Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: gejT7EBcGgm1Bx7oZ3MulFLY5iR/kghCEt7M2xdNXZE=
Subject key identifier: F5:7E:EF:F3:7F:A9:58:4D:EF:F4:15:28:07:FE:E6:1C:9E:58:91:7E
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 01976960E391445EE7F7433E657864840C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 13:00:46 +0000
Manifest this update: Fri 13 Jun 2025 13:00:46 +0000
Manifest next update: Sat 14 Jun 2025 13:00:46 +0000
Files and hashes: 1: 1-OpArz-cvr3_w4LMxpPZzSxCtqI.roa (hash: p66SMlwKH8qksSnzyFy8M1MJ9eGvVUlsB0A2v++rXYg=)
2: BO2GxdENWf3nZf4IjS3W9dxIBdA.roa (hash: CoT9/NP4/6nCeDdnm6fFk7HZ3lUZardt1KwDlood7sQ=)
3: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: FEogMrvHHn814WHiXDpaEebLnKwoIQkGLREFJsyFWik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:e3:91:44:5e:e7:f7:43:3e:65:78:64:84:0c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Jun 13 13:00:46 2025 GMT
Not After : Jun 14 13:00:46 2025 GMT
Subject: CN=f57eeff37fa9584deff4152807fee61c9e58917e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:a1:4d:30:34:db:bf:88:1a:60:88:a6:f5:
a2:00:51:49:71:b0:34:38:a0:c0:21:be:be:07:5c:
be:82:ae:ba:fb:07:cb:93:04:d5:c8:eb:db:9b:42:
8c:57:06:54:f7:53:c6:03:79:1c:35:46:9f:9c:29:
ba:da:2a:12:37:04:02:48:1e:78:1b:b2:95:d2:f8:
23:41:82:57:d5:20:c5:42:f4:d3:de:0f:a5:8d:6e:
0e:d3:eb:ed:52:45:57:a3:2f:31:b4:f5:19:4c:b6:
22:03:90:bb:fa:e3:25:ca:6f:f9:3d:65:cd:9a:26:
7c:f8:df:8f:b2:2d:88:cb:60:a0:d3:a4:c1:94:eb:
e0:a8:47:e5:f0:c8:0c:c8:1e:7c:57:e4:04:12:d9:
6a:58:e3:82:b2:8a:1f:da:14:d3:d1:97:91:68:19:
2d:cc:92:9c:ee:d8:19:32:dd:15:06:e1:c9:fe:79:
93:10:9d:49:12:02:07:dc:7c:a5:24:a2:40:ae:50:
13:16:6f:2c:48:aa:78:89:99:ff:33:f9:0a:34:ff:
61:93:60:6d:7e:2d:6b:b3:dd:a2:cf:71:ec:bb:1e:
bb:23:1c:b1:90:a4:3d:32:1c:db:83:8a:d4:27:80:
76:8e:72:26:0e:3c:73:be:3d:99:4b:9c:ae:4d:17:
8e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7E:EF:F3:7F:A9:58:4D:EF:F4:15:28:07:FE:E6:1C:9E:58:91:7E
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:08:a6:96:d5:2e:bb:d2:90:fc:1f:d7:fc:8f:0f:04:d1:ef:
bb:b1:49:47:bb:35:1b:b8:1f:6e:58:b0:22:ca:88:0d:3d:5c:
a1:d3:f9:43:27:86:fe:cb:80:a1:30:ef:1e:5a:36:db:0e:81:
a4:80:cf:41:9c:23:c7:d3:9e:a7:3a:62:08:66:be:b9:b1:0e:
ed:3c:4e:95:e4:86:35:87:ce:50:b0:14:89:a4:f2:f6:4b:ff:
36:5d:4a:09:2c:15:a1:27:d5:42:ea:17:de:42:5b:2b:85:39:
41:6e:6d:ce:a7:8e:6f:39:65:6b:30:ed:f1:95:4f:a5:0b:b1:
aa:f5:43:75:47:a6:d1:77:ad:0e:0d:4e:00:07:a9:b5:04:6c:
28:61:3b:a2:07:29:ed:e8:b5:8a:55:11:8d:6b:d5:32:05:b0:
ca:90:3b:a8:e3:66:b6:a0:8a:35:f9:e6:0e:25:29:42:5e:50:
94:27:13:0c:3c:4d:ad:84:03:93:7d:64:f3:88:ce:4e:3e:36:
08:4d:a1:81:0a:a2:3c:1c:6c:85:af:97:2f:51:a4:75:96:fa:
5b:fc:72:90:99:85:ca:c7:02:56:80:5a:01:46:b2:73:c5:9c:
48:05:14:a2:5f:22:3b:3c:92:26:e3:ba:50:5f:ee:0e:d1:71:
cc:ee:4e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:42:17 2025 by rpki-client