Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: pkIqGTKoHQLlY2o9rlQJ9ohO6DosN0J+5Xc1cFy02KQ=
Subject key identifier: A8:31:DD:4E:F8:93:4F:2F:4A:8A:9C:CC:64:62:F4:02:73:67:B2:B3
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 0197B6A075FB2672B9191E36A68A585001D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:00:58 +0000
Manifest this update: Sat 28 Jun 2025 13:00:58 +0000
Manifest next update: Sun 29 Jun 2025 13:00:58 +0000
Files and hashes: 1: 1-OpArz-cvr3_w4LMxpPZzSxCtqI.roa (hash: p66SMlwKH8qksSnzyFy8M1MJ9eGvVUlsB0A2v++rXYg=)
2: BO2GxdENWf3nZf4IjS3W9dxIBdA.roa (hash: CoT9/NP4/6nCeDdnm6fFk7HZ3lUZardt1KwDlood7sQ=)
3: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: /0czGpRBPOmtk10TFp1nevS5P7xQUQY70MYBTsw9pFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:75:fb:26:72:b9:19:1e:36:a6:8a:58:50:01:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Jun 28 13:00:58 2025 GMT
Not After : Jun 29 13:00:58 2025 GMT
Subject: CN=a831dd4ef8934f2f4a8a9ccc6462f4027367b2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:32:d8:52:1c:ea:81:32:66:4c:f0:a1:f5:8e:
00:28:0f:f3:98:87:56:4f:2d:49:f5:35:e9:d8:4a:
05:ed:0e:c9:05:6f:f0:a6:91:8a:c7:ba:ef:28:eb:
17:c3:65:b3:8f:bf:a1:30:81:2b:1c:16:71:6e:60:
98:f1:5f:63:cd:40:b7:13:06:ec:9d:9a:f2:8b:f7:
01:df:e8:ca:d2:81:84:6b:ba:19:96:42:2d:36:5d:
eb:42:b1:85:0c:d9:86:f7:35:c7:d1:47:b2:21:8b:
ba:32:c1:37:a3:eb:30:8a:6e:89:90:82:77:4a:76:
fe:ca:39:a8:dd:97:2e:a7:41:0d:2a:01:35:0d:9b:
79:35:40:e8:6c:42:52:0d:96:b3:71:96:62:43:39:
06:d1:64:60:34:b3:9f:0b:52:45:0a:0b:00:9c:e7:
c9:d9:47:79:12:f9:af:78:b7:46:3c:2f:90:e8:64:
6e:74:46:40:16:a9:01:ce:38:c1:e2:62:c6:ac:34:
07:4b:97:af:46:ae:ac:ba:57:12:72:8f:45:b1:6e:
df:dd:0e:46:e5:dc:57:14:93:e8:9c:e0:f6:b2:74:
86:6e:81:ba:80:b4:11:ff:46:0b:81:5b:cb:ef:f7:
50:ca:60:ee:e8:41:f6:0f:54:da:65:31:7a:de:8b:
be:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:31:DD:4E:F8:93:4F:2F:4A:8A:9C:CC:64:62:F4:02:73:67:B2:B3
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:64:07:64:19:d7:ac:9f:1b:57:5b:7f:36:1a:85:6f:30:cf:
30:19:8b:8b:4d:1d:71:a9:57:59:bf:56:dc:c4:1a:ea:f2:f5:
44:9c:9f:94:41:2f:a5:fb:c0:da:19:d0:3c:e8:0e:76:9c:03:
4b:22:29:59:4c:5a:d3:c6:40:cd:d9:43:a0:8a:4b:09:df:8e:
fc:61:72:2d:7f:d8:e0:d2:01:03:18:da:98:09:05:d0:4e:11:
c3:a2:b4:ab:9f:63:1c:e5:a2:b2:d5:e6:6c:77:7f:2d:cc:9f:
36:d8:00:f6:ff:14:49:3b:17:c8:bc:53:18:09:51:87:08:86:
d3:3d:21:f6:cb:4f:19:27:03:c1:27:81:4a:8a:c6:5a:2d:5e:
c6:f8:d8:bc:de:24:7c:1b:59:4a:bb:ee:e4:da:a5:f5:a5:75:
f6:cb:26:59:1a:1a:a4:ac:be:fd:fc:e9:74:f1:37:44:69:8b:
46:da:96:42:38:87:ad:25:b5:5a:a9:ac:2c:c9:82:19:c6:78:
f9:5f:56:98:8a:fe:a8:0b:f5:a3:c3:7d:32:31:cd:3f:4f:36:
64:4c:2b:9d:f8:64:bc:18:59:22:2a:c0:5e:0f:bb:0d:1f:d7:
fc:9f:4e:1a:8a:bd:8a:40:2b:b9:b3:f1:39:ca:db:a8:cc:06:
e5:a4:03:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:26 2025 by rpki-client