Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
File: QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft (raw, json)
Hash identifier: TtvZy8PUXZrJy4OwSrNf/skJkTt0a46kSO5hHa3wUYg=
Subject key identifier: 29:91:98:68:07:7C:DA:F1:57:A8:3E:8D:F6:23:FC:D4:F7:85:4A:B1
Authority key identifier: 40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06
Certificate issuer: /CN=405ffc74ae92386afb7ce770f0390e90d4cde306
Certificate serial: 019770E3670027EBE652462BAEB43886176F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
Manifest number: 01D8
Signing time: Sun 15 Jun 2025 00:00:40 +0000
Manifest this update: Sun 15 Jun 2025 00:00:40 +0000
Manifest next update: Mon 16 Jun 2025 00:00:40 +0000
Files and hashes: 1: QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl (hash: 5pKbdOjBC/7iZPe1t1Ff0I5hClz8/o4fK8YIO6cYHRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:67:00:27:eb:e6:52:46:2b:ae:b4:38:86:17:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405ffc74ae92386afb7ce770f0390e90d4cde306
Validity
Not Before: Jun 15 00:00:40 2025 GMT
Not After : Jun 16 00:00:40 2025 GMT
Subject: CN=29919868077cdaf157a83e8df623fcd4f7854ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:9d:d3:98:b2:1e:3d:fd:d1:7f:c8:6e:c8:
d4:1a:e0:1a:6b:3d:4d:81:da:f2:e6:84:14:29:94:
b1:d3:b1:b8:33:a7:bb:73:fc:b9:98:da:72:fa:e2:
ce:30:b7:b5:12:2e:ed:64:7c:6c:e7:1e:01:ca:3f:
45:f4:5f:2f:d7:01:01:9e:f1:e3:8a:61:d6:9f:42:
60:f1:a1:c4:4a:34:c7:4b:e5:05:4e:2d:da:6d:f2:
ca:aa:b1:10:51:ab:fc:ea:17:5f:a6:3f:51:60:a5:
87:43:6e:5e:01:c2:4d:37:1a:50:57:55:71:cd:b6:
74:9f:5c:75:65:6d:ff:f2:e5:3f:d9:f0:5c:28:b9:
c8:8f:35:bb:94:b0:30:66:c8:d0:3d:0b:7c:48:9a:
c7:4b:85:07:bb:8d:47:e3:59:ca:6e:d1:0f:9a:d2:
c6:65:f3:08:87:8f:de:9e:74:36:d5:b5:a1:2c:28:
1c:01:75:65:91:84:ed:6c:84:2c:d6:f4:c2:6b:46:
56:f2:52:26:03:e7:01:0f:ee:cb:dd:c4:ff:2e:c9:
b5:64:f1:65:d8:66:78:e5:9a:8c:19:d5:f8:07:05:
f1:f9:42:25:50:da:45:c1:91:c9:51:01:40:c5:a7:
a2:f4:d3:0d:d6:8e:9e:52:24:7a:48:76:e9:8b:cb:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:91:98:68:07:7C:DA:F1:57:A8:3E:8D:F6:23:FC:D4:F7:85:4A:B1
X509v3 Authority Key Identifier:
keyid:40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:78:b8:98:90:db:6e:19:43:ed:3f:62:92:66:be:bc:01:c1:
d2:59:86:58:5e:3e:7d:e3:bd:3c:29:9d:b8:52:ed:5f:1d:6b:
af:97:5e:e3:53:00:5c:cf:43:5b:36:68:9a:36:7a:71:b1:13:
cf:5d:84:22:9d:5e:1f:25:3d:71:4d:5b:3e:43:f2:4f:48:60:
06:41:f8:c8:80:9e:f6:4f:5d:ba:8d:81:8f:b8:2e:11:78:24:
ff:04:d4:3c:1f:4e:27:5c:1f:b7:4e:56:64:49:00:61:57:cd:
c3:5a:f9:ad:3c:05:f4:90:64:40:1f:e3:75:e9:02:b2:a6:d6:
b5:08:ee:37:de:50:ec:eb:cf:b1:3a:8c:a3:21:d9:50:62:de:
e2:91:ff:f0:9e:04:94:87:d2:08:d9:fe:a7:44:d3:31:a2:22:
ad:14:8d:d7:53:ff:1a:b1:ef:1b:56:ae:ff:51:7d:1f:9c:ab:
65:cd:9b:b9:e5:02:eb:50:81:12:cd:41:46:b1:86:8a:ff:ec:
f2:69:a9:79:56:89:dd:b4:02:65:1a:a9:a4:61:31:92:db:84:
68:2b:d4:f9:1c:68:4b:ef:e8:42:33:68:ff:e6:f3:f6:9b:11:
62:dd:41:51:e4:50:7f:36:68:2e:13:8e:3c:f3:5e:c6:29:83:
a9:8e:50:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:35:54 2025 by rpki-client