Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: yE6zA4/lBNsxl4LnsqKH/R0jeQLqGLpr5vuIJHXTiZs=
Subject key identifier: 64:7B:E2:F3:F4:9B:3B:E2:DE:73:20:BE:D2:C9:DF:E6:2B:63:E1:5B
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 0198537B3D80F8492EC99DF2B8B3FBFB370D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 09EE
Signing time: Tue 29 Jul 2025 00:00:42 +0000
Manifest this update: Tue 29 Jul 2025 00:00:42 +0000
Manifest next update: Wed 30 Jul 2025 00:00:42 +0000
Files and hashes: 1: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: TXSsP2uzC0VPqDiXsFoBiNRWrUiiFPn7SQ6U9giZSkQ=)
2: vdgwFbYVt8R1VSJ8o61nh0Nw_GA.roa (hash: 76jfpsJ1QF75Cjby0A7bmnFhoDcXagSAAfe9ZF5jiZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:3d:80:f8:49:2e:c9:9d:f2:b8:b3:fb:fb:37:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: Jul 29 00:00:42 2025 GMT
Not After : Jul 30 00:00:42 2025 GMT
Subject: CN=647be2f3f49b3be2de7320bed2c9dfe62b63e15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0f:b5:10:67:e4:f0:d5:2d:73:32:37:00:a5:
fb:11:b7:76:e4:0a:29:85:09:2a:90:2f:7a:9f:08:
78:cb:c6:63:7c:c8:10:0a:8b:ac:57:b1:8c:7a:69:
b5:57:12:88:24:50:b8:c2:da:a9:04:fc:81:36:a3:
31:7c:84:b2:d0:af:2f:23:26:a0:70:7f:4d:3d:12:
a9:a0:24:8c:fd:99:37:3b:68:2c:06:a4:2d:cb:47:
6e:5d:7d:47:8c:e9:81:f0:27:df:8a:18:84:8b:e4:
f3:bd:97:0b:59:54:de:63:66:ca:3f:e5:8c:86:83:
04:6b:0d:27:6e:85:96:99:2e:a4:a6:8d:7c:14:78:
6e:32:02:fc:8e:27:d0:84:d8:61:1b:31:93:60:b2:
f7:2a:3b:60:ef:14:f2:f5:80:5b:bd:1d:55:47:75:
77:71:ae:2c:75:f0:30:b9:0d:43:58:c7:2f:4b:1f:
db:e2:f4:22:6c:4b:c3:95:24:a9:84:7c:c0:c2:91:
6a:bc:5c:da:f3:29:1c:b8:04:ec:de:f1:46:2d:73:
86:7b:2c:6d:48:26:f1:2a:c2:bd:7b:3f:5c:78:83:
a1:98:19:ef:e0:ef:85:80:2f:ff:d0:86:b7:b6:dd:
b2:a9:4c:64:9f:d3:10:8a:5b:2c:11:24:3a:1e:c5:
5e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7B:E2:F3:F4:9B:3B:E2:DE:73:20:BE:D2:C9:DF:E6:2B:63:E1:5B
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4a:29:12:53:ae:79:e7:5c:15:b7:3b:84:46:06:39:df:aa:
45:d6:90:1d:42:0a:2d:cf:76:26:90:67:c2:1f:2e:85:f8:5d:
75:bf:35:c4:e2:54:3c:ee:26:ef:ba:40:73:61:62:0e:7c:a8:
cb:84:d6:25:5b:38:0b:6f:aa:f7:65:8a:b7:5a:e5:2f:5f:a2:
d6:fc:cf:b9:41:c7:12:94:47:5f:25:0d:9d:73:88:97:33:5d:
4f:c0:f7:83:66:f3:b7:98:3a:c1:f9:d5:3a:c1:c6:da:8c:aa:
ea:95:dc:1d:d6:f5:2a:2c:74:58:e9:4e:bb:80:e0:a7:25:4a:
ef:ab:72:a1:c1:2d:e6:67:7c:ac:5d:fc:44:fe:13:d5:35:ed:
21:89:7f:ed:5e:d5:b2:06:3e:c7:cb:dc:4a:f4:28:5e:be:8d:
4f:44:c3:97:50:79:43:74:f4:c1:5c:cb:aa:18:c4:0d:e5:de:
60:0d:70:66:69:df:db:21:c9:21:6f:20:bd:b6:cb:5b:26:cc:
39:dc:29:c9:36:66:63:4b:67:75:1e:57:f8:59:af:40:90:dc:
e4:e6:f9:92:08:4b:9d:db:9f:20:0f:a9:b1:29:c5:c8:67:aa:
c8:af:78:b8:1b:18:8a:2d:e4:0d:28:53:02:bd:9c:bf:9a:07:
92:cf:ef:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:43:32 2025 by rpki-client