Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
File: QftrFwgzUAawpqrGUL-v8_yNKSw.mft (raw, json)
Hash identifier: Nszx/9eDWwlOvbu7LngMWybM7uiNLL4ePiPQLaui5GY=
Subject key identifier: 24:79:F9:63:F4:5D:B6:A3:F6:A7:CB:86:E0:39:CC:FF:8E:7B:DD:4F
Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
Certificate issuer: /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Certificate serial: 0197722D42F454424AED59607A6379F44669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 06:00:58 +0000
Manifest this update: Sun 15 Jun 2025 06:00:58 +0000
Manifest next update: Mon 16 Jun 2025 06:00:58 +0000
Files and hashes: 1: FmQTGAptfwQVIkuMpg8hJc2vZxA.roa (hash: e7opOpYhedUnony/T0f78z282oNfXK2DZuJyjlY4Q0s=)
2: N5QNqPYfQDsZsb3UbswlkLMUOVI.roa (hash: K+50oxv12Lx2bczUpm74apszZeVkTFLJaHzFVSZLhe4=)
3: QftrFwgzUAawpqrGUL-v8_yNKSw.crl (hash: IVHqPQtCf94jlB6N/G0qaLRv630vOs/rp3TMP4SETOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:42:f4:54:42:4a:ed:59:60:7a:63:79:f4:46:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Validity
Not Before: Jun 15 06:00:58 2025 GMT
Not After : Jun 16 06:00:58 2025 GMT
Subject: CN=2479f963f45db6a3f6a7cb86e039ccff8e7bdd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:cc:61:47:f3:53:02:cd:95:93:82:08:ed:
bf:ac:28:24:3c:64:96:52:4b:ec:3e:d0:0c:98:1d:
aa:70:ee:92:66:d1:23:6c:d0:35:f1:c9:f4:13:04:
5d:5c:1b:2f:1e:17:6f:aa:b9:e3:da:a9:bd:02:c4:
b9:3e:55:95:fa:e0:00:72:eb:c2:b7:3f:3e:d7:10:
ea:0f:f4:e7:44:46:7e:12:f8:5e:98:27:13:2a:62:
8f:e3:bb:a9:6f:f9:cd:bf:5a:6c:52:9a:a6:ed:8c:
74:7c:6b:89:3f:30:83:c7:db:1f:04:96:af:fa:1d:
c3:eb:49:e7:7a:6d:d7:50:e4:e0:68:14:12:3b:da:
37:db:e2:82:50:ec:8f:f8:16:b3:94:e6:8b:90:17:
29:04:be:6e:49:5c:e2:26:c0:02:bb:5a:c4:da:de:
e2:6a:7d:03:28:58:61:21:66:71:70:79:16:5d:9f:
1f:75:fc:e0:7e:0f:cf:7a:5f:a6:59:ff:16:ad:cf:
98:bb:16:83:ec:5b:d1:94:5b:49:09:a4:c1:27:b1:
22:eb:9e:8a:a4:e6:24:4d:8b:6e:1e:97:b9:6a:7b:
b8:27:72:37:69:98:a0:65:9f:14:87:ff:15:99:f5:
ce:9a:f8:bb:e7:b3:cd:13:89:0e:1e:24:4f:13:f0:
82:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:79:F9:63:F4:5D:B6:A3:F6:A7:CB:86:E0:39:CC:FF:8E:7B:DD:4F
X509v3 Authority Key Identifier:
keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fd:2c:8b:bb:40:4c:d8:6f:12:36:1e:2d:0f:55:88:79:ea:
52:04:51:e3:60:ae:f1:d1:09:50:7a:3c:96:83:67:5e:9f:d2:
c3:d2:12:d7:28:01:98:47:00:2e:08:33:b7:02:4d:2d:dc:af:
bd:7d:c3:d4:fe:75:30:f9:39:25:e6:f0:2b:f2:99:5b:ac:de:
ea:8b:5c:20:f1:7c:e7:b9:36:1a:80:49:36:d5:7f:84:ff:ac:
a3:92:ff:35:04:ab:99:94:6f:ea:1e:c7:12:63:37:14:24:97:
67:e9:29:7b:8e:d0:4e:3d:54:82:61:e7:d3:9b:e2:c0:4e:f0:
51:bd:de:c8:11:3b:98:c5:ee:ad:df:1b:b7:f2:b5:61:b0:66:
62:e9:19:9c:57:66:7e:69:1a:95:59:d2:48:30:79:5d:c9:a8:
65:f4:05:28:e8:81:06:a1:09:0f:57:01:9f:53:a1:ef:5b:25:
67:19:3f:82:54:3c:95:d6:d4:ca:95:82:ea:6f:bd:fd:3f:42:
f1:5e:98:0a:b2:94:82:eb:8b:46:8b:33:2c:f8:82:09:10:fd:
7a:51:c8:9e:08:e0:de:c8:ed:e1:58:fe:3c:15:d9:df:3c:89:
de:b4:71:78:f2:e2:6d:9b:6e:71:78:f6:bf:7d:92:44:c9:3b:
84:67:06:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:14:36 2025 by rpki-client