Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier: joQlmp7lfYCN11i0aVhBxQGDnRK90/A8Vfn3s/Dkyac=
Subject key identifier: 34:F0:F6:D8:5F:06:15:C0:65:49:E1:7F:B4:B1:94:81:73:E7:23:43
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial: 0197778A53C47AA6133B1555292F245CB21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number: 10F0
Signing time: Mon 16 Jun 2025 07:00:43 +0000
Manifest this update: Mon 16 Jun 2025 07:00:43 +0000
Manifest next update: Tue 17 Jun 2025 07:00:43 +0000
Files and hashes: 1: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: hx30zEsfD7VmHDjeqxxpE2NkeeHzU98R8WUxt7HBoS8=)
2: lvvS-y_t3pi3cv-oXJNHuuwFX60.roa (hash: fbIaohthqLUB14sBjDthABWLRfajk00zaK8xsJAksno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:53:c4:7a:a6:13:3b:15:55:29:2f:24:5c:b2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Validity
Not Before: Jun 16 07:00:43 2025 GMT
Not After : Jun 17 07:00:43 2025 GMT
Subject: CN=34f0f6d85f0615c06549e17fb4b1948173e72343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:67:4e:a9:ed:2a:d4:41:2d:92:d4:b4:ea:
32:8a:47:3a:b5:75:bb:b9:a9:3d:bb:24:8a:9d:cd:
2c:c8:04:75:30:cc:8f:66:98:35:d1:bf:af:cc:59:
46:61:17:a5:3a:0d:7d:a2:cb:b0:0e:c6:17:fb:3b:
3a:db:55:71:b8:b2:b1:ae:1d:58:26:50:95:e8:09:
19:8c:08:4f:50:d4:2e:59:d1:c2:e9:64:c0:00:23:
e4:96:d7:ab:7f:3a:0d:66:e8:87:b9:5d:3f:76:ac:
21:07:8f:fc:ec:ed:29:fa:48:e1:b9:39:4d:aa:1f:
59:04:d0:d7:43:93:da:e8:ef:ea:a4:c1:d3:01:c0:
4e:1d:99:6b:9a:d7:b4:6b:7c:87:9d:4e:54:fa:41:
22:ac:ab:70:31:2b:30:7e:89:b4:33:95:a6:86:a4:
01:10:4c:9c:2f:64:69:2d:ae:8a:12:2c:b1:bc:b6:
20:c2:33:be:5b:5c:97:c7:41:0d:62:96:fc:15:47:
ea:28:3f:0d:c7:d8:6f:ea:22:d0:11:02:61:33:4d:
5f:27:cf:d8:0c:b1:56:16:f7:c5:73:62:d0:80:0a:
27:af:a4:aa:e9:9c:13:e3:4d:47:3b:9b:29:01:70:
b0:0c:86:78:b4:8a:9d:bc:e8:95:0e:e1:3c:1c:ee:
f5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F0:F6:D8:5F:06:15:C0:65:49:E1:7F:B4:B1:94:81:73:E7:23:43
X509v3 Authority Key Identifier:
keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:99:f3:d4:16:b2:76:bf:7e:44:26:65:a3:16:fc:51:4b:f1:
2c:86:54:8b:64:07:50:25:f6:26:4f:e4:b5:ad:a9:65:c3:56:
61:48:8d:cc:5b:ed:52:96:d2:83:d8:77:bc:7f:79:88:97:56:
03:69:5f:a2:c3:90:a4:eb:14:68:b3:e9:6e:3a:72:80:9c:3c:
75:ef:7c:80:8d:72:75:97:eb:76:8c:11:db:7a:8b:8c:aa:38:
06:59:03:32:90:d1:7b:ba:52:10:cb:ca:18:9c:0d:a6:7f:f7:
73:bb:50:59:51:47:eb:29:6a:dd:4e:fc:99:c9:f3:b3:94:a6:
eb:e1:37:26:6c:e0:7a:56:a6:dd:1c:92:33:62:e7:8e:f3:ec:
90:0e:79:95:e7:b6:b4:8d:b8:38:b9:b0:fe:32:f1:88:a0:8f:
c7:ef:2b:e6:dc:e0:2d:04:08:47:f3:3b:38:13:1d:7a:42:e6:
e3:b7:4f:6e:16:05:66:94:76:06:62:5b:8d:96:89:42:11:ac:
0c:e9:2b:58:2e:6b:fd:c6:72:43:ea:87:bb:77:56:f9:5e:fa:
b7:f1:6a:d0:c3:11:86:d5:55:97:3d:24:3e:58:36:d7:4b:de:
70:ca:cb:42:9d:5c:ed:d8:7a:e1:3a:d8:c3:a6:44:79:31:09:
27:26:a9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:40:31 2025 by rpki-client