Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json)
Hash identifier: ea2Wf31A38akOiv2nCIqLJzueseWSsEBo/WrJ9Jg2mQ=
Subject key identifier: 41:CD:49:8C:F0:15:4D:23:33:32:87:99:A4:DB:E2:6C:99:44:10:A2
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial: 0197B70E816E4786FD0E5FFFFD9F7D10B93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
Manifest number: 0896
Signing time: Sat 28 Jun 2025 15:01:10 +0000
Manifest this update: Sat 28 Jun 2025 15:01:10 +0000
Manifest next update: Sun 29 Jun 2025 15:01:10 +0000
Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: 5fmovo8V1o0lVETzPdIVABXU8cNnjUUkkxklWTJGcJ4=)
2: lwAKLfcPZutkbCs3l1rr65okU8U.roa (hash: wQe65FAh279EvNyxsiAbyzzON1scOJGqaft13LngWyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:81:6e:47:86:fd:0e:5f:ff:fd:9f:7d:10:b9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Validity
Not Before: Jun 28 15:01:10 2025 GMT
Not After : Jun 29 15:01:10 2025 GMT
Subject: CN=41cd498cf0154d2333328799a4dbe26c994410a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:96:bb:3f:0c:fb:93:c6:f2:27:d0:44:de:42:
06:19:03:fb:e6:05:38:8f:51:e7:f8:b4:6d:fd:62:
92:4b:41:26:32:d3:02:10:74:a9:d3:78:fe:4c:b8:
2a:45:fc:01:60:e7:ce:e6:2a:e9:8c:1d:e3:8c:21:
08:00:17:13:dc:fb:cd:95:aa:b5:24:f6:1c:22:58:
ae:c1:3a:2f:ee:b1:26:6b:60:68:96:25:97:e7:8d:
91:21:31:0a:67:66:38:38:0c:25:88:62:ac:8b:8f:
e7:b8:60:36:1a:fd:80:13:cf:f7:6b:b3:ed:4a:2f:
5e:96:62:95:de:4f:2d:50:d3:a1:bd:9a:c7:fb:c6:
94:6e:42:9c:42:f3:d9:b9:c8:8b:16:b9:1f:58:98:
f9:38:65:fa:c9:3c:20:72:50:86:50:91:8b:8f:5b:
f2:1e:4b:82:87:f3:65:03:3e:88:89:ef:b1:f5:04:
58:6a:b4:7f:c2:32:4a:1d:16:d8:22:a2:10:08:5e:
f4:a4:aa:bf:36:2f:a3:ba:e2:01:1b:bd:5e:c4:2a:
80:b7:6c:fb:09:59:d7:a4:f1:dc:19:40:44:ff:97:
d0:a4:dc:08:39:13:fb:1f:26:39:0f:a6:96:c6:9b:
5a:c7:00:45:b9:f4:21:07:5d:52:74:69:fe:65:4d:
d6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CD:49:8C:F0:15:4D:23:33:32:87:99:A4:DB:E2:6C:99:44:10:A2
X509v3 Authority Key Identifier:
keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:67:82:8f:8d:e6:aa:bb:a4:22:d3:c1:a3:5f:27:e4:85:1b:
df:aa:7d:0d:a8:27:5d:c1:4f:3d:3c:b6:76:b5:29:33:67:2c:
6e:55:a1:12:43:34:5e:22:ec:9f:e2:c9:c1:fb:04:1f:cf:50:
1c:78:23:6d:a8:91:39:30:bc:08:85:f8:67:d0:6c:f7:d4:2e:
de:ed:f4:b4:a6:33:b2:38:3c:1b:8b:e5:53:e1:80:a2:64:24:
1f:e0:49:c3:84:9e:40:fa:b7:1b:cc:4d:ea:fc:7d:15:f4:c5:
63:06:2f:c9:f5:9c:5a:4f:d1:0d:3b:91:cb:40:69:d0:33:61:
aa:8f:0b:53:09:f6:2f:17:f9:8c:85:d6:71:34:c5:57:2e:53:
8f:f4:61:1c:e3:f1:e8:fd:3d:77:a2:b1:93:2e:80:8c:c5:4a:
18:d0:01:ef:0a:1d:89:bc:93:12:5c:29:d7:00:85:2b:59:38:
b1:aa:03:af:f2:d6:b8:e8:70:df:7b:e9:82:54:7f:b5:27:b6:
90:0d:24:7c:d7:a4:3f:52:48:42:73:a8:ef:9e:5c:2d:2a:d8:
7f:6c:5c:3b:f9:57:ed:c3:d5:a4:ee:cc:6d:d0:9a:7d:d1:cb:
77:f3:1d:65:50:a0:ca:34:a9:91:43:e6:c4:b2:32:89:ae:c5:
0f:45:6d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:06 2025 by rpki-client