08UjeByU=
Subject key identifier: 19:5C:C6:69:B4:B2:A3:ED:47:E5:65:10:E3:BE:E5:35:18:B3:D4:99
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 0197B820CD9028F9181A290CD43B2774FADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 0790
Signing time: Sat 28 Jun 2025 20:00:46 +0000
Manifest this update: Sat 28 Jun 2025 20:00:46 +0000
Manifest next update: Sun 29 Jun 2025 20:00:46 +0000
Files and hashes: 1: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: v6DWe+CHogtvMxdO4DgQBkYpili0sjXg9Yl8r/2JPyY=)
2: pqlsmAxEb6u37QxzF6qCzpQ4SBk.roa (hash: teI/DPbnnC6ro04KC4yzmzn/SS2I9ht6+3TdoQMOA3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:cd:90:28:f9:18:1a:29:0c:d4:3b:27:74:fa:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Jun 28 20:00:46 2025 GMT
Not After : Jun 29 20:00:46 2025 GMT
Subject: CN=195cc669b4b2a3ed47e56510e3bee53518b3d499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:60:f4:9d:87:01:93:bc:0f:71:22:31:96:64:
35:5a:7d:f7:9e:ee:08:49:b4:44:73:6a:eb:8b:cc:
a5:55:fe:84:22:fa:e1:6c:bc:d5:b2:bc:5b:00:5f:
12:c2:32:58:81:26:be:e7:e5:0b:f9:ff:21:7f:7f:
81:50:bb:81:b1:f8:fd:db:10:32:f4:80:10:dd:f7:
f1:9b:72:61:77:f2:9d:20:f5:eb:88:75:09:a8:6e:
b4:e0:20:f8:44:bc:89:f8:08:fa:9d:e5:31:9f:be:
27:d1:b2:ed:16:ec:e1:68:3b:2e:ac:83:6c:c2:93:
e2:5b:ee:96:37:75:68:70:1e:90:0e:01:14:5b:e8:
d4:89:ef:8b:e8:0b:34:ec:a8:06:07:39:eb:c5:ba:
78:3a:df:8b:b0:4a:a8:ab:d8:8e:3b:e7:15:7d:50:
4a:03:ed:8a:a1:b1:28:cf:6a:16:14:43:66:46:b8:
2d:b0:77:5f:f7:1d:4d:78:61:3a:93:40:ce:b0:af:
0e:f1:6c:37:c2:41:be:1a:f5:ea:4b:9b:aa:11:87:
71:3d:39:c9:84:76:8e:7c:8b:3b:ce:8f:ad:35:99:
a0:91:85:3f:40:0c:c0:0a:ca:8c:63:83:00:f8:5a:
76:0d:ed:87:ab:08:5c:db:12:2b:b6:2b:80:af:dd:
69:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5C:C6:69:B4:B2:A3:ED:47:E5:65:10:E3:BE:E5:35:18:B3:D4:99
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4b:05:b0:25:df:f7:b2:e4:08:43:cd:b9:ea:57:dc:9f:8e:
bb:19:17:2c:59:36:23:59:e0:58:6c:a4:47:8d:98:92:0d:79:
33:aa:3a:3a:ab:2c:7e:ef:7d:61:e9:5e:32:ea:08:af:ae:7a:
38:1f:87:2f:51:35:d1:f8:9e:1d:d9:58:9c:02:7e:08:23:fe:
cc:ed:1f:7b:2c:61:c5:56:24:37:e4:03:f6:b4:c8:49:54:37:
d9:20:0d:0c:f3:f8:c2:4e:2f:5d:5d:57:9a:65:80:74:07:bf:
38:68:a0:8f:69:f4:bf:e4:6a:d5:ff:c1:0c:bd:a0:cd:31:e3:
6d:13:29:05:7f:9a:2b:a0:5e:f6:7e:7a:10:95:7a:13:a3:ae:
9f:8e:93:bb:aa:d2:1d:9f:b5:cd:b2:12:66:49:08:14:c3:0b:
bc:aa:c0:2c:c8:53:90:b3:57:10:64:7e:4b:a4:0c:4a:04:90:
9f:c0:27:5b:b9:0a:46:25:e2:35:0f:38:cd:8d:53:33:58:04:
c9:d8:b0:72:47:5f:92:ae:f1:85:dd:0b:46:2c:f7:53:f6:c2:
c4:65:85:83:5f:84:a4:0a:25:7f:42:ce:3a:c5:8f:eb:1f:ec:
ef:93:03:d9:a9:fa:d8:3f:75:f7:16:f9:4d:ce:63:db:4d:ef:
7e:34:ee:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:14 2025 by rpki-client