Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json)
Hash identifier: /KOfUQqPviuLEpeeoowar1/WheW8da7ZeoSPLN1Dslg=
Subject key identifier: 52:9F:9A:DC:55:CF:EA:F0:55:5F:8A:73:04:52:72:69:25:EA:A5:5E
Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Certificate serial: 0197892284655FBB7E8307B617E50F63D9BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
Manifest number: 159F
Signing time: Thu 19 Jun 2025 17:00:29 +0000
Manifest this update: Thu 19 Jun 2025 17:00:29 +0000
Manifest next update: Fri 20 Jun 2025 17:00:29 +0000
Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: A89dh+os7vSpHGTickd9M+bqvB6l+zgDHtePcH+d1BA=)
2: cjjqef6iWCl_1yFiNx4mwIqngEo.roa (hash: d/pj6gBhpaRW2JX3FWdfa1N0hGZit4d6dbXlFGA0bW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:22:84:65:5f:bb:7e:83:07:b6:17:e5:0f:63:d9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Validity
Not Before: Jun 19 17:00:29 2025 GMT
Not After : Jun 20 17:00:29 2025 GMT
Subject: CN=529f9adc55cfeaf0555f8a730452726925eaa55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:ba:83:1d:50:07:ac:c9:85:91:80:85:56:
a2:d0:cd:a4:63:cf:3f:d4:07:5a:ce:df:6d:7f:e2:
3b:95:74:cd:82:ca:47:5c:70:6f:08:cb:f8:6b:d7:
00:d3:e1:4b:b9:95:8d:ba:95:72:15:51:ad:e1:7a:
cf:63:a8:bb:d0:30:c8:12:2f:0f:28:a5:fe:97:b9:
ea:6d:e2:89:27:5e:44:17:6a:b3:6d:30:3e:93:fa:
7a:03:4e:a7:8c:5d:df:ca:e2:73:a0:fc:cc:da:57:
a5:04:0e:53:94:ef:d5:f9:3d:03:d3:66:35:10:bd:
9d:98:64:c3:c2:94:43:0d:12:55:bc:ff:b8:28:55:
4d:fa:26:67:06:35:d9:7e:cf:a2:a5:ed:cd:05:02:
64:0d:01:e0:48:9f:f3:22:00:45:a5:6f:50:b4:e3:
b3:4a:7d:44:9b:e0:1d:df:99:54:e7:f3:6f:f7:52:
64:34:93:8e:63:cd:7d:6d:33:23:25:93:f7:74:e0:
dd:5c:ff:11:ca:d2:75:0c:35:12:86:c8:bb:6f:5c:
34:8c:4c:c5:8a:5d:d1:20:6e:a6:df:c5:05:2d:6d:
e5:5d:c3:21:7a:d9:82:15:ad:26:e4:f3:9d:8e:05:
53:3a:8a:c2:73:1a:80:23:a3:10:32:e3:c0:c1:c5:
2d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9F:9A:DC:55:CF:EA:F0:55:5F:8A:73:04:52:72:69:25:EA:A5:5E
X509v3 Authority Key Identifier:
keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:76:ec:ac:ae:82:fb:c0:b0:58:f5:a9:43:91:c1:58:b7:c9:
ea:7e:69:64:5b:75:d8:ac:24:96:e5:0c:f6:e3:e5:a6:1d:08:
f7:bb:6b:fe:e1:ac:7c:b9:70:d2:63:aa:ac:17:8e:e6:e8:19:
a7:f5:fb:cd:36:5a:7e:a6:1e:88:5f:76:64:d8:38:86:b7:2c:
f5:c7:db:b6:ce:8d:fe:2e:49:a6:15:fc:39:d5:8b:3e:be:7a:
22:2a:14:2f:16:ae:03:d7:02:95:c5:61:ca:92:b9:9f:38:45:
0e:c5:4c:c4:ef:f1:dd:f0:a1:0a:ac:60:6c:c4:93:9b:f0:3c:
8b:33:d8:b5:d8:2a:81:b5:75:86:eb:b1:03:25:03:73:d1:62:
1f:b7:a4:65:50:49:2a:b7:30:89:b1:c8:ac:38:71:72:dc:36:
5e:82:d2:84:79:06:19:55:c4:b6:5f:08:1c:1f:67:c5:b8:a7:
a0:88:19:47:51:de:8f:49:a6:d9:85:8a:54:23:2a:1c:84:ff:
a2:b2:67:21:d3:1b:ba:14:ac:b2:7c:26:ea:8b:da:31:22:23:
4c:01:9c:89:36:a0:a1:0e:1f:8f:98:14:39:ca:2e:77:ca:0c:
b7:3e:d7:45:27:40:08:43:02:44:63:75:9c:21:67:2e:f9:4b:
3f:d3:53:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:33:09 2025 by rpki-client