Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
File: QD8Iu6_6QWGEMgOop1erbpVGsM4.mft (raw, json)
Hash identifier: bWPDTgC3z01hLhKY7zcXwlUlxB84uWVsjMenqwquwxE=
Subject key identifier: 85:0B:30:48:6C:E7:2A:5A:61:70:22:36:0A:BE:AC:0B:D0:F1:B3:43
Authority key identifier: 40:3F:08:BB:AF:FA:41:61:84:32:03:A8:A7:57:AB:6E:95:46:B0:CE
Certificate issuer: /CN=403f08bbaffa4161843203a8a757ab6e9546b0ce
Certificate serial: 0197B7EA61E57BF3C0442B0BA4253579040B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
Manifest number: 04C9
Signing time: Sat 28 Jun 2025 19:01:20 +0000
Manifest this update: Sat 28 Jun 2025 19:01:20 +0000
Manifest next update: Sun 29 Jun 2025 19:01:20 +0000
Files and hashes: 1: 4PjPPpWKgAtzAAOasr7gIk0JbPI.roa (hash: yiKX1aQ5yWrVl7HwLmjfK1M9G+FpWFiXbyU5qVlLbDY=)
2: QD8Iu6_6QWGEMgOop1erbpVGsM4.crl (hash: WEJQnoWIXiihr9I6SN3AXb6lTFC9qs3R2uqKNRHVyic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:61:e5:7b:f3:c0:44:2b:0b:a4:25:35:79:04:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403f08bbaffa4161843203a8a757ab6e9546b0ce
Validity
Not Before: Jun 28 19:01:20 2025 GMT
Not After : Jun 29 19:01:20 2025 GMT
Subject: CN=850b30486ce72a5a617022360abeac0bd0f1b343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:02:1d:18:ce:60:c4:15:10:71:42:da:00:53:
77:18:dd:4f:6c:bd:f9:e9:92:4c:db:1e:69:e2:af:
54:c3:d2:62:9a:c9:3f:c3:b5:25:71:0f:a9:45:ad:
50:21:0b:5b:ab:75:3f:ae:74:b7:17:ef:7a:a8:d1:
a0:a6:dd:8f:f1:95:04:74:a8:fc:e7:b7:d8:4a:6a:
eb:e6:06:c4:7d:4d:f5:aa:8d:d2:d0:39:b1:16:e8:
f9:91:cb:82:98:40:03:97:81:28:e9:9a:b0:b0:34:
d3:ce:68:27:86:e9:7d:20:75:4c:ec:d7:63:67:7f:
bd:46:21:4e:ec:08:d4:fb:49:50:7d:de:bb:c3:a3:
38:eb:29:f5:00:c3:9f:f7:55:7e:71:e2:cd:f5:89:
2f:14:74:9b:b0:93:1b:b1:ed:6a:9a:a6:b1:26:a3:
40:f5:6a:22:2d:14:55:ae:9b:9d:b5:47:89:61:dc:
9e:33:09:fe:7d:6a:e9:e0:3b:80:f4:82:9f:8b:d4:
1e:67:87:50:d0:7a:f8:6f:8e:60:10:3a:42:e3:2e:
9f:d5:5b:43:0c:04:77:2e:f8:96:60:15:17:e1:42:
91:14:a4:e8:27:24:4e:e6:29:b6:2a:8d:7f:f2:18:
12:3e:71:6d:58:2e:9c:98:ef:35:8a:aa:c3:ff:51:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0B:30:48:6C:E7:2A:5A:61:70:22:36:0A:BE:AC:0B:D0:F1:B3:43
X509v3 Authority Key Identifier:
keyid:40:3F:08:BB:AF:FA:41:61:84:32:03:A8:A7:57:AB:6E:95:46:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ef:56:a8:83:12:ef:2c:9e:39:d7:29:34:3a:e1:b1:14:9c:
f1:a8:81:55:af:b9:c9:65:a2:c2:2b:d9:9c:6c:96:7b:60:f7:
4a:6a:6e:ef:b3:98:be:9a:06:28:be:70:9b:24:75:3a:60:cb:
6e:a0:93:0b:57:49:dc:64:e6:8c:17:13:b9:dc:f8:63:44:eb:
24:67:6d:2a:88:36:32:6e:5d:68:1c:1f:40:93:e1:44:35:69:
02:c1:6b:1d:0b:0e:68:d7:dc:4e:7b:a6:9d:26:b9:b0:7e:5a:
6d:95:ca:5b:20:0f:6e:a1:90:78:f8:b2:3c:e7:31:28:ea:17:
ab:c0:8e:5e:88:b5:60:91:b8:3b:a5:17:74:32:23:8c:f9:4d:
41:a0:ef:7d:9e:49:34:c2:08:ce:26:57:f2:dd:aa:79:e0:c0:
8f:c5:5a:3d:09:e2:03:cd:6d:56:dd:ed:5a:b4:9b:16:8e:33:
d1:2f:93:84:d2:f2:ed:bf:55:fe:2f:38:c0:5b:05:e0:94:a0:
5e:2a:b0:52:f0:8c:89:c7:64:bc:65:bf:9b:11:f4:59:a0:cb:
c5:df:73:86:7d:5d:49:b6:82:b3:34:91:46:aa:d6:ba:f4:b4:
47:96:78:3e:bf:20:10:23:64:09:d8:76:51:fe:3b:75:d2:23:
18:ac:d1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:28 2025 by rpki-client