Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier: YbzKD572uN15TancS+RHtrRj9Ly7dJLdg7SvvzkirTc=
Subject key identifier: D9:A5:2B:95:2E:C5:E1:E4:6B:60:88:E9:38:02:F8:88:68:E5:2F:99
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 019849D304B5643172EDFC05E9328CC75330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number: 12E8
Signing time: Sun 27 Jul 2025 03:00:22 +0000
Manifest this update: Sun 27 Jul 2025 03:00:22 +0000
Manifest next update: Mon 28 Jul 2025 03:00:22 +0000
Files and hashes: 1: 7347cFurkIFVNRTShqXtdTwOLOA.roa (hash: 81GL5pa945jQA5j8/X64fsQyRv+u1Eyr3yERMPF2bKE=)
2: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: CQnYIY1j8eTv7EBt2HSwIiFk32uLa2HKRNPwsN5xlDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:04:b5:64:31:72:ed:fc:05:e9:32:8c:c7:53:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: Jul 27 03:00:22 2025 GMT
Not After : Jul 28 03:00:22 2025 GMT
Subject: CN=d9a52b952ec5e1e46b6088e93802f88868e52f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:a5:b1:d8:be:57:42:fa:01:54:66:4b:8d:
70:07:cd:70:b9:9f:5b:8a:21:e8:cc:6d:6c:ff:ae:
6c:81:90:6f:25:8b:c7:86:df:d6:22:24:0f:94:e4:
b9:c0:c4:94:77:42:e3:24:ff:21:97:25:bc:61:53:
75:70:cf:9d:da:df:0e:1b:ec:87:97:67:cb:eb:3c:
db:ae:6f:e4:0f:2b:6e:6b:05:20:a1:f6:f1:35:d4:
4e:9e:ba:7e:d7:b8:5b:5d:65:0d:7b:c3:da:74:10:
e1:74:71:e2:6c:ce:b5:b9:40:62:b7:2b:23:79:23:
b7:0b:00:63:6c:09:e6:67:f1:b1:a6:69:8d:34:71:
44:be:bb:f0:ea:47:94:36:e1:e5:81:5a:2b:fa:0f:
33:38:17:50:16:d9:66:7b:ad:f6:73:63:34:1a:9b:
2f:8e:23:9f:ba:20:0c:8f:86:02:14:63:18:f0:ed:
d2:ad:66:69:e2:3d:6c:d9:4b:29:e6:61:cb:cf:63:
2b:c3:0a:21:15:a1:2c:ae:62:45:7f:c8:a7:e7:96:
0f:f1:10:4b:96:ca:2b:51:7a:1e:a7:61:4d:65:1c:
4f:99:85:c7:71:fd:ba:fc:cc:01:69:8a:d4:0f:7d:
89:16:f8:a5:76:6a:5e:3d:2b:5b:ff:c5:2e:b9:2b:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A5:2B:95:2E:C5:E1:E4:6B:60:88:E9:38:02:F8:88:68:E5:2F:99
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:48:49:37:0c:7b:b8:c7:bd:d8:df:8a:dc:9a:0d:23:8e:dd:
48:5e:46:99:0d:e2:ad:87:e5:3e:df:ee:88:b5:21:df:28:c0:
1e:a6:55:7e:ef:b4:20:01:02:a9:05:48:c8:06:ba:6a:d1:fc:
58:68:3e:e2:0b:fa:02:c7:67:28:75:2e:21:75:01:f6:31:d5:
d1:1a:c4:47:41:bf:52:af:4d:f9:34:a1:d9:59:bc:6d:a2:17:
64:83:f5:e7:cd:84:e5:50:72:ac:9f:d4:e8:9a:1c:6f:3b:36:
31:35:41:df:93:70:ec:7f:93:27:5d:f7:3a:82:f4:ae:c6:cc:
ac:5d:b3:91:af:d7:ab:02:81:60:36:80:f7:9b:66:43:31:f2:
38:c8:f8:33:d5:be:82:a4:49:d8:29:0e:68:f4:1d:fc:f6:9b:
24:a4:8c:42:72:f0:30:a5:df:9e:38:90:3f:b6:d7:4f:da:8b:
02:ec:39:6a:f2:bf:9e:08:b1:a9:c6:b3:e2:e0:3a:47:dd:cf:
8e:00:79:79:cf:fd:3a:6c:2e:f4:3a:da:d9:8e:58:fc:30:90:
d5:b6:8e:b1:cc:d3:af:3c:68:9a:aa:6f:b2:37:e9:70:e8:61:
35:85:e5:e3:eb:7d:05:30:8f:70:25:d5:9d:53:ce:88:1d:8b:
2a:ec:7e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:23:59 2025 by rpki-client