Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: hyD5r7CTLpRhQc43R1Q6XN0LUmIoOTNfZCm+LBxWWao=
Subject key identifier: 92:36:F6:27:60:AD:6E:F8:06:55:77:62:0A:0B:E1:FA:2E:9A:54:95
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 0197605DFC21C819BAF25389428AA653DC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 19:01:01 +0000
Manifest this update: Wed 11 Jun 2025 19:01:01 +0000
Manifest next update: Thu 12 Jun 2025 19:01:01 +0000
Files and hashes: 1: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: qlf7GwrdbJK0uhbTiX0hPcNfmrdRw537IsSUmzksmkU=)
2: RWXMqjkV2JSmE_jNgsIntDAZ40E.roa (hash: JlOZyqtU1Xw8rdg1LgiJgni//bw4mMZ1Qt4Pvh5z6tE=)
3: VWg3f0Gbf8sa5f2R-1SRG52r7-8.roa (hash: /HyVmsWd+2rMbD1GgNRa5CoP6uMJQMzjsYwposvYEw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:5d:fc:21:c8:19:ba:f2:53:89:42:8a:a6:53:dc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Jun 11 19:01:01 2025 GMT
Not After : Jun 12 19:01:01 2025 GMT
Subject: CN=9236f62760ad6ef8065577620a0be1fa2e9a5495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:e2:5c:9d:0c:ef:70:de:24:72:6b:99:d6:
65:e3:88:f3:42:71:49:01:c4:d2:fc:a0:e9:d6:b7:
21:73:f1:37:f3:15:1b:a1:a8:8a:6d:7d:7e:aa:7d:
1d:26:1b:19:ad:97:2d:73:30:4c:56:30:41:8b:4b:
92:1d:1c:95:57:bb:1d:01:c8:c1:5e:10:1b:23:18:
2e:5e:c3:cd:95:6b:bd:ab:92:5f:83:81:da:d8:00:
7a:54:ee:77:21:d0:f9:87:e1:92:c8:62:dd:86:47:
12:07:74:ab:71:78:0d:d7:73:27:cf:04:c9:1a:0f:
1b:0a:1e:1d:04:55:65:5f:9c:b3:cf:5d:e4:19:00:
62:cc:18:e2:00:4e:30:bc:9a:ba:e3:90:db:52:f2:
da:d4:b5:51:6a:c2:69:3d:2e:13:f3:4c:41:ec:6e:
1e:03:f9:c2:6d:61:60:4f:db:68:66:19:61:95:59:
44:19:73:01:99:84:6b:82:26:55:6c:0e:5c:ed:50:
cb:cf:89:43:38:23:b7:a9:10:60:35:85:56:4d:64:
a0:76:99:56:2d:40:04:9b:c8:f5:fa:bf:dc:44:76:
00:fc:9b:d3:b7:7c:55:a3:69:cf:6c:c3:05:7e:32:
19:94:e8:9e:57:17:f2:06:fd:e4:20:f8:c3:73:29:
90:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:36:F6:27:60:AD:6E:F8:06:55:77:62:0A:0B:E1:FA:2E:9A:54:95
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c2:52:25:00:27:b1:8c:5b:05:3c:b3:73:f3:f4:d1:71:e7:
b8:99:bd:63:02:5b:3b:c6:92:81:8f:4a:00:7c:ae:b7:a7:63:
84:3f:f6:e4:aa:76:1b:dc:2a:30:15:52:6d:85:49:3a:85:c9:
78:88:de:c3:77:1e:d5:37:84:99:50:76:f2:a6:ed:9c:49:7f:
62:27:77:e7:ad:2f:37:cf:c3:81:7e:04:f3:cb:8d:07:85:4a:
89:30:f8:a0:5c:96:9a:24:ec:18:e9:cc:1c:e8:f2:66:64:74:
18:45:aa:06:a9:f1:64:f7:ff:c9:06:8a:6c:2d:9b:9a:c6:48:
d6:e9:62:e3:4b:e0:b9:06:6f:b3:96:0e:73:6a:04:89:df:e7:
91:84:68:8d:23:c3:b1:7a:52:fc:12:26:51:dd:dd:89:6f:6c:
d1:4c:9d:a5:e7:bb:2c:7b:b5:a6:42:c5:4a:1a:0c:80:04:b3:
0d:fe:cd:b6:97:ba:15:e2:ad:d6:8d:74:57:1d:b2:0e:f7:3e:
28:93:34:28:c5:4a:1e:28:40:75:9f:8e:0d:83:77:30:29:4e:
3e:cc:97:43:44:04:ee:b1:f0:fa:b9:bc:a9:ae:77:d1:bd:1a:
c5:d9:5a:99:e1:ed:ad:27:d3:c9:6d:f1:2e:e6:0b:8c:f1:db:
52:8a:13:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:43:47 2025 by rpki-client