Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
File: Qs9KEo0J38S4sDWhLNgx-fewFGk.mft (raw, json)
Hash identifier: 927Q2R78K29G+xTEmfTI75grPUJLlj+rT1AY1lA+9wU=
Subject key identifier: FC:D6:F6:C4:30:3F:49:DF:10:E8:A6:A0:60:D5:25:B1:C7:FD:F2:64
Authority key identifier: 42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
Certificate issuer: /CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Certificate serial: 019782E9CE7A0EA994DBADA4E2FB17C23531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
Manifest number: 0EB1
Signing time: Wed 18 Jun 2025 12:00:50 +0000
Manifest this update: Wed 18 Jun 2025 12:00:50 +0000
Manifest next update: Thu 19 Jun 2025 12:00:50 +0000
Files and hashes: 1: 2rG3zP2nsK1WFDdtam1fkefUVec.roa (hash: FYwcLySS6BHsPeqa2YZMNFpU87urYtsqq/j3a/UUmqo=)
2: G4MlXm_89uj6pHE4Hj0jm0JnAPs.roa (hash: IvJvABmtoL2D5H2lLbc36SYTprrxJ3+le+YIp65E/hA=)
3: Qs9KEo0J38S4sDWhLNgx-fewFGk.crl (hash: L4L9WeGk9dGYrFpRCxgKLbXz2Pz9NrP83vtC4/qKFxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:e9:ce:7a:0e:a9:94:db:ad:a4:e2:fb:17:c2:35:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Validity
Not Before: Jun 18 12:00:50 2025 GMT
Not After : Jun 19 12:00:50 2025 GMT
Subject: CN=fcd6f6c4303f49df10e8a6a060d525b1c7fdf264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:9a:71:aa:37:9c:fe:76:54:97:28:3c:3e:
13:66:dc:7d:6c:4d:f1:42:68:8d:8b:41:2e:22:44:
8e:4b:72:5c:1c:c6:03:b7:00:83:cd:32:bc:e7:4b:
be:09:6c:98:dd:36:7a:3c:39:a8:21:35:64:06:a2:
eb:31:cc:8f:26:61:46:cd:16:19:59:41:d2:54:71:
09:c5:b2:29:04:cb:ab:4c:e5:bb:61:a5:08:7a:1a:
cd:5a:16:22:79:c6:57:b8:30:27:73:e9:52:02:85:
79:b6:59:ff:b5:b0:00:fd:91:2f:3b:db:b6:ef:6a:
2b:2e:76:6b:cd:15:37:ff:75:24:2b:cc:56:f7:14:
6a:05:bf:34:5f:6d:91:40:4a:b0:78:5c:06:18:20:
23:55:d6:1a:e8:02:26:72:4b:fe:a2:4d:3c:97:ab:
01:f0:d1:53:0f:3b:d4:44:12:7b:fa:ce:0d:a2:94:
da:82:22:2b:9a:8a:3b:7c:3d:5a:20:1b:cd:16:35:
d9:07:84:0d:63:b7:91:fa:de:89:4a:96:59:94:b8:
38:1b:00:7c:d3:80:5b:02:de:87:fc:cb:a3:70:b7:
35:32:f4:31:cf:35:bb:f1:94:c2:bd:cd:2b:cf:14:
6e:fa:2c:cf:84:af:9c:b2:d8:06:64:22:53:c7:68:
e8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D6:F6:C4:30:3F:49:DF:10:E8:A6:A0:60:D5:25:B1:C7:FD:F2:64
X509v3 Authority Key Identifier:
keyid:42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:01:cb:a5:c2:15:be:cf:31:89:78:c6:b0:cb:46:7e:30:eb:
3b:a6:8c:44:01:37:66:6d:9f:09:d2:03:8b:64:5a:5f:1c:44:
eb:e9:a3:eb:42:b0:da:04:87:f9:87:e2:fb:d1:a3:81:2a:15:
9e:f2:62:cb:ba:5b:c2:2a:18:c0:49:32:57:6f:cf:21:cb:51:
f2:5c:ee:02:ef:c8:84:e3:4d:bd:a4:62:7d:d6:6d:69:95:53:
e6:bb:71:2a:8a:74:c4:36:61:e0:84:05:7f:40:6b:54:b4:62:
d0:96:42:f0:96:e9:36:0f:bc:04:1b:82:b3:c1:6c:b9:7d:be:
96:c9:d2:61:dc:69:de:01:e4:f6:d7:5f:bf:fe:39:30:ef:72:
6f:b6:ab:20:33:44:03:9e:a8:2e:5b:bc:6d:c2:5c:5e:66:f7:
12:4f:4d:41:dd:c1:01:0b:bf:6f:03:ea:67:02:65:95:36:24:
68:d3:03:08:27:c7:ce:09:7c:a4:36:eb:16:c2:22:42:02:9f:
ed:a8:8e:3f:c2:f4:cf:0c:17:56:b5:44:ff:15:53:c2:5c:99:
2e:6c:b9:3f:67:5b:89:be:12:0e:ad:f5:d9:1c:60:44:6e:79:
02:8c:e3:b4:22:21:a1:98:ac:b2:ba:b5:c9:f3:9a:a0:e5:04:
e1:10:ff:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 22:41:45 2025 by rpki-client