Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: 2k4TC5DREeTCpatv1NSw0Aij1O5nUEQDz99g8xu8jNQ=
Subject key identifier: A2:44:42:36:1A:DB:C6:7A:D6:85:0C:F4:85:98:0D:E3:3E:AE:EA:05
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 01977ED5C741B98DF25574DC201BE0F81E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 1273
Signing time: Tue 17 Jun 2025 17:00:28 +0000
Manifest this update: Tue 17 Jun 2025 17:00:28 +0000
Manifest next update: Wed 18 Jun 2025 17:00:28 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: kBgd6JQdnrW5195p7bYnDrlGgRZ3V3y7DKLt/iAdbms=)
2: oQC9sPpcZyPZwpQuNTqhI-X9Nlw.roa (hash: vCUpk6P/EjQs3Tpm0wCNehcuCpZGGg9z5aDmzRFQJKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:d5:c7:41:b9:8d:f2:55:74:dc:20:1b:e0:f8:1e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Jun 17 17:00:28 2025 GMT
Not After : Jun 18 17:00:28 2025 GMT
Subject: CN=a24442361adbc67ad6850cf485980de33eaeea05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:97:7b:42:cb:73:60:48:1d:9e:4b:f5:a1:
68:3e:9f:16:70:18:e8:33:3a:72:c4:8c:6e:8c:ef:
33:64:2d:36:09:38:df:92:cc:74:1f:49:5e:22:ce:
99:88:69:af:92:5a:f0:9e:c4:62:7d:01:c4:e7:cc:
6b:75:6f:18:0b:05:8a:58:0f:7c:2d:b8:e4:8b:2d:
7c:13:6a:de:77:3e:80:21:92:40:ab:2d:8d:4a:65:
0a:a1:09:28:4b:e4:ec:70:00:85:b3:8f:47:9f:f3:
89:f2:08:08:d4:36:33:b2:47:13:cf:a8:53:cf:6b:
a8:fa:ad:e6:14:00:63:a7:a4:08:d1:f1:55:fe:10:
10:4e:d0:db:72:fa:c3:99:a8:16:1d:00:ee:d6:15:
73:41:69:e9:4f:3c:04:c1:f6:b7:9c:ca:a3:bd:4f:
f5:9d:91:b8:1b:3b:b6:6e:c9:91:59:9f:42:04:6b:
6d:2f:c2:16:c9:d6:4d:eb:12:40:f9:4b:56:fd:d8:
0b:49:84:92:12:30:c4:9f:23:a2:fc:6f:e5:5a:69:
16:42:28:6a:7f:08:8b:da:7d:6b:13:12:75:c6:03:
9c:b3:a3:14:36:96:e3:f5:34:88:38:cb:83:a1:22:
b6:80:07:3b:e7:f6:23:1c:3c:1c:3b:8d:bf:ae:85:
63:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:44:42:36:1A:DB:C6:7A:D6:85:0C:F4:85:98:0D:E3:3E:AE:EA:05
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9f:ff:cb:5e:9c:5c:fc:35:3b:3c:ab:eb:e4:7e:28:d8:7d:
5e:28:3e:22:05:6e:96:87:6b:37:81:ed:a4:91:f9:69:a1:d1:
53:47:ce:df:1a:ae:6f:48:f0:5f:a2:31:22:4f:de:bc:74:fe:
2f:09:ae:72:24:4e:8e:f0:bd:2c:3b:ef:b1:22:16:17:b8:ed:
85:d8:a0:8c:20:a7:50:4d:eb:66:6e:d2:4f:94:90:7c:f6:14:
84:88:b4:b9:09:23:87:cb:93:f9:3a:94:bc:91:a5:f1:90:6e:
fb:55:84:ad:62:35:2b:eb:18:f7:dd:22:74:f8:90:67:60:ea:
48:e7:94:cf:51:b0:0f:dc:16:f1:19:44:9d:88:55:30:f8:16:
71:2c:aa:2c:7a:a2:a6:d6:f5:8a:30:31:83:da:34:3d:36:49:
be:8a:cd:2d:cd:88:f5:1c:e5:bd:be:ed:52:8d:f4:1d:d3:66:
3e:c1:95:eb:f0:7b:b0:23:30:92:ed:74:6b:d1:59:c7:be:af:
e4:fa:ec:7c:2a:ff:8c:79:d3:21:8f:de:af:e4:df:cf:9d:e1:
9a:b9:d1:c1:53:1f:74:0e:21:15:63:1c:81:19:45:af:84:9b:
e0:f7:53:b5:1c:32:01:8a:56:7a:f9:b8:8d:e7:0f:0b:f6:3b:
80:1b:76:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:01:02 2025 by rpki-client