Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
File: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft (raw, json)
Hash identifier: X57P+w3YUYx+Tp+nLJh4Rvg3zkbC5UbyGrgKl1xvMDE=
Subject key identifier: 5E:57:4B:33:04:A5:C9:1E:93:DE:A1:45:0B:C7:46:E6:7A:8D:28:13
Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
Certificate issuer: /CN=429196310a7f7dd9999ec43e938fd906985a3f87
Certificate serial: 0197B5FBF6C51BE8950C03E47919AB3BD7CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
Manifest number: 0B11
Signing time: Sat 28 Jun 2025 10:01:18 +0000
Manifest this update: Sat 28 Jun 2025 10:01:18 +0000
Manifest next update: Sun 29 Jun 2025 10:01:18 +0000
Files and hashes: 1: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl (hash: G0/ocKpOobSZUcPGYYgii8rmzPD3j5S4WXw4CkgP0rE=)
2: wqLf4HxTBxblmV7dYjywZ9LSO_g.roa (hash: xrazM8n3J2DoAIHJJglhb+L4RSIj7Z+1Mi/FtQpdckQ=)
3: yy37HnfCaW61gwGyu1dsgubo12s.roa (hash: iEoXay/v6I8F/MG3qHjPe1FvicHR4Thx5PSijnoSoog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:f6:c5:1b:e8:95:0c:03:e4:79:19:ab:3b:d7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87
Validity
Not Before: Jun 28 10:01:18 2025 GMT
Not After : Jun 29 10:01:18 2025 GMT
Subject: CN=5e574b3304a5c91e93dea1450bc746e67a8d2813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d7:19:28:b9:a7:d7:90:d3:8a:2e:41:80:37:
a4:f6:01:85:72:8a:04:a3:0d:75:0a:5f:05:db:af:
9a:76:b8:3a:20:33:3e:a8:ed:a4:d0:0c:44:b5:c8:
6c:5a:88:e3:33:14:29:81:7d:40:87:05:8a:d3:f8:
2e:7f:72:0d:a5:24:8c:6c:74:f7:2b:b6:ad:ee:19:
51:d1:7b:ed:76:9a:44:3d:7e:d4:35:bd:5b:94:f9:
d7:0b:db:8f:31:f9:f5:e4:6b:46:80:d3:aa:63:de:
6a:e3:37:66:c9:59:5f:1e:4c:46:ed:4a:0d:fe:8d:
46:74:c8:5f:34:cc:70:32:52:49:1f:01:fb:09:4c:
e5:fc:df:7a:2c:3a:79:a0:66:38:70:e6:15:09:a9:
c3:94:19:0a:3c:06:52:bf:b9:83:e7:49:d7:da:d7:
43:8f:19:29:14:ac:fe:25:15:c8:67:c6:08:f1:ba:
7c:84:57:7a:24:ef:af:dc:8f:0f:6f:4a:ae:cd:37:
a5:59:d8:43:41:2e:f9:d6:5e:50:02:34:a9:b6:9d:
ba:dc:85:e7:a2:5e:a9:1a:33:b2:d2:e0:aa:46:51:
dc:95:b0:82:8c:ac:66:4a:bb:b2:5b:61:6c:14:7d:
7b:84:24:7a:3f:7f:b0:45:64:16:ea:e3:b5:60:10:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:57:4B:33:04:A5:C9:1E:93:DE:A1:45:0B:C7:46:E6:7A:8D:28:13
X509v3 Authority Key Identifier:
keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4f:26:2a:13:c0:6d:62:57:18:00:52:e9:24:29:dc:d0:7d:
41:be:bf:ed:55:6f:c0:4c:3c:d8:d3:08:fa:4e:95:4a:2a:0e:
c8:8d:92:2a:48:2b:81:f2:49:fe:6b:d7:52:1f:e7:60:e5:70:
29:51:e2:a8:fd:b5:ab:50:60:aa:61:78:76:e2:00:13:c2:8e:
5f:e9:5e:ab:b1:a8:6d:79:45:ab:d4:6e:a3:ef:81:a3:c9:fc:
25:b2:ac:5c:96:bc:15:0a:67:d2:b0:f9:38:07:f6:81:e2:78:
cc:05:ea:47:25:4a:fa:f6:78:2f:d8:3c:c9:91:2e:64:09:8a:
ad:d2:ba:4a:41:67:f0:69:5a:78:99:ec:4a:f8:90:9a:57:7b:
32:95:6b:25:e5:e9:71:37:57:f4:a5:dc:5b:55:e0:72:34:9c:
c8:01:8d:98:78:91:ef:d1:b6:cb:e7:5e:a5:b2:00:29:1a:35:
84:9f:52:dc:96:65:aa:52:a5:ee:4a:59:5b:a3:33:3b:42:74:
08:4d:23:cd:4d:72:76:00:5e:a6:76:4f:d8:b5:10:28:bc:ed:
84:20:23:ef:9a:c6:d8:bd:ca:85:f1:47:f5:17:c6:3c:fa:ea:
73:78:e5:b8:e3:db:86:88:b2:2b:77:46:b9:95:52:1d:03:27:
4e:8a:ca:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:40 2025 by rpki-client