Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
File: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft (raw, json)
Hash identifier: aAPXcjMK1q21BaxZD08B6Elm+tc9wZYhiizIMDXYWmY=
Subject key identifier: B2:46:96:3B:B0:1C:C7:BB:BB:13:CA:84:67:7B:D8:2F:CE:43:AC:AF
Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
Certificate issuer: /CN=406e906f82b3d5155659dae4d086769ef12a8214
Certificate serial: 01976CCFAC5C05A59F7A630BFFC1843B5BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
Manifest number: 1064
Signing time: Sat 14 Jun 2025 05:00:38 +0000
Manifest this update: Sat 14 Jun 2025 05:00:38 +0000
Manifest next update: Sun 15 Jun 2025 05:00:38 +0000
Files and hashes: 1: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl (hash: wk0G0Kc0Vtd+7cu1cu30Q/4HbuXpBxDiffV+4rVGCyk=)
2: WhWQtaasnXhce4uUgLMkfia6_fo.roa (hash: D7trmdSCq7r/k8TYb50IMju8s2o1usQc52do6qxrWBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:ac:5c:05:a5:9f:7a:63:0b:ff:c1:84:3b:5b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214
Validity
Not Before: Jun 14 05:00:38 2025 GMT
Not After : Jun 15 05:00:38 2025 GMT
Subject: CN=b246963bb01cc7bbbb13ca84677bd82fce43acaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f7:99:0c:f4:0d:1e:86:99:1f:41:32:83:ff:
5f:fe:a4:68:2c:9e:a8:aa:b2:a1:b1:7a:f7:45:25:
1c:39:2c:e0:24:84:fb:f3:da:d5:de:4e:12:62:ef:
10:bf:e0:c7:bd:5c:ab:fd:9e:2e:36:99:3e:3d:f0:
f2:2a:06:83:6d:e3:e3:2d:03:7a:ff:72:17:a4:1d:
ef:34:64:2c:05:08:7d:2d:8a:d9:b8:ae:f4:26:3d:
d2:3b:b4:db:18:e2:99:f6:0b:21:5a:91:ad:a9:d0:
27:12:3c:de:d4:0f:6d:d0:08:d0:30:02:a2:39:25:
26:4d:25:b2:58:6b:07:d2:df:3d:d5:db:de:db:8d:
e9:05:87:57:3e:8f:fa:32:a0:45:dc:d9:e5:e1:f1:
ea:a2:ca:3c:38:10:c0:57:ec:9d:98:72:eb:d5:c2:
77:3a:8d:10:28:f2:6b:12:7b:57:af:0d:4d:a2:b4:
df:ba:fb:12:06:3c:7b:c9:4b:db:8d:bc:ac:f8:5a:
93:49:75:95:8a:87:ac:af:4a:bd:c3:d9:95:9f:e8:
0c:e6:6f:c4:a4:67:81:f3:63:72:45:98:b8:79:8a:
08:ef:e2:51:83:80:c9:39:e2:eb:49:e2:0b:d0:bc:
4f:2d:ba:76:ec:e2:b3:96:0d:57:cb:c1:42:cf:37:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:46:96:3B:B0:1C:C7:BB:BB:13:CA:84:67:7B:D8:2F:CE:43:AC:AF
X509v3 Authority Key Identifier:
keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6f:c3:d1:f0:63:e2:06:64:a5:1d:c2:21:2b:92:78:8e:a2:
18:88:55:af:3e:0f:99:b6:27:88:b3:8d:8e:01:d9:d5:cf:3c:
c4:b3:e0:8d:d7:e9:ab:9a:c5:95:a1:ae:fb:61:7e:2c:9e:4a:
d9:4d:a4:7d:c6:2b:b9:f2:b3:c2:40:b6:a5:f6:84:9d:56:c0:
3d:c4:ca:16:2c:28:85:d8:f1:c6:90:74:88:c5:bc:d4:1a:fb:
1f:c1:28:cc:e7:cf:e4:2e:13:f4:9a:17:ce:6d:33:c1:bb:d0:
28:73:ba:82:ca:09:01:6b:5b:06:7c:a6:82:34:04:5c:60:2b:
85:5d:31:53:56:b4:ed:a3:0f:25:de:5e:a8:84:e8:c2:5a:37:
e4:cd:02:cc:4f:a9:ef:02:48:9d:f8:59:18:de:2c:db:4f:13:
d3:06:07:19:a9:27:65:23:0f:58:a9:d3:4d:ef:77:26:a4:f1:
0b:57:23:a2:0f:fd:16:4d:8b:38:47:1f:d2:0e:d6:ad:81:f9:
0a:a9:99:6b:ee:12:4a:93:e2:bf:d6:ab:57:4e:fa:7c:6d:e0:
49:20:0d:26:a4:d2:22:cf:81:4c:dc:99:23:13:34:c0:52:44:
64:30:b8:89:c9:c5:4c:03:74:df:34:23:17:aa:3a:7c:f4:84:
92:7d:cd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:45:08 2025 by rpki-client