Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier: at0Dob7ht9sEmDjr2zhtWjVuzqTGzBDrguXVa1EirwA=
Subject key identifier: 4D:6B:91:91:53:B6:5A:72:2D:CA:91:3E:3F:DB:48:40:E9:61:37:EB
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 0197B5C52AC8F1AA9693E4B83C3C7767F646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number: 1349
Signing time: Sat 28 Jun 2025 09:01:26 +0000
Manifest this update: Sat 28 Jun 2025 09:01:26 +0000
Manifest next update: Sun 29 Jun 2025 09:01:26 +0000
Files and hashes: 1: PHhq7bUnGcZX4y_ykkmnYZLunMM.roa (hash: LoLkLVHGuU31zRjTVmAdVTtSVPzxLCqr19G9NEBPRqg=)
2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: +lR75773YmEyNGvBhmHjub/wVPa9dCLetRWzfNf9czo=)
3: ZHuGa1b5EE3BXDt8zUZ6H71dsTI.roa (hash: c5Q65E0/2d2vtEwjuw2BN9yFwucni9qkVj/W8ITRCHA=)
4: mbmOrU1gpeptZI3HpUCwe4-8PxQ.roa (hash: U1SXSUwkwzX7zwHV3CIwtefKowszejuGaOw7kehwc7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:2a:c8:f1:aa:96:93:e4:b8:3c:3c:77:67:f6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: Jun 28 09:01:26 2025 GMT
Not After : Jun 29 09:01:26 2025 GMT
Subject: CN=4d6b919153b65a722dca913e3fdb4840e96137eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:40:6e:c1:74:08:20:b3:96:47:2f:b8:9b:
70:57:2f:fb:08:fc:a1:64:b1:66:1b:26:7a:71:6c:
c6:d9:9d:51:03:ea:dc:a2:b1:53:e9:f3:96:24:63:
f7:0f:7a:55:f9:49:42:66:fb:b9:87:68:ba:c8:c3:
cc:5d:f1:37:76:f5:aa:25:62:78:28:9d:f1:c7:27:
39:ed:be:6c:82:85:51:a2:c5:2b:65:5c:9e:cd:76:
21:38:0b:8b:33:c9:6a:6a:c5:c2:f3:e6:51:de:74:
3b:3b:7c:fd:ff:88:02:21:30:17:b2:01:61:62:63:
f6:83:87:9b:c9:c4:53:ff:f1:3f:df:f9:f8:b2:de:
11:fb:ce:5d:ce:d6:57:83:1b:d6:c2:15:92:60:db:
ce:df:a3:39:99:34:34:88:e9:16:2b:38:98:4a:33:
90:58:7b:40:78:13:65:dc:63:36:3b:86:8b:03:7f:
21:1f:91:ae:11:55:eb:0d:fd:14:1e:c6:12:21:d7:
90:4e:05:65:63:3b:8b:05:6a:03:d4:57:a0:8e:4b:
31:41:a5:a8:ca:7f:e3:61:c7:5a:b2:fe:d4:48:dc:
cf:25:fd:34:c1:fd:4b:b8:62:4c:50:70:7a:de:01:
38:06:e9:84:eb:1a:2d:e0:45:18:93:61:36:ad:ad:
f6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6B:91:91:53:B6:5A:72:2D:CA:91:3E:3F:DB:48:40:E9:61:37:EB
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f4:24:7f:85:c3:78:d6:e4:b9:f6:01:b7:be:b0:1d:af:1f:
41:58:93:1c:1a:9b:c4:18:4b:5a:ab:80:5a:18:8d:85:db:a9:
92:97:10:e7:78:2a:a3:7f:03:2b:a3:90:f9:bf:fe:1a:05:17:
bb:cb:52:eb:21:f1:fe:6c:16:cd:80:f8:63:73:06:d5:0c:81:
5c:25:42:82:a5:38:fc:7b:93:25:ca:5b:7d:fa:0e:78:45:8f:
f9:0b:e1:a6:c3:c9:2f:f9:19:8a:02:eb:54:15:f3:f2:3f:c2:
67:95:b4:3f:c5:3a:ca:73:3f:fb:94:db:de:57:13:a1:32:c5:
41:00:84:53:47:4d:32:09:65:86:65:f1:9b:06:c3:fd:cb:af:
0a:70:10:79:7b:1a:9f:36:88:b7:e8:73:79:ef:9b:97:5f:73:
73:5d:ab:8b:3f:3a:17:29:b4:43:36:1c:75:82:59:e4:be:aa:
2a:4f:d2:1f:ec:ca:f8:c4:1a:3a:b7:08:89:53:9d:08:75:7d:
ec:92:be:07:03:69:2d:30:68:db:ff:17:d1:83:4d:d0:e8:cd:
94:37:45:88:ef:31:29:89:7b:7d:80:72:4b:f6:29:83:35:4d:
ad:d2:6d:40:a8:9c:7a:61:eb:f3:f1:e8:99:d9:82:0a:04:08:
c4:bf:64:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:25:01 2025 by rpki-client