Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: 4IEUdVzdMZm9VLsSP83UhPl6A0v+wFcWpwQ/a3Mj4sQ=
Subject key identifier: F3:A7:2F:97:DC:41:77:03:DD:21:95:78:9C:B7:59:81:75:B1:A9:1C
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 01977008082CF8CAB1365F54E9B4F3634E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 20:01:03 +0000
Manifest this update: Sat 14 Jun 2025 20:01:03 +0000
Manifest next update: Sun 15 Jun 2025 20:01:03 +0000
Files and hashes: 1: EuVjqybteP4_2uP1qrjFTh6Ex84.roa (hash: VQ7r6aXcK3EoAppW65m/zYlli6sD8iLPznPeACkUL+k=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: fex+DpWuF2HDq6VBuQg0JI468mh0ojKd8PYxtD72pA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:08:08:2c:f8:ca:b1:36:5f:54:e9:b4:f3:63:4e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Jun 14 20:01:03 2025 GMT
Not After : Jun 15 20:01:03 2025 GMT
Subject: CN=f3a72f97dc417703dd2195789cb7598175b1a91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:c2:3f:5f:08:7b:e4:9e:68:9a:8d:12:d7:
16:6e:de:be:c5:de:3b:7e:63:dd:3b:9a:71:a8:3a:
ac:80:44:5c:20:5a:7e:75:b4:76:61:64:11:41:c2:
22:3a:79:8e:ab:06:25:f2:ee:0d:30:73:35:9e:01:
92:18:c1:0b:ff:61:09:18:03:47:91:aa:fd:96:42:
a1:b8:a6:d7:31:b1:d8:e5:38:ca:5e:cd:2e:fc:e1:
37:e9:e9:87:8d:6f:16:ac:ce:99:83:2f:6b:72:62:
6b:06:57:5d:8e:57:a5:0c:97:27:05:f8:55:24:82:
8c:ec:af:27:36:79:60:7e:25:7a:06:8f:b7:5b:6d:
57:51:e1:38:41:07:61:a1:2f:0a:20:95:dc:69:88:
88:b1:89:0b:30:bf:93:fc:3e:5d:cb:ae:3f:bc:45:
a8:b8:82:22:0a:23:47:0a:a8:69:bc:9a:de:a9:c7:
61:ee:ad:40:a8:32:ef:f1:ff:cc:d3:34:5b:cc:cc:
a4:82:61:95:12:5d:bc:af:19:2e:e6:0d:ee:85:70:
1d:35:21:69:17:5d:8e:4b:a9:4c:96:3a:a7:0f:49:
05:33:7a:46:48:fd:d0:c2:06:6e:51:cf:2d:90:43:
a4:a3:ba:c6:a9:06:18:17:f7:47:18:cf:aa:9f:dd:
1f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A7:2F:97:DC:41:77:03:DD:21:95:78:9C:B7:59:81:75:B1:A9:1C
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b5:42:86:42:c4:88:f0:81:8f:df:82:bd:12:c0:4f:23:f7:
59:8e:ba:83:73:af:28:a4:51:91:e7:b6:f9:71:75:60:8b:d2:
98:b7:5d:de:b3:ed:60:6a:50:51:58:1a:c7:2b:53:53:9c:da:
c7:bb:29:76:54:13:dc:80:97:29:b6:57:d6:3b:c0:61:8b:29:
36:f0:0e:b2:77:06:1a:19:b2:df:3a:24:87:60:38:78:47:94:
2b:e6:d0:2c:e3:fb:14:1b:d8:7b:db:0a:61:f9:72:d3:83:86:
36:f5:00:5c:e8:d9:1e:78:61:31:b5:be:24:b5:18:8d:1c:a2:
bf:fb:b7:98:3f:e9:1c:5a:14:32:48:aa:44:46:a5:af:d9:7b:
e0:a5:1d:8d:2c:34:9b:c0:1b:3e:50:d1:a0:f5:fd:d4:fa:a7:
ef:be:23:65:97:97:7c:27:41:1a:18:bc:e6:06:ea:99:b6:04:
38:ac:5c:75:90:ac:05:5b:78:a6:eb:bd:63:0f:b2:b1:24:5a:
2a:7f:80:92:4f:d0:a2:fe:21:43:66:e2:99:24:8f:04:69:51:
60:fd:26:62:86:3f:e8:88:7a:08:e1:0a:db:82:44:e1:28:7e:
6b:b6:5e:5c:b3:e6:7c:6e:3b:19:18:a0:7c:aa:85:b5:da:60:
d3:5d:d8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:05:32 2025 by rpki-client