Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: CzaJYlF+XJOabmg4eDQsyaLw6TFwl3LUY+KTz4q+A+Y=
Subject key identifier: 14:30:16:69:94:27:B8:9F:47:43:A9:26:19:BF:F7:B4:42:6F:57:D4
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 0197624C12547B9BFE7988FB6FFCDCDE8C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 158A
Signing time: Thu 12 Jun 2025 04:00:41 +0000
Manifest this update: Thu 12 Jun 2025 04:00:41 +0000
Manifest next update: Fri 13 Jun 2025 04:00:41 +0000
Files and hashes: 1: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: 3GdozLa1cnRu7Pd7FoU+D2oDfbg2pl/2GOBHmL0ohvY=)
2: RWXMqjkV2JSmE_jNgsIntDAZ40E.roa (hash: JlOZyqtU1Xw8rdg1LgiJgni//bw4mMZ1Qt4Pvh5z6tE=)
3: VWg3f0Gbf8sa5f2R-1SRG52r7-8.roa (hash: /HyVmsWd+2rMbD1GgNRa5CoP6uMJQMzjsYwposvYEw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:4c:12:54:7b:9b:fe:79:88:fb:6f:fc:dc:de:8c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Jun 12 04:00:41 2025 GMT
Not After : Jun 13 04:00:41 2025 GMT
Subject: CN=143016699427b89f4743a92619bff7b4426f57d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:96:da:a2:05:bd:5b:9e:1c:60:55:34:f6:
1c:84:ce:f8:74:96:c0:08:9d:a0:bf:3b:05:db:fe:
4b:37:67:1c:75:90:f3:8c:af:07:9e:8a:f4:12:36:
87:89:ea:2b:1e:88:e3:72:de:d0:c1:b6:30:4a:df:
7e:88:48:60:70:60:86:c3:f7:33:97:e2:a9:75:3a:
e3:a6:7f:84:eb:0e:fd:70:f3:c4:2e:c1:81:98:1b:
10:c0:c3:49:30:95:82:3a:87:0f:88:dc:79:6a:8e:
6d:fd:dd:e5:39:69:8d:2f:21:bc:ff:9a:f7:ef:07:
5e:e1:2d:86:1c:e0:e2:82:af:28:2c:f5:51:df:00:
e6:0d:bb:e9:f6:71:77:41:e3:72:7d:62:95:5a:b8:
e8:df:d5:58:8e:f7:66:bf:4c:b5:57:e1:92:2e:fa:
00:90:2e:00:45:5a:b3:fb:6e:15:8b:69:0b:fb:34:
7f:a3:d4:1b:43:56:ce:9a:21:37:1a:d0:75:11:44:
6b:a4:7a:79:38:52:95:71:2a:d1:24:da:20:33:63:
54:90:f1:5e:4d:e6:b6:6e:4f:49:a5:f1:e7:1e:21:
a9:9b:be:3b:c4:e0:57:11:41:2b:79:45:03:65:cc:
bf:7a:61:f8:58:a1:bd:9e:d0:ce:f3:cf:58:c7:bd:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:30:16:69:94:27:B8:9F:47:43:A9:26:19:BF:F7:B4:42:6F:57:D4
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:23:39:37:b1:8f:5c:0e:70:85:1a:7b:ec:d9:74:85:82:95:
d7:d4:cb:08:ab:54:df:45:8a:5c:b4:5d:9b:c4:06:7a:bd:64:
ff:b6:a8:16:aa:47:cc:d6:01:97:c3:0f:a8:4a:c1:3e:85:fe:
30:0c:65:e8:14:05:66:0c:79:57:2c:41:d9:97:ae:8b:cf:91:
dd:0b:c6:84:c3:60:b6:92:29:fd:52:41:d9:bf:f1:f1:ed:e1:
fd:ab:31:d8:a9:c8:a3:eb:6d:83:fd:1c:89:ae:a0:a4:65:6e:
05:7c:14:0a:cc:a4:bd:44:ff:3c:0a:3f:a6:c6:14:c9:63:bb:
0b:16:6c:97:21:18:c9:0c:2b:fa:1e:91:51:56:0a:bc:70:3c:
e2:24:4e:da:1d:86:87:8b:33:d5:7b:23:c8:3c:57:86:15:8b:
20:41:dd:31:38:cf:48:e5:9f:63:f3:b8:bc:47:05:a4:44:87:
d8:65:d5:2a:f8:ef:19:2f:00:e1:56:99:63:fc:c9:f1:1c:f5:
26:8e:7c:5d:a0:80:52:81:14:c1:ce:7a:5c:1c:d9:e0:f4:1f:
c4:fb:aa:bb:94:bd:e7:6e:27:43:c7:f4:6b:58:5b:4a:8f:68:
f4:32:76:32:3b:13:16:e7:2f:da:cf:ca:83:24:ac:e0:c8:0c:
d2:cf:b6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:33:39 2025 by rpki-client