Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json)
Hash identifier: 3R5KBHG0t6OclMbK/ZyyClN9afrzGkBDqTlp6I5WvbE=
Subject key identifier: 57:88:71:AE:65:A5:81:1A:AC:8A:8C:B4:F1:5D:D7:78:C8:05:6F:85
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial: 0197718862353277F64FBD210FFFF90F0270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 03:00:52 +0000
Manifest this update: Sun 15 Jun 2025 03:00:52 +0000
Manifest next update: Mon 16 Jun 2025 03:00:52 +0000
Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: uASA3xR91ylw3rYrRPQCdSedbQ0oMDmXM2zDElBxHvs=)
2: a3rqfPfqZxHF_NahNNUvEq5fk5g.roa (hash: I+M1Q116pruNGKV2ARftKr/KQ/3izABmgVobB9drMwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:62:35:32:77:f6:4f:bd:21:0f:ff:f9:0f:02:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Validity
Not Before: Jun 15 03:00:52 2025 GMT
Not After : Jun 16 03:00:52 2025 GMT
Subject: CN=578871ae65a5811aac8a8cb4f15dd778c8056f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:35:57:5d:b9:ff:92:bc:56:9e:2f:f3:c9:
4b:3f:6b:aa:57:2f:05:06:be:25:5f:b0:1a:d0:af:
37:21:b5:72:97:02:53:6b:03:14:7b:bb:d7:7e:3f:
d5:7c:d1:31:8b:77:aa:cd:87:85:1c:af:0a:62:09:
ed:a9:d2:e0:64:24:39:45:90:26:7b:71:78:78:24:
e4:02:6f:8e:33:de:0b:41:cb:6b:98:75:09:de:60:
a6:ca:cf:74:41:7d:37:08:32:ba:be:55:c3:56:0c:
b6:88:88:0a:e2:e3:d2:c1:78:6c:42:d7:0b:df:01:
0b:93:96:d5:d8:da:45:62:cd:32:05:d3:23:cd:9d:
53:8d:6c:21:73:4f:12:9a:3c:bf:d2:cc:92:4f:8a:
09:c8:7d:9e:2d:a3:36:ec:8d:7b:ed:7c:59:96:af:
5c:69:08:a1:be:bc:79:d6:fa:e8:f2:4e:e3:a2:e5:
39:78:1f:27:23:28:45:a6:9d:ab:73:a8:4e:3c:ef:
ec:36:b6:f6:8c:2a:53:c1:35:74:b0:da:69:73:49:
56:e0:5d:75:d4:cb:ab:a1:08:2d:f1:4a:49:19:9c:
95:7c:0e:b4:09:23:02:4a:0e:d2:96:be:30:d4:40:
07:c3:ea:89:f8:fc:d4:34:7d:b2:7c:88:21:a3:ed:
bd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:88:71:AE:65:A5:81:1A:AC:8A:8C:B4:F1:5D:D7:78:C8:05:6F:85
X509v3 Authority Key Identifier:
keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:73:2a:0d:3f:40:8a:09:08:9e:da:9d:a4:42:bd:8b:06:67:
2d:0b:77:d4:5b:a9:fe:c6:50:80:80:9d:41:97:34:0f:20:16:
4a:7b:ee:94:8c:8b:76:76:46:01:28:12:ef:00:c0:46:d4:06:
d2:89:c8:f7:6e:e6:c0:bb:7a:30:21:58:6c:e2:6f:2e:8a:58:
e2:6d:cb:f5:94:cd:3c:bc:e7:1b:02:06:af:5c:fe:ac:bc:23:
33:78:70:9f:3d:5b:f9:5a:54:08:28:c7:a6:17:1a:6e:35:10:
ce:97:44:cd:68:f4:09:23:fc:00:fb:4b:d1:7e:c2:1e:b5:f2:
51:a1:05:11:8d:97:cc:3e:9d:b7:aa:5d:fd:36:f1:31:3d:88:
c1:e0:bc:59:cb:a8:2d:8a:4b:f5:70:08:24:19:6d:58:f7:a4:
b7:43:93:9f:a8:49:e0:15:a4:f4:28:6e:f6:bc:3e:7e:16:da:
f1:f0:56:37:d3:11:df:45:16:02:e3:36:1c:e6:e6:16:3c:d7:
81:be:53:1d:eb:56:5c:66:cb:2a:80:e6:55:4f:cb:92:9e:32:
65:69:7f:bb:de:5e:bf:fb:3e:39:48:0f:ad:c5:d5:c2:e7:28:
a2:c5:bc:f5:71:a7:4a:c7:3f:34:d6:97:2a:a6:42:18:3f:25:
d8:6c:9a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:09:05 2025 by rpki-client