Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
File: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft (raw, json)
Hash identifier: PYGm3jM7NizXVaEqBY7+wSkm3e3pGeTgnhN9e88+kLg=
Subject key identifier: 3B:0B:CF:FD:00:B5:24:60:58:94:70:A5:AD:4D:29:48:70:6E:B9:7D
Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
Certificate issuer: /CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Certificate serial: 0197B6A04CA536BC1A751CA46AFEC4D67BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
Manifest number: 0E8D
Signing time: Sat 28 Jun 2025 13:00:48 +0000
Manifest this update: Sat 28 Jun 2025 13:00:48 +0000
Manifest next update: Sun 29 Jun 2025 13:00:48 +0000
Files and hashes: 1: OWE82AJ6XMkETtg5SeVok5RbVMg.roa (hash: 61UYmcPzIK3gYtRzlZnCzxd39wiKKzN3mE1c8vnojHQ=)
2: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl (hash: jvalQdSqVo5v42n8YCrF36DPiq3B9qPvzHjNGjS63Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:4c:a5:36:bc:1a:75:1c:a4:6a:fe:c4:d6:7b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Validity
Not Before: Jun 28 13:00:48 2025 GMT
Not After : Jun 29 13:00:48 2025 GMT
Subject: CN=3b0bcffd00b52460589470a5ad4d2948706eb97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:41:d8:0c:fa:7c:08:68:89:f9:9b:7d:f4:
63:0c:22:05:a0:e2:c6:bf:79:6b:d4:e4:a6:33:9d:
a7:17:50:e9:fb:be:db:40:b7:e4:32:85:fa:ea:ad:
f6:22:f0:65:f4:8f:00:c3:28:c8:69:81:f0:02:c3:
27:79:79:77:49:26:0d:ae:f3:e3:25:50:dc:ff:1c:
c3:f8:69:a5:2c:a5:bc:72:2b:eb:d1:d5:19:83:04:
07:11:45:b1:85:e0:af:35:79:70:44:6f:25:6e:7c:
a1:38:75:7a:cb:c1:f7:63:d0:40:21:6f:44:f6:fe:
a1:ae:eb:99:f5:5b:45:a4:c2:2f:e7:9e:79:67:dd:
2c:37:ca:1f:c4:76:99:60:dc:f5:e6:09:3d:7c:33:
4d:08:50:64:45:8a:d4:45:f0:07:7b:7e:61:c6:18:
85:62:b4:a8:c6:b1:97:c8:47:bd:bb:47:25:2a:24:
53:34:ce:d2:df:fc:28:54:b7:e0:83:24:d8:c4:c2:
c0:3b:1c:d5:25:ec:83:4d:38:94:e7:c2:14:92:9f:
9d:ad:3a:f2:b1:7d:37:09:a0:0a:11:14:95:fb:d5:
ca:a6:3a:b5:26:19:7e:32:1f:52:27:1d:69:df:96:
a6:b0:05:11:f7:3a:34:dc:fa:22:ce:ea:eb:82:70:
e1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0B:CF:FD:00:B5:24:60:58:94:70:A5:AD:4D:29:48:70:6E:B9:7D
X509v3 Authority Key Identifier:
keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:7a:9d:eb:a5:22:0e:f7:c9:e9:d4:b7:59:6a:0a:fb:de:4c:
0a:ce:8b:da:18:00:00:23:e7:5d:00:ca:79:89:2d:d7:26:4c:
ef:c1:d1:2a:02:2d:f9:c1:5a:30:ef:d3:41:42:59:1c:cc:bb:
0f:7d:1e:06:18:9c:34:e2:cc:f7:c7:bb:b9:7e:35:f7:31:42:
57:6c:2e:77:39:9d:17:7c:42:9a:81:32:e3:7d:fd:b0:86:40:
8b:68:72:dc:dd:67:f9:e4:7d:c6:47:b5:be:d8:a3:b4:73:75:
d5:97:78:56:93:30:18:6d:e5:c1:09:f0:3f:31:35:b7:91:03:
ec:62:8f:04:30:fe:1c:53:51:24:74:be:63:7b:0b:26:f8:6f:
19:e9:49:65:ad:1a:59:53:7d:43:f1:2c:fe:35:bc:56:2f:c7:
f2:74:86:d3:a5:12:86:9e:12:11:a0:c9:05:ea:bd:d5:cc:46:
29:15:de:ea:f6:98:81:3d:92:5e:f6:11:07:d5:91:df:37:23:
4d:12:3d:1b:1c:e0:36:67:57:a2:d9:e2:b4:81:47:63:ac:a3:
c6:4e:f0:84:a0:8c:28:ac:f6:b9:2e:28:fc:30:36:d8:18:06:
f8:cb:33:42:9f:0b:13:34:6f:ea:42:70:12:bf:64:46:05:fe:
df:5b:d5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:37 2025 by rpki-client