
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
File: QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft (raw, json)
Hash identifier: oHZoVIb0IP6vRGuk1AQclTeaaq7lZ4DD3cBeu4/+dro=
Subject key identifier: AE:AA:78:47:85:44:D5:30:AE:0E:35:A9:91:01:20:F0:D7:B7:7D:4C
Authority key identifier: 41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
Certificate issuer: /CN=414915cdd322bfe39472536955464a5ff67117c3
Certificate serial: 01976F99B93A18E76DC7BD5D58A30E610521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
Manifest number: 059E
Signing time: Sat 14 Jun 2025 18:00:34 +0000
Manifest this update: Sat 14 Jun 2025 18:00:34 +0000
Manifest next update: Sun 15 Jun 2025 18:00:34 +0000
Files and hashes: 1: 1-XrmEJC-kOLvoeP9rgvbg0A53hs.roa (hash: EiYdih7Qfn/m/+BWxzflbgrLM7vuel5hPMdd9Y8tb4I=)
2: QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl (hash: USHLCeGZT0tB/eZsC4B7DSA32KspUwevtBCDEWz14FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:b9:3a:18:e7:6d:c7:bd:5d:58:a3:0e:61:05:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=414915cdd322bfe39472536955464a5ff67117c3
Validity
Not Before: Jun 14 18:00:34 2025 GMT
Not After : Jun 15 18:00:34 2025 GMT
Subject: CN=aeaa78478544d530ae0e35a9910120f0d7b77d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:5c:22:09:3a:9d:17:61:dc:52:b2:60:68:
b7:37:14:89:cd:a4:a5:9c:4a:bc:65:12:98:f8:31:
20:5b:56:59:0f:95:3e:fa:9d:04:0b:1b:36:86:0a:
e5:c2:e2:b5:f0:cd:49:ca:53:be:13:0d:f3:49:87:
0c:1a:a1:34:6a:73:f4:dd:82:50:a6:56:74:ef:71:
1d:04:90:6a:38:4d:f3:25:0d:e7:73:b3:41:50:ce:
ec:64:16:06:9f:d7:21:b3:52:e2:08:fb:4c:da:5b:
d5:2b:38:a5:5f:ec:3b:00:4f:2b:31:72:98:1d:14:
d9:1e:3b:e2:bf:2d:40:f5:d3:ba:e9:cb:fd:c5:1f:
61:c3:ec:a9:51:c6:d5:30:13:0e:bb:49:44:0d:6c:
f1:91:3a:05:ef:d2:cd:f8:5a:75:d0:7e:e5:aa:41:
91:e5:04:3b:a7:d3:96:d7:cd:83:a9:83:91:20:7a:
d4:bf:5e:35:7a:54:a2:aa:9b:63:f7:0c:93:5b:8e:
56:88:35:8b:9f:73:b1:21:5d:27:ad:5a:24:53:29:
e8:54:2d:5d:5f:55:f6:d8:ac:40:a0:1d:4c:58:31:
ff:74:d9:e2:b6:29:63:0d:12:ce:c9:f2:18:ae:a7:
3c:54:c4:16:41:db:28:e5:07:5c:79:28:58:19:71:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AA:78:47:85:44:D5:30:AE:0E:35:A9:91:01:20:F0:D7:B7:7D:4C
X509v3 Authority Key Identifier:
keyid:41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:65:92:7b:8e:a4:4d:dc:cf:1b:6f:8d:1e:89:36:10:1b:f3:
74:6e:f4:e5:77:14:dd:eb:40:d7:20:bc:da:98:63:31:7b:27:
1a:ce:54:9d:b8:69:8d:3c:ff:d1:89:4c:6d:27:fe:78:6d:a1:
38:3f:17:0a:2c:35:13:66:3c:1d:41:dc:3a:cc:33:f0:7d:95:
97:02:13:06:d5:6a:dd:e6:f5:c4:96:38:4a:e8:78:02:60:6f:
ed:71:d1:b6:57:8d:ca:f8:e1:16:c0:33:39:3b:e1:b3:d0:72:
9e:84:00:ae:6f:ee:9c:3a:ee:09:79:14:e1:a2:49:58:59:6d:
8a:65:d0:2d:1d:35:a9:54:05:1f:e1:79:73:91:e2:c4:6f:e3:
c5:03:ad:d2:3f:7a:23:f9:08:5d:e6:59:0c:14:57:7e:34:f6:
16:d6:a0:44:56:62:91:f9:2c:ad:05:da:63:9d:72:36:dc:97:
7b:f9:d0:47:3e:13:f4:28:75:7d:a5:72:f2:2a:65:30:c4:5b:
84:ea:4c:6c:8c:83:a8:b3:78:e2:db:4a:b8:d1:cd:f9:cc:8e:
69:17:ac:4f:c5:5f:a1:a1:b8:d5:60:25:12:ba:35:d8:89:18:
9c:70:c7:67:a8:99:b7:1d:6d:d9:fb:a9:79:21:e2:f9:86:a3:
42:fa:54:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:08:19 2025 by rpki-client