Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
File: QFC8opwYE647EfOB8EQqoqipMb8.mft (raw, json)
Hash identifier: C2phwG8SwpOuSospukmCVaRk8LD0jEvKSXpAxXYz/20=
Subject key identifier: 7E:A1:98:0B:74:72:60:2C:2D:A4:6B:43:42:64:7C:94:17:EF:1D:06
Authority key identifier: 40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
Certificate issuer: /CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Certificate serial: 01976D0664573204C131233A01EB12B74928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
Manifest number: 14A3
Signing time: Sat 14 Jun 2025 06:00:24 +0000
Manifest this update: Sat 14 Jun 2025 06:00:24 +0000
Manifest next update: Sun 15 Jun 2025 06:00:24 +0000
Files and hashes: 1: 19IQx82rzsiCoBb7iKS7zS0gXio.roa (hash: TEyMe4x0yj15nmcDqFTTZyRV6sHl2P5CCSlpIqh9COU=)
2: QFC8opwYE647EfOB8EQqoqipMb8.crl (hash: VKzmfUZlG/lZf09XF6htVoffNmk2kNs+OH7vIWyn844=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:64:57:32:04:c1:31:23:3a:01:eb:12:b7:49:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Validity
Not Before: Jun 14 06:00:24 2025 GMT
Not After : Jun 15 06:00:24 2025 GMT
Subject: CN=7ea1980b7472602c2da46b4342647c9417ef1d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:37:2f:5e:94:97:b1:ce:cb:b8:ca:8a:be:
80:e7:9f:e2:9a:17:29:75:19:b5:3f:33:e1:a2:89:
4d:cf:92:ba:c6:a5:14:55:31:dd:61:cf:1d:42:3c:
02:1a:ae:06:c2:84:4e:97:8a:9f:84:40:62:a3:29:
59:f4:97:3a:74:c3:fd:91:29:97:3c:47:67:36:77:
6e:9c:9c:9a:b8:ac:14:b4:c5:95:1a:28:53:66:a5:
52:65:0c:57:af:fe:63:20:f7:de:7b:c9:8a:50:e1:
e5:6a:4d:0a:86:84:3b:1d:91:f7:aa:f6:99:a4:7d:
03:f2:9c:b5:cc:4f:b5:10:04:84:3a:9b:19:0b:5d:
fc:2b:3e:32:2f:4f:23:f0:34:2b:45:f0:5e:97:f9:
23:b4:38:88:73:2d:20:9f:7b:a9:0f:42:1d:ad:df:
80:77:d4:5d:31:2d:86:20:49:c4:55:b7:60:2e:e4:
26:1d:e0:5b:73:e3:59:50:9b:77:47:69:ee:58:00:
77:a6:f8:4a:20:6e:4f:8b:4e:19:75:81:11:d0:49:
b3:62:2e:77:f3:3c:08:17:57:61:57:5f:5a:96:42:
92:90:01:89:b1:a6:e6:2e:74:d4:5b:49:14:6e:f4:
cf:14:e7:82:1c:41:de:60:4f:f9:6d:7b:7f:44:b7:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A1:98:0B:74:72:60:2C:2D:A4:6B:43:42:64:7C:94:17:EF:1D:06
X509v3 Authority Key Identifier:
keyid:40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3d:b0:52:61:d6:b5:e4:80:a3:83:7c:cd:91:fc:19:0a:6b:
45:32:ab:d1:af:cd:83:36:18:d9:f4:76:1b:a7:9e:2e:ea:5c:
35:ff:a9:d3:0e:d0:5b:74:46:8b:34:06:7a:ae:c1:26:22:0c:
b5:86:9e:65:18:d0:a3:24:0a:40:36:bb:a3:5d:be:7c:69:55:
5f:bc:8c:b4:8a:60:51:97:80:39:2f:33:e9:ea:90:19:94:98:
ce:e7:f2:0d:b2:48:9b:17:18:c7:9c:17:30:b2:fa:3f:99:13:
50:03:67:79:58:6c:e8:73:d9:5e:94:99:f3:50:d4:72:f1:c7:
06:99:07:d2:db:ce:be:4e:12:33:64:f2:18:b1:ee:66:47:2c:
af:01:a5:3e:85:5b:12:b4:23:de:44:85:2f:cf:49:ee:bc:46:
00:98:e5:58:be:7c:1d:de:53:d7:09:55:d3:2f:f7:9a:ec:92:
68:73:1c:ba:37:e5:ff:f4:4b:be:6c:e6:a9:80:d1:e0:96:39:
f3:e8:a3:cf:ff:eb:0b:78:1c:25:9d:77:f1:8f:b4:91:94:6b:
2f:56:fc:74:f0:64:94:9e:81:21:be:5b:2b:34:a7:d6:1e:86:
a7:24:52:73:94:ef:ac:02:6f:c9:12:90:fb:31:24:0e:f8:13:
1a:87:0f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:03:26 2025 by rpki-client