Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: hRXKceayjG0Z3lMMWzcw9Chh0lzu48LA17Y1zKSUoB4=
Subject key identifier: 44:9E:9F:CC:E8:17:3A:DE:8E:AF:77:38:E6:41:48:D2:EA:61:96:6F
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 01976F9A4687E96CB54C8A1074C168448DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 18:01:10 +0000
Manifest this update: Sat 14 Jun 2025 18:01:10 +0000
Manifest next update: Sun 15 Jun 2025 18:01:10 +0000
Files and hashes: 1: 944hLyq4lZEVAFInZE509HNE3dY.roa (hash: u1nybjv+YghCeLuvRCrpHUYvYfZKGq/DNrzwKmuq+cA=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: HB2LtJ3+gAdE1C0Z3Ya47+AE+wNb2TCSt5qCkUcBs2w=)
3: sxEbMVXxezgFHIuSSYFInfXpizE.roa (hash: ZwybRY1zu9AemOu7O2YllM3HQ5PSxj94bjs9pLEXpyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:46:87:e9:6c:b5:4c:8a:10:74:c1:68:44:8d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Jun 14 18:01:10 2025 GMT
Not After : Jun 15 18:01:10 2025 GMT
Subject: CN=449e9fcce8173ade8eaf7738e64148d2ea61966f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:69:89:cf:8a:2a:cc:55:b3:d0:8f:f0:09:53:
c0:40:fe:51:21:45:8b:3d:e5:1b:fc:39:47:59:2a:
ca:bf:83:c2:b1:ca:ff:39:37:78:aa:d2:10:4e:22:
25:60:3b:b5:8d:7e:1c:39:80:24:92:59:0f:c6:0d:
49:cf:26:a8:ab:52:fe:59:4c:5d:45:3e:41:26:9e:
72:24:c7:ba:78:3a:2e:e9:46:20:bd:f6:7e:6a:13:
f5:f8:6f:b6:7f:dc:90:a6:58:41:6d:ca:4c:d3:24:
ee:07:bb:6b:32:e0:6a:f1:38:fc:b1:6e:10:69:71:
81:85:99:63:47:e2:12:d7:92:18:1b:ec:cc:e8:09:
a2:0b:72:c7:80:26:38:0d:49:f0:de:b6:96:ce:0a:
6a:e1:45:fc:9c:53:d7:26:68:ae:c8:dc:bf:b1:3e:
11:9c:81:ef:38:7a:11:6e:b5:49:c0:01:c4:b6:66:
11:10:21:9d:51:5e:05:fa:6e:9b:d6:31:e3:b4:e8:
34:95:ca:a0:15:cd:83:75:32:37:15:d5:25:66:de:
ec:14:43:8b:aa:b9:d2:6a:d1:a7:6d:d7:26:c8:6b:
5c:bf:cd:d3:57:2c:02:fa:9b:b1:06:c2:e8:fd:ed:
8a:b1:d0:67:5c:b7:99:27:f9:11:03:d8:6a:e2:43:
7f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9E:9F:CC:E8:17:3A:DE:8E:AF:77:38:E6:41:48:D2:EA:61:96:6F
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6a:1a:e4:9a:56:97:a2:d4:08:e4:87:f4:54:75:80:78:44:
64:de:50:c9:f9:4e:a7:02:c7:df:ab:a5:49:7d:9e:11:1b:7b:
38:f6:73:25:29:46:be:73:ad:8c:e7:5c:67:c2:da:46:7a:0b:
42:7a:66:91:91:0f:b8:e3:21:97:3c:f7:11:4a:fe:ee:74:db:
49:b3:3f:13:33:93:4d:b8:97:86:74:2c:74:da:74:49:4c:72:
11:10:7c:e5:2b:0d:8e:28:41:63:f1:f1:61:0c:be:88:b5:8c:
c4:a2:99:bb:2b:db:92:b5:20:f3:63:71:2a:8a:ac:a9:c5:d1:
d7:86:77:aa:a8:81:0e:05:42:be:4e:46:8c:a6:8e:09:43:b9:
cf:8a:d3:7b:05:ee:b3:76:99:83:0c:8e:09:ff:e8:5e:66:ec:
fc:8f:75:15:54:34:cb:1b:a3:69:1e:95:bb:04:33:14:05:04:
a2:3f:df:f1:61:db:f2:17:df:d0:16:91:e9:b1:43:24:88:2d:
d2:7b:e4:46:a2:c0:20:fe:11:64:68:b8:96:27:a3:9e:bc:bb:
0f:4c:c5:6b:b0:80:ce:cd:4a:66:e4:06:ba:8b:9d:71:fb:1c:
fa:bf:ea:6f:49:ac:c8:76:7a:ba:28:73:21:3f:03:0b:e7:5a:
26:c0:24:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:30:41 2025 by rpki-client