Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
File: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json)
Hash identifier: WFqdVoTkxhyxCaqMTQYTsOUjQU2rMsUD9ZAZVBk0k6M=
Subject key identifier: 86:CE:49:09:DD:7F:4E:2C:C1:16:2D:D0:AF:A8:DA:25:7C:7E:04:D2
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 0197B7459E068CB1AF8B1A8B7DBD3994CF0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
Manifest number: 15DF
Signing time: Sat 28 Jun 2025 16:01:22 +0000
Manifest this update: Sat 28 Jun 2025 16:01:22 +0000
Manifest next update: Sun 29 Jun 2025 16:01:22 +0000
Files and hashes: 1: 7ZMUW-4CMsR-5NsmCET4C511LYc.roa (hash: flHUU3cZdn7ebvLYAZpyrnv0Wp5Ls4L3zQ1Agou/ou8=)
2: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: +5b//XLHabcLMlMnyPY0J3BD/3sZ9IOkDTintdtmhdQ=)
3: _13oaI6Mh2-cQfOXbAE2zjMBR68.roa (hash: ndo9/32z0xvpElRzHlOESlFA8gnATqtQoHQeDfaaBWY=)
4: uSEgi8iUzILIPcuywbOmvg5Y2Gg.roa (hash: XHWIRfce86oixYrPwBde67Fu+mIBmMzlLDIa0ik6CpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:9e:06:8c:b1:af:8b:1a:8b:7d:bd:39:94:cf:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Jun 28 16:01:22 2025 GMT
Not After : Jun 29 16:01:22 2025 GMT
Subject: CN=86ce4909dd7f4e2cc1162dd0afa8da257c7e04d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:4b:11:e1:33:c7:29:2a:4b:70:e3:58:fc:
29:af:a3:2e:39:75:29:d1:02:fc:32:37:79:74:35:
f8:5e:ec:2a:52:ba:dc:46:7b:b9:93:c1:e9:00:0b:
ed:9d:54:ce:0b:be:3f:4f:91:c3:58:ab:0b:d5:7b:
bd:92:69:a6:0c:bd:2f:02:33:70:0f:6f:b7:88:08:
20:ac:15:ba:7d:a0:ca:95:3a:ac:b2:7d:1d:2a:23:
e2:10:c2:1b:ad:4d:1b:7a:16:63:9e:f1:11:2e:a8:
9b:ca:a3:b9:12:36:58:fc:05:64:6b:a0:a6:ab:9c:
4d:26:8b:eb:fc:d3:a9:bb:a7:9e:e0:53:80:bf:c5:
82:c3:7d:72:d9:2f:63:02:a9:af:2f:26:cc:8c:b2:
03:e3:15:50:7d:59:b4:32:b5:fe:b0:3e:1f:54:99:
dd:68:33:31:31:f1:83:2d:ad:66:3f:6d:c3:ec:91:
e9:97:fc:e0:3a:27:0c:3a:e8:1f:69:bd:5b:73:05:
94:30:4b:5b:9b:da:7b:2b:3c:94:0d:23:74:7e:f9:
25:83:96:9a:bd:b7:e4:e5:5c:90:3f:a9:85:13:20:
7a:69:ee:7f:9a:2f:5e:f9:aa:9c:09:c9:33:7d:a7:
46:5d:c8:bd:8d:22:68:5e:1a:45:61:6a:4c:b5:d8:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CE:49:09:DD:7F:4E:2C:C1:16:2D:D0:AF:A8:DA:25:7C:7E:04:D2
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:01:13:17:e4:ec:94:57:2d:eb:4a:b9:df:83:69:cb:d0:e6:
9b:e9:3e:b3:45:18:02:ce:04:00:8b:0f:2a:5a:ec:07:c1:85:
e3:7d:d2:15:87:ad:8e:91:b9:4a:70:bf:1d:3c:77:7e:59:af:
7e:f2:09:a9:dd:81:c8:40:56:7c:2c:49:5f:2b:51:23:dd:92:
ae:33:b3:cc:86:18:fa:a7:fe:ea:57:69:e8:e6:88:e0:c8:1b:
32:d9:e6:64:54:d6:9e:c7:91:92:00:10:ed:75:83:9d:1e:f0:
32:c8:8c:ac:f1:1f:c0:c6:a3:34:3f:49:ca:4e:55:cf:6c:90:
6c:6d:c1:68:59:a8:97:37:1a:71:28:46:15:c2:9d:38:99:bb:
25:a3:1d:88:91:96:64:e9:cd:af:1a:e7:be:26:83:b1:33:97:
ca:92:6b:5c:86:b0:14:a2:c3:1b:be:45:69:1a:1d:3d:b9:4c:
6f:9a:43:5f:62:c9:81:12:67:73:d8:0f:35:02:7a:2f:a8:83:
92:2f:9f:d3:49:32:cb:f2:1c:ea:9a:79:33:d1:52:1e:1a:a1:
87:2a:78:7c:a3:e2:b2:b3:05:d2:81:79:98:56:85:95:a0:3a:
ed:cc:7e:90:af:df:de:d8:87:a7:bd:6a:4b:c8:de:7c:19:49:
95:9f:1f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:31 2025 by rpki-client