Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: nBPBI/RK8yvIB777DGYroAc7upGaSTaZm4lfIRAF1V4=
Subject key identifier: 68:AE:97:FA:A8:DA:06:81:5D:5C:70:A0:18:9E:A6:AC:5A:EC:B1:DD
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 01976F2C19294ED184F7036E3CB2261C2C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 0E67
Signing time: Sat 14 Jun 2025 16:00:50 +0000
Manifest this update: Sat 14 Jun 2025 16:00:50 +0000
Manifest next update: Sun 15 Jun 2025 16:00:50 +0000
Files and hashes: 1: 2NcvU0UpvnNamvYiw-Ck0PihIIs.roa (hash: tZbbyWjYNX8D1xoSb7TrcdUI4Ec9SAHjICqo4Qu+A30=)
2: 4Vo1LbgSg-781dFksjaURY1r5lM.roa (hash: cGkOqX+2Vt3J4A41hGsuYT10AGm/PDPU84x1eGxgeOc=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: MUX1qMGPxdPGJqQG1q8Ce+RxLiAHGeHn4UJXM9dNI/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:19:29:4e:d1:84:f7:03:6e:3c:b2:26:1c:2c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Jun 14 16:00:50 2025 GMT
Not After : Jun 15 16:00:50 2025 GMT
Subject: CN=68ae97faa8da06815d5c70a0189ea6ac5aecb1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5c:7e:0b:a3:64:d1:9f:36:62:e3:c5:9a:49:
8f:c0:17:cd:46:e3:94:7c:3e:b4:d3:a3:95:84:a2:
c4:64:95:31:1b:f5:61:91:ec:fe:41:c6:d9:0d:9b:
4f:10:8b:cf:61:81:ab:5d:b8:74:28:b0:f0:2e:19:
eb:60:e6:7d:06:a6:d8:6b:f5:cc:b0:2b:d7:80:d4:
3a:9a:d5:92:de:65:5d:66:50:c7:5b:86:1a:4d:aa:
d5:9f:81:fe:0a:75:95:df:16:c0:0c:1e:c2:7c:ce:
42:2a:39:36:4f:c5:73:dd:8e:f6:ca:aa:1a:5e:b7:
22:6a:c9:c4:ca:51:15:95:87:2f:67:d7:ed:20:2e:
21:71:58:8e:7d:76:d1:b8:52:25:14:c7:e6:db:86:
84:3e:16:33:11:ea:9d:32:02:c4:f5:ce:25:d9:3e:
75:ad:32:2e:88:06:ca:79:cc:36:9c:31:6d:02:ee:
6a:9c:46:21:c6:4f:88:52:47:1e:e2:08:a0:32:e5:
db:95:bb:0d:bf:5d:84:b2:f4:49:cd:fc:ee:be:6c:
8a:0d:bb:8b:39:ed:f3:f3:b4:b9:36:c6:73:92:5b:
f1:4c:22:70:0a:e1:ae:37:0b:9f:c0:b8:d9:8f:81:
85:8e:f6:a4:4a:80:52:f7:04:34:18:55:b7:c7:4b:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AE:97:FA:A8:DA:06:81:5D:5C:70:A0:18:9E:A6:AC:5A:EC:B1:DD
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a9:ba:49:0e:37:a1:9a:e2:e8:b7:84:bc:69:f3:b4:83:cf:
c9:6a:55:93:66:07:54:c4:71:cb:7c:9e:16:59:eb:8f:d4:e2:
3a:60:57:81:7c:6e:5e:38:69:30:46:0b:1d:7f:ef:66:c5:8d:
8c:eb:41:49:e4:38:2c:46:d5:f6:77:c1:7d:bf:31:d3:7d:88:
7b:d8:6b:ca:55:15:bc:cc:58:68:93:e5:97:17:51:1e:dc:8f:
3c:6b:43:a5:01:6d:68:b5:56:83:5e:b6:1a:49:b4:d8:b9:8e:
80:6e:5b:33:ad:e9:7a:a1:5d:70:74:9c:33:2c:80:c2:d3:0b:
f9:20:b5:58:cc:d6:f2:bf:34:a6:b8:d6:aa:f7:b3:db:09:aa:
fe:ec:83:40:76:88:b5:44:23:3f:49:69:b4:b5:ef:4d:1e:ed:
8a:d9:bd:ee:d8:68:05:e6:8d:00:a7:1c:a0:52:62:99:93:00:
2b:60:90:0a:a4:81:f3:aa:21:6f:48:89:2f:25:7d:df:10:62:
07:6d:56:1a:35:6c:0b:dc:9d:5f:83:2b:24:d3:23:70:e8:59:
18:10:e4:2c:85:16:6d:98:00:6d:61:b6:24:a2:c8:ff:31:54:
82:50:f1:ad:11:86:21:cd:60:77:37:e3:b0:8d:e1:d8:7c:2c:
93:64:ef:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:12:04 2025 by rpki-client