Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier: Ue1/FUkH2lRR+7ThokDTAqNO3zGD7A8msrCtSLCX2a4=
Subject key identifier: 46:5C:16:95:56:EE:DB:32:1E:DC:A4:D0:2D:05:70:9A:68:FA:5D:B4
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 0197B632E793B4C052D0DFA5F37F76FF26D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number: 037F
Signing time: Sat 28 Jun 2025 11:01:18 +0000
Manifest this update: Sat 28 Jun 2025 11:01:18 +0000
Manifest next update: Sun 29 Jun 2025 11:01:18 +0000
Files and hashes: 1: 0moQdaHf0K44uNdLnoszN_NLZl4.roa (hash: zGziV3K+6liMksPEZN4lWjEoRYfjKPi10ixQL7nMxfI=)
2: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: 3l0+RgV6SXm8Vt4hlVOMdVR+p9Sm8ra35zFY9wEdb5Y=)
3: nz1XOf28Ogcs8fiWug2xbFcdTSI.roa (hash: ztlz9ATge0wUo5eGVXQllv/BlyjO+lbBdkDSEy3I//E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:e7:93:b4:c0:52:d0:df:a5:f3:7f:76:ff:26:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Jun 28 11:01:18 2025 GMT
Not After : Jun 29 11:01:18 2025 GMT
Subject: CN=465c169556eedb321edca4d02d05709a68fa5db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c1:3e:2f:46:08:3e:e3:c3:27:aa:04:44:96:
06:53:ae:5c:dd:c6:a0:c4:52:b3:8b:65:e3:60:4f:
0d:f2:c2:df:a3:f5:4d:8e:91:79:97:df:25:f2:ac:
d8:e8:17:d9:9a:4e:cd:fd:c0:a3:a4:f1:fe:62:b8:
07:64:6f:46:03:4a:9e:3d:bf:86:a4:da:de:b1:18:
1a:32:b6:f8:c9:c8:f8:87:c1:91:cf:3e:06:a3:0b:
d8:ab:50:ee:94:da:06:5b:42:26:13:91:86:9a:78:
88:f1:f6:ad:08:48:d0:30:82:50:c5:1f:50:d6:de:
77:cc:73:e7:f6:b8:89:b1:44:51:ad:19:54:5a:90:
58:7d:ad:32:16:63:a1:de:8d:9f:95:0d:62:7e:42:
b3:fd:43:68:6b:9f:28:84:1a:f9:43:c8:6c:fa:be:
db:4f:a0:4c:d2:1e:8f:e2:93:1b:a8:d3:27:fc:e2:
55:b1:a6:fc:af:ea:de:fb:42:bb:cc:86:95:44:8d:
5f:a5:ae:92:e2:08:48:25:af:0b:9a:a8:2d:2c:2f:
22:fc:ea:d8:0f:51:21:85:1c:06:2b:d3:6e:f8:01:
18:51:eb:68:e7:14:e6:6b:7d:0b:e3:75:22:e1:06:
47:bf:8f:11:75:ba:ad:f3:b8:56:44:fb:9e:48:ea:
fe:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5C:16:95:56:EE:DB:32:1E:DC:A4:D0:2D:05:70:9A:68:FA:5D:B4
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ad:cd:6d:d3:2d:5b:5a:e8:73:09:ac:ac:63:db:d1:15:5b:
ee:06:36:a6:81:16:43:0e:8c:12:59:66:e0:3d:f7:d3:65:63:
39:25:0a:75:4a:cf:01:e7:6b:cb:37:18:9f:c0:41:a3:d0:ea:
a8:40:fc:ae:bc:d2:c9:82:5c:12:f5:5d:d2:63:fa:59:5b:51:
45:2a:cc:31:26:c9:fa:96:30:ac:39:af:db:b6:e6:c8:0e:19:
0f:a4:4b:a2:0d:d8:fd:2c:ba:53:72:75:e8:b2:0f:70:93:28:
74:17:8d:0e:4f:be:d5:38:ec:ec:af:2d:e2:fc:5e:2f:33:0f:
02:74:56:93:76:e3:b8:2c:45:51:a3:86:00:6a:3f:5e:6a:9e:
c8:06:60:d7:23:e4:55:19:c7:f7:9e:46:40:a5:5d:8b:3f:51:
54:a8:47:32:6f:73:c7:bc:29:d4:86:96:87:77:1b:2f:66:ef:
3f:45:e7:d7:99:94:1d:a8:b1:bd:10:3c:fe:d7:f6:5e:2a:59:
31:78:cc:59:6d:4a:99:96:2e:21:df:70:a3:50:d3:60:8d:ec:
7e:52:c8:a7:4b:73:2c:cc:e5:0b:2d:1f:ce:a9:1f:d0:c8:70:
70:60:d4:bc:11:5e:05:e8:09:7b:be:ad:ec:85:a8:01:8b:d0:
90:24:4b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:02 2025 by rpki-client