Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: a//mqlCQwkC82BN+MQGVH/0MXzHpXyQhTz7RNi8dXKU=
Subject key identifier: F0:A0:93:E4:11:23:43:FE:12:FB:46:15:14:58:E3:38:8C:6B:DE:89
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 01976C98CD157E949B7D5024BBDAEE63C160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 098A
Signing time: Sat 14 Jun 2025 04:00:42 +0000
Manifest this update: Sat 14 Jun 2025 04:00:42 +0000
Manifest next update: Sun 15 Jun 2025 04:00:42 +0000
Files and hashes: 1: Op1gh0wFko9724Ahwm8zyJJnCx8.roa (hash: xGR1u5ClwHU4q3WoVp5eWaY/nYx57WKoSQo4c6w7W+8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: EQ3W4UJWOhq6PwjQRCRSBCf2Ud9WSoFS4c2K07+tqeA=)
3: jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa (hash: Ci3+1/Zt1KX21Iibq86D4q3nL8Q6qZ17OnVkiVZ8OJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:cd:15:7e:94:9b:7d:50:24:bb:da:ee:63:c1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Jun 14 04:00:42 2025 GMT
Not After : Jun 15 04:00:42 2025 GMT
Subject: CN=f0a093e4112343fe12fb46151458e3388c6bde89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0d:4d:9e:3f:1f:18:49:cb:9e:b5:ad:15:10:
74:3f:0d:a4:42:c9:b4:ad:2d:31:03:00:3e:ed:ac:
77:fb:d1:5e:95:92:e0:9a:1f:e2:0e:78:5a:d9:eb:
9b:a5:73:e5:e3:c5:33:d1:05:dc:ee:65:b8:0e:f6:
e6:ca:76:c4:d2:e0:ee:dc:67:d9:f7:f3:c9:85:84:
ab:e0:88:46:1e:ec:cf:1a:3f:45:08:6b:34:c7:85:
ae:43:c6:b5:24:4f:28:8d:85:57:77:03:23:84:32:
12:cc:3d:4d:f1:62:1b:45:1e:a5:99:97:d3:6d:ed:
a0:ca:24:81:bb:a7:f3:25:a1:e0:58:57:1a:89:e8:
e8:33:20:47:1e:93:5c:20:8f:9f:08:ba:d7:9f:58:
21:e3:66:81:79:c6:59:26:3b:2e:0b:56:0d:1c:fd:
4a:7a:19:77:e5:a9:d7:32:b9:9c:9d:7f:81:76:ec:
b5:44:50:e7:61:71:e7:2c:e0:f8:c9:c0:cf:18:ac:
b1:a4:2c:65:76:c5:c0:32:cd:cd:6f:4d:62:9e:07:
9d:e2:40:1f:17:50:e2:28:45:4a:59:b9:de:47:b7:
19:30:1c:35:a5:81:46:a8:bc:91:16:b0:30:bb:59:
64:8f:ab:dd:16:54:2c:a5:5b:31:ed:e8:27:e5:ab:
98:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A0:93:E4:11:23:43:FE:12:FB:46:15:14:58:E3:38:8C:6B:DE:89
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d5:e9:ef:82:e8:a5:36:43:00:18:e6:f5:ed:4d:bf:84:8a:
ed:c9:2e:89:4e:da:90:d9:d4:9c:9a:b0:a0:5f:04:6f:e9:f3:
21:3e:8f:10:dd:55:6d:96:d8:d1:57:1d:f2:8a:ca:81:d6:17:
32:5e:46:7c:af:6a:70:54:46:a1:40:be:5a:45:b2:9e:66:51:
ab:32:ee:e0:d4:35:44:5d:d2:6b:bf:17:02:1d:cd:be:6b:b7:
98:92:73:09:0f:d6:27:26:71:4d:87:ab:20:05:27:21:c1:34:
84:38:d2:ef:bf:b0:90:a7:8f:31:c5:9f:ea:91:0d:9d:0f:05:
b7:ec:c4:97:27:e0:43:a4:d0:0f:e9:1e:cc:31:0e:06:fa:9f:
34:93:76:dd:e7:ab:a5:00:c6:dd:8a:98:ad:15:01:0b:ed:34:
6e:80:42:1a:3e:32:92:5d:b5:be:ee:32:19:4a:10:f7:9a:c6:
59:c1:a7:a2:6c:e3:80:11:50:c5:75:fe:c5:55:00:72:dd:c1:
5b:03:90:7a:3b:b3:82:8c:9d:1f:67:dc:9d:1c:26:48:34:16:
f6:b5:1f:ae:ee:64:ee:dc:96:fe:c4:6c:6a:a0:7e:b5:c7:6b:
a4:97:5e:4c:b4:fc:1e:bf:65:0e:7d:ee:18:c5:63:95:34:e3:
f1:80:80:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:49 2025 by rpki-client