Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: Nm7FAN6IldbtPSdwOgXSOM8VtXi+SkueGEN1eoPmPP0=
Subject key identifier: 72:51:AE:75:B5:F9:C8:30:27:7A:BE:54:92:57:83:32:17:FA:D9:31
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 01984C663E7B458808BF7EED4D1591A8818C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 1252
Signing time: Sun 27 Jul 2025 15:00:25 +0000
Manifest this update: Sun 27 Jul 2025 15:00:25 +0000
Manifest next update: Mon 28 Jul 2025 15:00:25 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: 4+ScCo8FXJWkyHHD4zZk0/bjgCofsdItHuJVB5NdJdQ=)
2: v4w1l1in0yr2EsXsMhwK7smhe5c.roa (hash: 7H5QERbsex398Y/VCrt/sp2Qpj6rfwjWtrt7q4PvQAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:66:3e:7b:45:88:08:bf:7e:ed:4d:15:91:a8:81:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Jul 27 15:00:25 2025 GMT
Not After : Jul 28 15:00:25 2025 GMT
Subject: CN=7251ae75b5f9c830277abe549257833217fad931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:22:db:0f:f3:c1:1b:3b:2c:ad:91:ba:18:35:
05:4e:19:0c:74:d6:5e:d8:a5:a6:38:58:a8:4d:31:
d3:3f:11:66:c6:9c:ff:ac:b8:fd:96:49:df:c0:f1:
fd:ac:45:fe:cc:67:fc:fd:fd:c4:51:69:21:40:00:
c9:b8:e0:c8:6c:9c:82:b4:6c:94:0b:c7:13:0b:9d:
d5:df:3a:1c:24:73:39:92:74:44:80:b8:fc:15:c6:
1a:94:d4:b2:c1:9b:30:9e:c6:7f:c7:4b:e6:14:45:
ee:10:16:3f:f8:03:1b:e3:6d:8b:0e:1c:75:31:5c:
39:80:a2:a9:cc:0a:10:e8:18:1d:c3:c1:6f:9e:7f:
97:1b:03:46:1c:6c:fc:b1:f9:86:98:35:84:af:ce:
92:f0:b1:03:61:16:fa:39:c3:7c:54:97:a7:72:97:
4a:f0:eb:28:e1:b5:20:e7:be:d2:da:72:34:4e:ed:
f2:39:7c:04:4b:79:98:d2:1b:fb:b7:91:8c:68:28:
f9:7b:28:da:bc:72:79:84:c2:4f:86:ef:2b:85:52:
35:bf:8e:e0:ef:9b:d0:60:3c:e8:42:e8:42:26:03:
b8:b6:02:ab:1d:a4:f9:05:d2:4c:cc:df:4b:2a:39:
8a:23:ce:e4:9e:58:da:05:9a:6b:ac:bd:99:0f:73:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:51:AE:75:B5:F9:C8:30:27:7A:BE:54:92:57:83:32:17:FA:D9:31
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:45:47:f1:cf:7e:e5:a1:91:e7:f0:c7:3f:b7:00:9f:78:82:
e3:f4:74:59:b5:e3:e2:3b:85:5c:0b:dc:7a:69:52:79:9a:00:
09:84:ae:3d:33:da:5a:97:b6:88:00:31:3b:e2:bd:20:6c:84:
6c:1c:4d:43:1c:67:62:54:f3:6b:06:d4:00:f1:5d:62:e4:e9:
af:e0:29:e7:38:32:0e:c3:52:ec:20:d5:fc:51:38:f9:8d:01:
bb:5e:b1:43:0f:0c:3c:29:42:08:e3:7e:e8:1d:90:e1:ef:a5:
08:8c:51:66:a2:6d:71:be:2b:1f:26:3f:c3:17:1c:33:27:cf:
37:de:29:65:75:96:cf:a9:b6:69:98:53:6c:a2:10:e6:e2:18:
28:e7:06:9b:80:1c:57:e0:81:f4:db:0a:ce:f4:4c:57:58:44:
b0:1b:83:25:ed:20:32:c4:26:ec:35:bf:c7:d6:06:af:36:0a:
dc:3b:b1:67:5e:6b:7b:8f:74:16:0c:44:c8:b1:c4:05:70:3d:
d5:86:2c:fa:6a:0f:1b:1e:6c:14:a5:34:05:49:1c:60:26:37:
32:06:60:fd:de:9e:7b:d8:ca:f6:ad:92:df:2d:7d:63:1a:1b:
9d:32:50:f2:13:29:b5:d4:d2:67:3b:9a:a1:10:c0:3b:15:6b:
fe:8d:30:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:37:52 2025 by rpki-client