Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
File: QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft (raw, json)
Hash identifier: hn6JD0wdpnvjWcNAB7MmM/s5p7GPNKa4yLiMyIqWRQU=
Subject key identifier: B6:37:32:9F:9E:72:8E:13:3F:4A:08:97:4F:62:54:1F:61:87:FF:1D
Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
Certificate issuer: /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Certificate serial: 0197789CCAA070117F037819E4485B3C8FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 12:00:30 +0000
Manifest this update: Mon 16 Jun 2025 12:00:30 +0000
Manifest next update: Tue 17 Jun 2025 12:00:30 +0000
Files and hashes: 1: 1OkV1FOSt0CIRzcv_xhQZDIhaCY.roa (hash: 0nS1ugbBt4Oiv/4rCAPHlWm5w4EZo3UZ1Why6gpAxu4=)
2: KmelkdSsmbJtVWU94thK7d4v5RE.roa (hash: oIEVJa5VewYKMBXTZDUCkwziB09TzVnzHNBtgzRneDA=)
3: QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl (hash: 82I1h6GtYytFXWl+aiCaX9GOjTAeF2f9MsB9m6UlxNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9c:ca:a0:70:11:7f:03:78:19:e4:48:5b:3c:8f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Validity
Not Before: Jun 16 12:00:30 2025 GMT
Not After : Jun 17 12:00:30 2025 GMT
Subject: CN=b637329f9e728e133f4a08974f62541f6187ff1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:c0:14:d0:bd:59:71:aa:b8:5a:db:f4:9c:
0e:db:fd:41:03:1a:96:29:6e:da:a2:71:fc:e7:57:
40:f7:23:24:b6:f2:27:63:2c:a9:f4:bb:c3:f0:58:
7f:3e:c7:ee:d5:f1:32:51:e0:b8:d3:1e:0f:25:71:
cc:57:a8:36:c4:7c:bf:53:43:4d:e8:a1:91:be:26:
5e:d5:e1:e8:6c:91:eb:d4:c6:fb:d5:7e:14:40:c5:
7a:00:4d:74:5b:e8:94:f6:15:d6:ea:ef:13:cc:66:
30:d7:67:c0:2c:43:36:42:61:36:00:5b:9d:b2:b4:
8b:c3:54:00:2d:ad:4f:39:d1:6d:aa:b2:b8:75:ae:
8e:e4:a6:2b:1d:10:2b:c3:64:76:03:28:ef:3f:8e:
43:65:a5:91:1b:1d:02:9f:c4:9d:e1:92:80:c9:12:
06:8e:a8:27:04:75:9e:31:03:7d:bd:b6:6e:03:f8:
fa:ec:a9:69:ed:f4:8d:44:a9:76:f1:7b:32:f0:c9:
82:48:4e:0c:ce:ca:03:5b:a8:21:9a:16:d2:34:e6:
8c:d8:e0:e7:e4:c7:e9:08:f3:7e:c0:d3:6d:01:76:
2b:69:6d:9d:57:c1:61:eb:ee:4d:30:c3:a2:ef:34:
f4:d8:80:80:55:ea:18:c6:93:28:96:77:17:00:4f:
1f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:37:32:9F:9E:72:8E:13:3F:4A:08:97:4F:62:54:1F:61:87:FF:1D
X509v3 Authority Key Identifier:
keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9a:58:04:d0:2d:41:b8:c1:66:41:f3:13:46:95:94:e4:96:
2f:83:08:fe:ec:9e:30:7c:73:7d:e4:c9:f2:97:5e:d8:8e:f2:
f8:ca:f3:4c:33:f5:da:e1:b9:16:96:aa:65:7d:76:3e:2a:2b:
19:13:15:3e:b5:ab:7f:b7:65:49:51:ed:ed:8f:2a:58:7d:77:
84:e1:fd:99:18:79:62:90:31:a1:4f:5b:25:60:6c:0f:86:d1:
7d:76:5e:62:e1:41:9a:e7:ef:6b:2a:76:5b:44:7d:85:9c:e9:
73:d6:23:34:b2:e1:e7:ec:a2:79:c5:b9:8f:40:b4:9f:a9:d4:
75:97:bb:fc:6a:32:12:7c:42:c8:53:c0:41:99:fd:f6:81:64:
f0:cd:36:09:c4:b3:a6:6f:1b:b9:b1:35:96:86:52:98:ac:a8:
fd:a8:a1:26:42:bd:e7:ec:f3:d3:0e:c0:d8:6c:60:a7:7e:87:
4b:a3:42:2e:58:9f:d7:11:c5:d3:7f:63:05:c9:b8:48:90:7a:
56:d2:4c:47:2d:df:30:bb:5a:eb:d7:8b:c6:5c:29:fa:0a:fa:
8f:71:9d:c2:cd:35:27:19:64:00:dc:24:a8:37:59:0f:f8:65:
2f:67:47:18:c3:aa:dc:2e:5d:3e:5e:c4:5e:80:8d:6a:20:19:
d1:26:71:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:03:16 2025 by rpki-client