Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: fHq3/SD8uwnSJlPUG06rfB+XslfQ7dmbWwRP0aHCg2M=
Subject key identifier: 1C:52:E4:F2:87:5E:A2:43:F8:46:D8:61:7A:69:9D:14:3B:98:36:26
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 019744E6421DC1DE864233BB0275ECA4073A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 11:00:30 +0000
Manifest this update: Fri 06 Jun 2025 11:00:30 +0000
Manifest next update: Sat 07 Jun 2025 11:00:30 +0000
Files and hashes: 1: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: 6NzHR9r401yUN0GMTF6njPP+R8DoEgS+cQMYLnp5zz4=)
2: htodApNLGhLpFMruOMlntyiGeOc.roa (hash: cFfgGJzFfvTMD4F+KAnyyiaMBsfRll7IR2YZJcMoxkc=)
3: wzndaPRsTi0mxWGQ8DwrTSyFIjc.roa (hash: kbPsqoJze+tNEJsbFqXpAiz/ui3VxFgmLT6No+U36XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:e6:42:1d:c1:de:86:42:33:bb:02:75:ec:a4:07:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Jun 6 11:00:30 2025 GMT
Not After : Jun 7 11:00:30 2025 GMT
Subject: CN=1c52e4f2875ea243f846d8617a699d143b983626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:01:b9:69:a0:1f:3b:ef:d1:93:b2:0c:55:
53:e6:9f:f9:03:47:33:ca:9f:1f:fb:9e:b6:63:b3:
c8:46:7a:82:10:b1:db:f1:6b:37:cf:6d:ff:e4:42:
e3:72:63:bc:33:60:71:51:6f:9b:e8:00:e1:8c:87:
99:6b:c2:fe:bb:3b:9b:66:61:3b:bc:bd:9d:72:41:
57:3e:bd:0f:b9:41:10:46:85:39:27:24:d8:3c:05:
be:74:cc:37:a5:80:bf:63:96:cf:94:7b:b1:8d:d6:
6e:d3:dd:99:60:87:ea:23:6b:25:4d:86:01:ce:56:
fc:ec:f9:64:59:76:46:16:64:4c:cf:d1:6a:2a:7f:
0c:63:7a:16:69:0d:cc:4c:48:f8:37:88:ce:76:5c:
33:ef:3d:cc:7e:ee:ed:2f:00:38:7b:67:4b:1c:ef:
6e:c3:7c:fc:31:5c:0b:5d:7a:2e:06:5e:48:b9:6b:
d7:66:94:54:cd:a3:8c:c8:d1:74:ee:83:57:a5:0a:
0e:05:11:08:0e:04:64:8f:79:69:02:9b:57:0f:0a:
07:8e:5d:3e:e1:e4:d5:3d:6c:cd:59:f9:02:40:1d:
2d:94:5c:48:89:82:5c:1f:2e:c9:06:e3:70:46:3f:
ad:ba:bb:7d:eb:de:6c:d8:c0:b6:cd:67:a6:0a:ce:
17:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:52:E4:F2:87:5E:A2:43:F8:46:D8:61:7A:69:9D:14:3B:98:36:26
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:10:3a:0c:ce:43:6d:c6:bd:15:a5:69:5d:c3:ca:b2:23:8c:
80:6e:e9:00:39:d9:d8:a9:e8:74:3c:6d:23:f6:3d:12:6b:ce:
20:e3:f4:5e:f0:fb:cb:19:b3:f3:22:ff:f4:6c:a8:4a:d9:80:
d1:6d:f4:76:12:d7:50:4b:5f:4d:0f:1e:36:72:4d:80:a1:17:
7d:e5:54:7d:a7:34:30:77:1e:89:a2:53:4d:79:25:88:a2:94:
c3:2f:b1:5c:bc:b1:c1:27:af:37:d1:04:28:96:6f:80:60:9b:
78:de:87:e4:0c:c0:51:50:12:24:6a:a6:a5:b9:5e:39:f4:b8:
53:03:cf:d1:f6:b7:67:df:7f:9d:9d:d4:91:88:eb:1b:26:10:
90:76:99:af:c5:54:b7:26:c0:f2:41:bf:0e:7b:d9:84:f2:ad:
ea:65:8c:d9:1a:39:3b:1a:29:0e:dc:dd:53:00:ea:29:3e:63:
93:f8:4b:1d:57:70:e0:9a:f9:61:40:6b:24:51:1a:b3:db:c9:
9a:f5:0c:ad:fb:5a:04:ef:f0:ad:30:2a:49:0f:97:6c:df:a7:
5d:f1:c9:69:ce:82:65:0c:f3:61:e5:60:53:31:42:02:bf:2c:
e5:93:f5:ef:bc:fa:61:b8:be:18:5a:8c:ab:da:d2:8c:81:9b:
c0:87:e5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:47:13 2025 by rpki-client