Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: 1gj0P4wZOcKd7/rEPzj+DOG0F++jEIe4ZcjLRfRPUAA=
Subject key identifier: E1:F7:73:C1:26:AF:26:34:3C:09:CD:9E:D5:9A:CE:3C:6E:06:8F:2A
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 01973874ADA01FE5D25552047D3727EFD9D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 096F
Signing time: Wed 04 Jun 2025 01:01:00 +0000
Manifest this update: Wed 04 Jun 2025 01:01:00 +0000
Manifest next update: Thu 05 Jun 2025 01:01:00 +0000
Files and hashes: 1: Op1gh0wFko9724Ahwm8zyJJnCx8.roa (hash: xGR1u5ClwHU4q3WoVp5eWaY/nYx57WKoSQo4c6w7W+8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: ltp0MOeyzati5WK8DzYl5f6SlcE0MZNXm9bL1mOVx3g=)
3: jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa (hash: Ci3+1/Zt1KX21Iibq86D4q3nL8Q6qZ17OnVkiVZ8OJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:38:74:ad:a0:1f:e5:d2:55:52:04:7d:37:27:ef:d9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Jun 4 01:01:00 2025 GMT
Not After : Jun 5 01:01:00 2025 GMT
Subject: CN=e1f773c126af26343c09cd9ed59ace3c6e068f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:36:da:2e:ca:4f:b1:5d:93:6f:fe:d7:a1:b1:
16:ff:5e:1a:1f:d9:ec:16:a1:02:45:98:b0:d5:9f:
6b:33:52:d3:70:11:0f:4d:ca:53:c8:01:93:5e:d1:
d7:d5:42:cc:e8:96:6e:16:c7:8b:c4:c5:7a:24:5c:
fe:cb:97:5d:7c:e6:23:d8:dc:e0:9d:3d:f6:86:b7:
42:79:cb:9e:27:6c:5e:3c:0d:d0:70:0d:fa:65:14:
71:dc:45:96:1a:3d:76:56:49:e0:40:1e:90:ce:16:
c3:0b:fe:f1:da:b9:fe:14:71:f5:28:f4:9a:b2:b0:
0f:0f:65:f2:d5:b1:26:9e:91:ee:29:2c:55:3c:82:
bd:05:c9:f5:1b:e9:ed:32:46:e8:bd:a7:3c:eb:d7:
29:47:ef:9b:c4:c6:31:8a:ac:48:cf:63:6d:75:44:
fb:c0:a6:40:74:b8:5e:b0:ea:2a:09:f3:76:ba:fa:
c7:24:3f:6a:5f:b4:38:f3:f9:14:79:dc:9b:42:d2:
b5:71:27:dc:09:47:65:8c:e3:4d:a5:71:07:85:5b:
f6:01:91:47:71:2a:20:cc:f4:de:8a:87:0c:8c:75:
13:c2:8c:ea:4d:b2:44:c5:b0:9c:12:e7:9e:9b:d1:
30:a9:a5:3a:85:19:ab:8c:57:2b:6e:f7:9b:b7:78:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F7:73:C1:26:AF:26:34:3C:09:CD:9E:D5:9A:CE:3C:6E:06:8F:2A
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:68:d1:29:f6:96:29:2a:db:5d:52:e8:6c:fb:ec:2d:eb:80:
01:97:e6:05:d2:16:8f:16:d3:d6:44:49:87:19:d5:0a:f4:18:
2a:13:f7:e5:f0:c3:bf:57:1b:6c:dc:e7:83:8e:1b:75:6f:fc:
f2:a4:59:07:fc:cd:d9:ff:1d:83:67:5f:c2:aa:cb:e4:a8:87:
a4:6b:3b:fa:6b:f7:7a:45:b4:01:e1:4a:f0:9b:a4:79:cc:c9:
f3:67:9c:87:d4:b6:b7:3a:f0:2a:db:b9:c0:a6:46:f1:3a:df:
fc:33:29:1c:6c:a3:1b:fc:8d:46:39:1e:76:ac:54:d5:d2:13:
ed:ee:8b:55:c7:6b:f9:50:62:6b:38:a3:66:dd:29:c6:77:d1:
c1:e1:57:72:7d:0c:67:e0:d0:2c:f8:60:02:c5:3e:f7:66:41:
64:5b:23:a5:43:9b:f5:e1:c2:c4:a8:2d:da:a3:34:bb:f8:9c:
05:72:4c:11:7e:15:e9:af:48:de:e6:5f:5c:7f:ae:6b:75:c0:
94:31:ae:94:b9:98:cf:17:17:d2:a6:91:71:f4:3f:13:18:55:
f6:fa:50:91:79:48:c4:15:48:5c:fa:0b:48:87:81:b9:3b:bb:
9b:66:03:7e:06:4b:36:03:f2:fc:f9:03:e2:6e:23:f9:c4:00:
c9:5c:7a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:48:51 2025 by rpki-client