Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
File: QCc8FepF3zcZPjRbae3YP4xvIgI.mft (raw, json)
Hash identifier: uanpUEqct0uIlU485MqfD77T8PcHRqywFUB/Tf7AdLE=
Subject key identifier: D4:57:58:CF:B7:11:EB:96:F9:43:DC:11:E0:95:3C:3D:25:B5:B1:60
Authority key identifier: 40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02
Certificate issuer: /CN=40273c15ea45df37193e345b69edd83f8c6f2202
Certificate serial: 01976F9A51771F4DF913A98FD22933469F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
Manifest number: D6
Signing time: Sat 14 Jun 2025 18:01:13 +0000
Manifest this update: Sat 14 Jun 2025 18:01:13 +0000
Manifest next update: Sun 15 Jun 2025 18:01:13 +0000
Files and hashes: 1: QCc8FepF3zcZPjRbae3YP4xvIgI.crl (hash: oLEUOh2FilxFZu9wLF/nz/N+ARL095Cr1+wlVHI6+yg=)
2: rg92faZanaYES8NBj5pg8WmI5nI.roa (hash: 8R4hL47sFCLdHAmoIZE8IPnGm4ZN8Yi2FpnpcDwoEOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:51:77:1f:4d:f9:13:a9:8f:d2:29:33:46:9f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40273c15ea45df37193e345b69edd83f8c6f2202
Validity
Not Before: Jun 14 18:01:13 2025 GMT
Not After : Jun 15 18:01:13 2025 GMT
Subject: CN=d45758cfb711eb96f943dc11e0953c3d25b5b160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:31:d0:ec:f2:04:e8:c8:03:7b:ef:5e:50:
58:47:0c:13:ea:d0:82:9e:8e:31:81:eb:95:82:8e:
3a:87:ab:d5:81:c1:47:0b:22:22:c0:8a:c0:0b:bd:
a1:19:cf:df:6b:a0:bb:08:35:e9:c9:c7:98:90:07:
d0:c6:97:f1:4b:94:7b:d7:3d:a1:8c:b4:d0:0b:fc:
a3:f0:c0:05:1e:11:b2:f4:3a:c7:4c:c1:9d:a6:6d:
03:7d:9e:24:86:48:83:77:bb:7c:f2:6a:0a:4c:63:
2c:20:a4:c5:14:41:f8:09:19:ad:91:c6:25:e6:eb:
ae:3f:98:e5:3a:82:6c:5a:49:07:25:b4:d8:e5:67:
54:62:e4:81:d2:a0:64:47:a3:6d:e6:d9:f4:52:6e:
84:5f:ea:e0:a7:0d:1e:f0:0f:34:d5:7a:e0:a8:67:
e3:89:fc:83:45:86:ef:a3:cb:dd:e7:fb:de:2f:a7:
00:70:bc:f0:e9:3b:b6:e1:27:7c:f5:3b:83:c5:91:
28:39:37:83:e3:5a:a6:64:b3:51:e2:83:db:95:8c:
b6:5e:19:4a:e2:01:b4:42:da:48:45:4b:cb:68:9d:
68:1e:fc:02:ba:f5:df:24:b7:ca:9f:ae:53:18:e5:
31:46:41:ed:0b:cc:d8:c8:ef:29:79:1e:9f:4e:51:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:57:58:CF:B7:11:EB:96:F9:43:DC:11:E0:95:3C:3D:25:B5:B1:60
X509v3 Authority Key Identifier:
keyid:40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:60:8d:5e:cc:d1:03:05:f6:24:77:88:d1:b1:c0:d4:ab:3a:
bb:35:c3:a2:ad:d5:6c:b3:df:5d:d6:e2:04:44:46:e7:cc:29:
f0:4d:81:be:29:9e:20:9d:17:09:7e:3a:ec:26:41:36:38:5e:
77:fa:cf:4e:a3:3c:79:a9:c5:bb:cc:c3:ab:c2:79:10:39:b0:
9b:10:7f:12:d2:ff:cd:4c:c8:30:15:8a:9f:80:67:0e:07:d0:
d8:cc:65:b4:22:84:f0:97:01:ae:03:19:cc:b9:6b:6b:78:ea:
49:17:3e:65:36:77:f7:9b:0d:cb:cb:3b:0e:b9:79:de:98:32:
d3:66:56:6c:5d:ec:ef:bc:c1:cb:55:43:c8:90:ab:2e:9e:d3:
eb:45:59:6c:45:1e:92:31:d3:3d:3e:ab:cd:96:db:17:22:72:
34:1c:37:6a:c6:52:cb:a4:59:ca:28:43:96:a5:db:7f:c0:7e:
8e:af:4b:03:b9:f7:fb:ef:56:25:7d:42:0e:84:76:4d:70:8a:
45:ce:6c:6b:e2:30:5d:bf:67:eb:50:94:aa:55:13:0e:52:e5:
e7:cf:d3:cd:e0:ea:69:33:6f:31:f8:be:84:7b:fd:fb:52:de:
11:22:b3:cf:b8:23:22:a4:fa:55:c2:6a:d6:3d:3f:45:7f:c7:
0b:cc:43:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:31:51 2025 by rpki-client