Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: qcqX/60V5kVY9SazQlu72Q28umbxOjVfUjhu0pYOs2g=
Subject key identifier: D8:05:B1:4D:6A:CC:6E:20:34:5F:08:DF:93:07:77:15:6D:E7:0D:03
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 01977677BEC0084FBB2414EC6891DD453A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0AA0
Signing time: Mon 16 Jun 2025 02:00:48 +0000
Manifest this update: Mon 16 Jun 2025 02:00:48 +0000
Manifest next update: Tue 17 Jun 2025 02:00:48 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: bQBl2nIJGtZys5vprFrKCbGyfS9Y7Bdphu3wMlSmK8c=)
2: dKp1x4AjnPUcfIO_WrYQasCbX4c.roa (hash: BBLyfF5z+X1cauuxHi1cH0OZMMJW5dshnRCgSvteyno=)
3: uBNZ4MqXESz6xGHzQdhbKOD3CeA.roa (hash: Xvf1KJxZcyYU4khA0juJ7NXfjXv9HKqoCzWln+BqLrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:77:be:c0:08:4f:bb:24:14:ec:68:91:dd:45:3a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Jun 16 02:00:48 2025 GMT
Not After : Jun 17 02:00:48 2025 GMT
Subject: CN=d805b14d6acc6e20345f08df930777156de70d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:15:49:8c:bd:9b:9f:a7:fc:83:f3:e4:a3:
9a:1e:40:4f:c6:b6:16:5f:a9:22:98:c8:b3:7e:06:
36:dc:fc:ab:4a:53:a3:07:96:87:1b:bf:81:d5:5f:
ad:4a:28:a7:e2:c0:85:5a:43:d9:73:66:0c:88:46:
33:3f:88:b7:a8:6e:7c:f5:2a:59:fc:05:ac:7f:af:
87:f2:46:fa:29:e0:0a:ab:a6:31:95:a8:9f:68:bc:
48:a5:e4:01:74:26:b0:f5:23:80:e8:96:eb:cf:5b:
3d:92:eb:3c:60:de:09:78:ce:17:73:5e:4a:81:54:
75:90:62:10:a5:b9:98:a9:22:4a:95:f9:4f:da:1f:
bf:e3:c7:1e:26:1f:81:cd:43:95:79:b8:1b:cb:f9:
8a:6e:a1:bf:ba:c4:38:48:7d:6f:d3:46:0a:80:8f:
03:62:38:3a:d9:f6:a5:ba:f5:3e:2c:5b:a6:ff:d3:
c3:a2:84:b7:2b:a4:62:6f:e6:e6:e6:3f:27:53:d1:
65:f4:a6:f6:c6:6d:81:bc:35:99:d6:68:ba:0d:79:
7c:57:a4:3f:73:fe:ed:26:26:c6:c1:eb:f9:0e:db:
11:4a:e7:bf:78:83:95:97:31:d0:17:9e:18:7a:15:
36:86:fa:f8:87:f9:8f:b2:b5:d4:05:bc:2e:7e:2f:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:05:B1:4D:6A:CC:6E:20:34:5F:08:DF:93:07:77:15:6D:E7:0D:03
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:be:92:84:fe:ce:ba:9d:62:1e:b6:dc:f6:15:c0:5b:06:b1:
76:49:8f:0b:66:ce:1d:c0:4b:ce:f9:a2:9e:d5:8b:5f:6d:c2:
e4:a8:29:8f:d1:e9:58:41:1f:e2:64:bf:01:36:3d:4d:72:31:
e7:7c:30:4b:f7:2e:fa:55:33:57:d2:02:28:ad:79:34:fa:37:
ed:cf:d1:42:f2:82:e8:84:0a:cd:fc:f0:13:3e:3b:ed:29:72:
04:82:ac:43:07:4f:b3:88:3c:be:d0:bd:cc:5e:d1:86:bc:10:
6f:12:ca:c4:e2:7f:0a:90:e4:f6:f6:68:35:b6:00:b6:6d:80:
30:b6:d1:1a:4c:a7:51:13:0c:22:99:c0:ca:4a:fb:6d:7c:4b:
96:49:cf:8a:a5:70:4b:9d:d5:ff:78:78:03:24:89:ba:0c:8a:
3f:33:13:14:a0:ff:2f:24:27:0a:75:5f:3b:30:57:dd:10:ac:
f7:33:33:c2:ed:7d:b8:1a:32:4e:9f:85:2a:6e:5c:6a:84:5e:
98:a4:8e:8c:8d:e5:64:df:30:a1:2b:0a:1e:b7:86:41:57:55:
cc:a4:34:36:92:8a:d8:df:ec:a7:c4:d5:91:d6:85:6e:ec:84:
8b:b6:40:44:a9:5f:0a:d2:d9:0d:fc:88:1f:a0:c2:21:49:ab:
77:88:ce:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:31:47 2025 by rpki-client