Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: nbuZ11Wmyr2SyVFWUOaHVOc+z8Gq4h0ZpXZVaHRJMy4=
Subject key identifier: CB:ED:D8:80:AD:49:FF:E1:E8:D0:CF:9E:59:55:7E:43:5A:3A:A5:55
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 01976C61F9777780AE055017D78FDDE10A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 11DE
Signing time: Sat 14 Jun 2025 03:00:49 +0000
Manifest this update: Sat 14 Jun 2025 03:00:49 +0000
Manifest next update: Sun 15 Jun 2025 03:00:49 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: mFKz6SGDNGqMz9CXdoKxi8EsyUIem/rMLzits2wMzZ0=)
2: v4w1l1in0yr2EsXsMhwK7smhe5c.roa (hash: 7H5QERbsex398Y/VCrt/sp2Qpj6rfwjWtrt7q4PvQAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:f9:77:77:80:ae:05:50:17:d7:8f:dd:e1:0a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Jun 14 03:00:49 2025 GMT
Not After : Jun 15 03:00:49 2025 GMT
Subject: CN=cbedd880ad49ffe1e8d0cf9e59557e435a3aa555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:b0:7d:5d:c6:27:de:5f:82:01:f3:87:dd:
ff:99:80:6a:df:13:6e:37:ee:d6:68:15:de:4d:0b:
a8:6c:25:f6:67:58:01:e8:01:9e:09:33:46:4f:28:
59:e8:3f:31:32:9a:49:79:c6:8f:2a:83:77:56:a0:
b4:08:ff:6b:47:93:0d:e0:eb:84:d7:cd:28:a8:3f:
21:46:a5:42:69:7a:ff:fc:ce:70:f1:ca:a1:5f:3f:
ed:2d:d3:28:9b:9d:47:70:3f:da:f7:46:2a:c1:28:
5c:d5:a9:f8:03:df:ea:6d:ce:aa:fc:0d:34:c6:a2:
4e:84:8e:cf:07:31:cb:fe:ab:4c:0b:a0:21:7f:56:
a1:14:fc:30:38:df:3f:97:3f:6e:4f:41:26:88:e6:
d8:47:3a:79:42:1a:7a:8c:96:50:f1:e3:3f:40:a5:
1e:ab:ae:cc:47:86:3f:cb:c1:62:79:53:d7:f6:4c:
15:7c:ea:be:75:5b:8f:6b:5b:3c:9b:aa:d3:a5:96:
25:75:7f:b3:ab:af:07:f6:c4:e7:37:13:bc:c3:83:
43:d4:c7:96:e1:53:e4:d2:eb:2a:ae:6a:3d:b1:78:
b6:b5:32:61:1f:b3:f6:83:e5:12:cd:f6:8b:11:31:
94:7d:04:69:e1:92:42:1a:b4:1a:62:d3:66:48:a2:
87:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:ED:D8:80:AD:49:FF:E1:E8:D0:CF:9E:59:55:7E:43:5A:3A:A5:55
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:dd:89:b6:53:23:cd:a5:68:b4:60:5d:b8:5d:ac:c2:16:dd:
cc:23:17:1f:72:c2:40:33:ec:7c:f8:91:2c:6e:3f:de:6b:69:
fb:e7:af:c4:c8:6e:68:da:34:43:68:d2:8e:7e:cf:70:35:1f:
dd:f6:09:7f:14:4b:0c:90:16:46:01:60:2c:24:7d:9e:fc:c4:
f1:a2:b2:1a:a4:c3:69:68:ae:11:a2:af:c1:16:21:c8:5f:28:
ed:cb:fc:4e:83:f7:2c:1e:a0:4d:25:59:e6:a5:9c:f9:90:e9:
e4:b9:16:2e:33:dc:0b:a5:a8:a1:70:42:d7:33:8b:b7:5c:f4:
e3:a3:9a:4d:55:70:c9:69:ae:26:74:18:3e:33:66:f5:a4:72:
72:5d:d4:a9:4f:4a:14:04:6f:cf:18:6f:13:3b:d6:91:42:c1:
54:c2:5b:21:26:af:db:c9:c8:3e:29:97:49:47:9b:95:43:a2:
7d:98:97:23:05:a3:c4:b3:c8:b7:9e:84:11:4e:2f:c3:ab:c9:
15:6d:e9:b6:65:51:9e:5f:60:80:f2:d7:4a:02:2e:5c:6c:7d:
f1:e7:76:b0:53:0e:20:4d:1c:bb:3a:52:17:e4:3a:e0:70:5c:
ea:f7:5b:3f:46:b2:53:e0:57:0b:0f:5e:82:e5:08:03:3b:cb:
e7:c1:09:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:46 2025 by rpki-client