Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json)
Hash identifier: odWuvbVjtsIXQVAc3J3RpRp2UeEPdYIJcsq6URCr7xQ=
Subject key identifier: 27:8F:90:8B:49:65:41:98:35:CC:03:97:73:8A:6A:8D:78:E6:63:90
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 019778D4DDA04997C32B1EFF24A6B16C2B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
Manifest number: 1599
Signing time: Mon 16 Jun 2025 13:01:45 +0000
Manifest this update: Mon 16 Jun 2025 13:01:45 +0000
Manifest next update: Tue 17 Jun 2025 13:01:45 +0000
Files and hashes: 1: GdTMSBHmMXNMZFzwt5_uvXtdYsM.roa (hash: /RIp+uP4i74bIeQs1XWyli9bmZacqyl6MLZjDPeo5VM=)
2: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: 7Xdp+urOlXNBsKmNMZqJR0r1DlkuUdiycVHqmAUiSCw=)
3: xBlZNvgMRnCf6UrKRvQ5pkUd7xU.roa (hash: i1uwfhxsD9mnwkgjUW+Sjt1kQC/b/5iVv+3Mpx4LXks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:dd:a0:49:97:c3:2b:1e:ff:24:a6:b1:6c:2b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Jun 16 13:01:45 2025 GMT
Not After : Jun 17 13:01:45 2025 GMT
Subject: CN=278f908b4965419835cc0397738a6a8d78e66390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bc:94:ef:61:76:96:70:af:20:f2:fd:09:24:
2e:af:c6:ca:28:88:10:96:e1:78:17:4d:be:ff:c7:
86:9b:83:14:5d:fb:42:4b:2e:ab:6e:ca:05:5f:03:
10:87:c1:37:b5:5e:61:97:63:53:61:bb:70:3c:89:
0c:1b:5c:84:4f:a0:29:5a:40:c9:c4:c2:d8:bb:47:
98:d7:b2:fc:3d:e3:f9:23:cf:c3:48:f8:ad:0f:50:
e2:b6:a4:73:15:3a:6b:3d:76:0d:91:18:da:5f:5f:
ae:73:4e:5a:7c:91:97:a1:4d:84:1a:de:02:07:82:
44:9a:49:ae:cc:50:56:16:8b:aa:88:c0:66:8b:7c:
e5:94:9b:04:47:4b:7b:96:7d:77:2a:80:92:7c:19:
fe:18:1a:83:25:fb:50:80:68:60:45:55:b1:0c:70:
2c:17:98:37:27:cd:0e:1b:8f:86:34:24:e0:58:9f:
82:0c:47:5f:6f:14:ac:66:b7:67:8a:cc:e4:b7:5b:
56:92:9e:f8:79:76:f6:5f:c1:14:a8:16:7b:ba:cc:
9d:b5:11:10:b9:92:d9:04:a2:8c:76:df:fe:d1:f6:
be:af:08:f9:41:4f:99:25:79:bf:eb:9c:4a:58:40:
d7:16:08:ff:85:0c:f6:84:c5:c8:c3:dd:02:0d:ee:
b8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8F:90:8B:49:65:41:98:35:CC:03:97:73:8A:6A:8D:78:E6:63:90
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:19:de:df:55:9e:e4:1c:44:ce:b7:f6:01:5b:b0:39:5f:f1:
45:e2:ba:9f:e7:29:50:d5:e7:7e:ca:76:7f:53:d6:e1:15:70:
32:fd:55:85:43:99:d0:19:bb:1a:0f:a4:61:e3:bf:1e:94:58:
cb:dd:92:65:6c:d0:75:90:0c:ad:2a:ce:be:83:13:1b:a5:39:
14:19:38:00:53:2f:e8:24:16:9e:25:37:73:1a:ab:b4:1d:78:
b6:b0:48:8f:3a:32:4c:98:87:74:16:4f:5a:7e:fc:18:7f:d7:
4f:0d:01:36:db:cf:33:c7:c2:70:0b:90:84:71:d1:93:30:71:
67:13:50:36:75:f3:ff:fd:79:27:4d:a1:21:99:4e:ff:d6:c4:
f4:11:8f:47:e6:e2:59:3d:fe:76:0b:fe:5d:2b:94:fc:2e:2d:
00:1c:61:15:a4:38:2a:e1:59:07:6a:3b:55:5c:32:bf:b5:fc:
e4:ef:8c:18:bb:2f:59:f4:3e:ae:5c:46:6e:3e:44:04:fa:0b:
55:2a:85:18:4e:6c:3a:cc:81:9c:f8:f9:53:70:91:d7:d1:7e:
3a:4b:3c:c7:1b:ba:9a:c9:4d:bc:44:8a:49:32:d2:81:58:6b:
1c:6b:56:3c:06:d6:a9:ab:61:6b:0d:66:69:af:3a:a7:c4:55:
de:2d:67:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:05:08 2025 by rpki-client