Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
File: QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft (raw, json)
Hash identifier: Pg2y35WzMoRBut1diByZFm8GyG9S4qHtUeY1fK2nrNQ=
Subject key identifier: 39:BB:BE:6C:47:49:2A:98:77:F8:6D:7A:08:5B:89:BF:FD:FC:65:EB
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Certificate issuer: /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial: 01976E87702D117655A1954752D0FF932636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
Manifest number: 14DD
Signing time: Sat 14 Jun 2025 13:00:59 +0000
Manifest this update: Sat 14 Jun 2025 13:00:59 +0000
Manifest next update: Sun 15 Jun 2025 13:00:59 +0000
Files and hashes: 1: OEwb1lDHunikfNaNODhoAnbiQCo.roa (hash: wWLLrhKTcf6mPU2Bqqwm1puc/7JHEkcQ5M3ZaPHxpgg=)
2: QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl (hash: BTK7irm6YArAqTLwihkoBe8cZSBbQcYxx2WY3t0Dpno=)
3: vn8Vk2vP0QzgnWs8YePhZCt8-Lc.roa (hash: NAYB0xo+Xhi57/QawXnfFqpG2CzRv0IH2N4vezreDYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:70:2d:11:76:55:a1:95:47:52:d0:ff:93:26:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
Validity
Not Before: Jun 14 13:00:59 2025 GMT
Not After : Jun 15 13:00:59 2025 GMT
Subject: CN=39bbbe6c47492a9877f86d7a085b89bffdfc65eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:1e:3c:3d:15:56:4c:4e:9b:cc:68:4a:7a:
d7:13:2d:ad:a9:bd:31:83:d8:14:d4:e6:ef:22:64:
5e:7a:94:bd:0d:1c:46:16:e8:05:fc:38:8a:5f:e2:
fe:d2:00:43:56:65:24:5e:80:9c:cf:00:6a:bd:f4:
bc:f6:f9:0e:ca:48:0d:4e:44:7f:78:08:36:94:6d:
ca:6f:26:3b:2e:5c:fc:52:37:06:c8:9e:00:66:63:
1c:2b:95:44:24:29:16:32:76:dd:ab:dd:9c:5d:9c:
c2:19:36:1d:13:1e:a9:4d:4d:3c:75:6c:fd:ec:c8:
b0:dd:c5:3b:67:e2:38:94:a3:f1:34:8d:7b:51:82:
9d:b1:7a:d2:be:d5:4f:70:fa:fd:bf:fe:6a:e3:ee:
ec:58:b8:ec:21:d8:ac:6e:85:76:36:b1:5c:67:61:
b7:41:eb:91:1b:e7:33:86:38:d7:a9:3a:1a:26:44:
ab:8a:4a:9e:c1:c1:70:df:08:e8:26:0d:81:b6:0c:
43:54:77:33:f6:62:5e:f4:89:7e:9e:19:72:fb:82:
e8:61:84:87:5c:8b:4b:54:35:af:bc:16:60:39:53:
53:6c:5f:10:e4:c6:f5:71:28:2f:87:5a:8b:32:15:
3f:8a:1e:4c:95:a3:61:25:f7:aa:ae:4e:ca:2b:3a:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BB:BE:6C:47:49:2A:98:77:F8:6D:7A:08:5B:89:BF:FD:FC:65:EB
X509v3 Authority Key Identifier:
keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c7:04:e0:90:1e:19:d8:7c:48:52:f7:0d:7d:f5:22:92:6d:
c6:bc:f0:ee:e1:53:1f:a2:9a:76:a5:83:bf:cf:83:8f:82:ca:
ca:20:6b:82:b6:94:c6:73:e7:c3:62:3f:00:21:06:a7:89:05:
da:9e:80:8a:76:f2:b6:03:5e:4c:9c:76:66:92:bb:0a:aa:49:
8b:65:dc:ef:0c:a0:41:1a:66:84:ec:66:01:6d:a5:dc:be:55:
66:5f:ba:57:82:cc:a2:e5:b5:c0:dc:e0:c8:fa:9f:16:18:ad:
1f:44:35:eb:12:6e:58:b7:42:a8:cf:8a:bd:c5:c1:f7:05:fe:
d8:81:d2:77:0a:ae:ff:ac:8e:fc:7b:0c:81:4e:37:ec:2d:6f:
29:c8:f1:e4:b4:41:ec:56:e0:1a:1f:97:df:b7:89:63:f1:b6:
17:83:80:f3:ab:ec:58:39:47:c1:d5:b8:6c:70:b0:2c:7e:9a:
97:dc:3d:68:4b:08:39:27:dc:0b:98:de:d9:c1:24:3b:ea:d7:
48:0c:f9:c5:8f:15:c2:ca:e5:bc:fe:0f:8e:40:dd:d9:74:d7:
b9:88:d6:78:53:3d:c3:ff:c6:be:db:18:f6:ff:3c:1e:a0:83:
15:db:35:04:eb:1e:56:49:4d:10:d6:3d:13:c0:98:95:9a:45:
21:82:7e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:29:16 2025 by rpki-client