Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
File: QM_TpJvHHnSg0L9-NGyomylZehI.mft (raw, json)
Hash identifier: 9pj9D+ibOuKcq35UmuWspIgWdLiGO1Zbwb5lEjsTFmQ=
Subject key identifier: 72:D5:EE:4C:56:63:72:F8:33:2B:90:68:F7:D8:D9:A9:F7:65:85:51
Authority key identifier: 40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
Certificate issuer: /CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Certificate serial: 0197B6A09E022D7662ABA61520A3761F255E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:08 +0000
Manifest this update: Sat 28 Jun 2025 13:01:08 +0000
Manifest next update: Sun 29 Jun 2025 13:01:08 +0000
Files and hashes: 1: QM_TpJvHHnSg0L9-NGyomylZehI.crl (hash: HqjECt02HmkCdEo9RGHfb+1qdEvcamVav5w6IvF7HnI=)
2: cOU0f1SCKSAnKUQtSDidcXUui3Y.roa (hash: SxetuqQIAbe3h1o0xhzW+JEeQWRKvCIOYuGwJHKjEXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:9e:02:2d:76:62:ab:a6:15:20:a3:76:1f:25:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Validity
Not Before: Jun 28 13:01:08 2025 GMT
Not After : Jun 29 13:01:08 2025 GMT
Subject: CN=72d5ee4c566372f8332b9068f7d8d9a9f7658551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:cf:86:a7:a7:e6:7a:0b:c9:fd:06:3c:11:
ae:3f:b9:f0:b5:c0:81:4e:a5:21:d1:4c:8d:31:c8:
52:f9:2a:db:de:a9:40:e0:19:8b:26:81:9c:91:92:
7e:12:2e:43:e3:59:92:6a:5d:ac:79:45:c6:2c:d7:
c4:86:26:09:a8:40:87:d4:74:fd:61:44:3b:6b:7b:
12:e2:37:08:66:99:4f:74:f4:e0:6f:54:dd:b5:91:
75:dc:35:cc:5f:9c:50:90:01:bb:2b:95:d1:ab:70:
86:7b:8a:ce:6b:a8:5d:dd:63:5c:ca:7e:b8:d5:f5:
aa:14:04:1f:61:78:41:27:b5:e6:94:63:f4:fe:a9:
8c:5e:6a:83:c9:22:a2:d2:b2:f7:4c:0d:e6:f0:4a:
a5:35:14:8a:b1:9e:90:06:da:92:f1:97:81:87:8c:
23:fa:1e:5d:81:c1:e6:97:b6:26:c6:b5:7b:f5:96:
d9:d2:9c:b8:18:5a:66:8b:78:a3:1c:39:bf:ba:39:
e5:9d:b6:ee:6f:b0:0b:dc:52:d3:ef:a3:00:49:0d:
6d:17:eb:c6:e0:97:f1:cb:58:98:72:07:89:f4:f8:
d2:45:61:2f:1d:91:b5:0a:f9:34:79:b0:07:80:68:
18:d1:c5:a6:11:4a:ad:3e:0f:31:d4:e2:a0:d9:90:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D5:EE:4C:56:63:72:F8:33:2B:90:68:F7:D8:D9:A9:F7:65:85:51
X509v3 Authority Key Identifier:
keyid:40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cc:dd:5b:55:dc:48:61:01:cf:c2:c3:c7:cf:14:82:b3:e3:
26:1c:98:88:12:9f:d8:6d:56:65:49:e6:0b:ad:35:f2:b1:a9:
57:e7:66:66:b5:9c:71:19:ea:ca:08:2d:7d:a4:ab:69:a9:ea:
5f:5b:f1:26:6f:b9:fb:3b:2f:63:12:68:14:8a:27:c0:9e:ca:
b9:a9:cf:4b:b5:c2:df:e6:50:71:3a:95:89:75:09:4f:68:0b:
d6:fd:22:7d:35:65:e4:f3:b2:9d:40:0d:60:06:73:09:62:b7:
05:fe:b4:97:60:b5:42:cf:1a:5d:8d:12:ab:8b:80:7d:f1:cb:
12:4e:d6:58:15:ea:67:85:f7:e9:a7:7e:5d:a5:a4:0d:b6:2b:
db:64:2a:75:e7:fb:6d:15:fc:53:23:30:d6:73:50:a6:2f:15:
f5:72:f8:45:b2:5f:52:39:72:02:29:93:92:15:18:fa:d7:2b:
ae:0a:df:6e:fc:35:9a:56:36:80:4a:b4:69:07:dd:b3:72:ce:
48:a0:a2:74:d7:59:4b:86:06:e5:e1:a2:a9:ba:04:21:d8:6a:
2f:12:c7:73:bf:4b:c4:77:4c:e7:fb:a0:55:d0:80:fe:84:52:
bc:e1:e2:07:65:6c:d4:08:e6:e7:34:92:3c:5e:d8:01:bf:0a:
b0:b5:32:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:22 2025 by rpki-client