Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: QcimcEfB2TUtF4/sVZ6FGUuNHCpTIMdVbqBfPjcsO6s=
Subject key identifier: 3F:71:EC:6F:6E:C1:17:25:E4:73:B7:94:B8:EC:D9:E1:09:89:59:DD
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 01974B8D5DB44EB8A7B499E63CBD09143467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 11CD
Signing time: Sat 07 Jun 2025 18:00:45 +0000
Manifest this update: Sat 07 Jun 2025 18:00:45 +0000
Manifest next update: Sun 08 Jun 2025 18:00:45 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: AUa26fdWorDH8gI31Zbp67YjpojW27DcyftXceTDqiQ=)
2: v4w1l1in0yr2EsXsMhwK7smhe5c.roa (hash: 7H5QERbsex398Y/VCrt/sp2Qpj6rfwjWtrt7q4PvQAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:5d:b4:4e:b8:a7:b4:99:e6:3c:bd:09:14:34:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Jun 7 18:00:45 2025 GMT
Not After : Jun 8 18:00:45 2025 GMT
Subject: CN=3f71ec6f6ec11725e473b794b8ecd9e1098959dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:f1:2c:b4:29:63:73:2f:e2:58:58:d1:6f:
24:df:03:5e:98:0b:63:88:64:42:37:86:94:c6:f6:
d6:3e:34:97:e3:3a:b3:b0:42:a9:c0:50:ee:f3:86:
40:d3:23:ea:02:34:2d:b8:69:03:4c:6f:64:9f:8c:
89:51:e8:0c:3c:12:15:2c:3b:d2:99:de:54:70:96:
44:ff:fe:6e:cc:0d:61:be:6e:0e:a0:f0:e6:99:61:
af:7f:d7:f2:ac:a7:6c:75:8d:26:db:88:4e:45:8f:
32:d2:aa:27:84:45:8e:d0:84:c7:0e:f7:a5:d5:02:
10:da:d7:94:43:56:da:52:3a:7f:17:80:6a:d4:70:
7e:89:d7:de:80:4e:eb:2f:36:4c:c2:3e:3c:5e:67:
ae:7b:5d:fd:5d:9e:6f:b4:8f:73:f3:d8:78:66:50:
36:8e:ba:c2:aa:f6:ba:2f:4a:cf:2e:fd:39:ff:22:
6b:79:e1:55:0e:2b:47:55:a7:fb:ea:56:73:1f:6e:
44:59:d9:de:1d:0b:78:89:06:80:30:4b:24:e2:1f:
fe:0d:eb:cc:98:12:10:d3:9b:02:02:70:ae:5e:ca:
dd:0c:21:56:2c:37:70:7b:ef:bb:22:6d:4e:e6:b5:
13:f7:d8:c6:04:b6:84:26:44:0e:82:cd:c3:67:e3:
46:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:71:EC:6F:6E:C1:17:25:E4:73:B7:94:B8:EC:D9:E1:09:89:59:DD
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4a:4a:42:99:05:7b:4a:9a:e9:c9:9d:85:89:8a:22:bb:ea:
30:ac:bc:10:fb:a3:4d:d5:fc:14:f7:a7:f6:d3:dc:73:ca:8b:
de:f5:c4:88:f5:68:bf:76:e0:ea:f2:cb:e9:e9:bd:28:42:79:
3d:89:db:e8:3a:e6:42:b7:f4:8c:d4:64:44:4f:62:d3:81:ab:
7d:bd:c2:71:25:ec:5f:f2:14:68:9a:10:15:0d:92:44:47:16:
f6:50:7a:d1:97:1f:0a:1c:6a:75:11:1c:8a:a3:26:ca:e2:94:
66:38:8d:aa:ba:75:11:8e:fa:a1:47:b3:5a:10:d4:dd:97:c7:
ca:de:21:03:d5:32:f3:77:34:1a:70:1c:98:99:ae:4a:2c:75:
94:cb:51:52:7c:5e:62:4d:8d:d5:75:f3:80:d2:b6:ea:54:83:
73:49:a9:ea:7f:20:94:4a:e1:e1:92:a9:c6:69:b4:43:19:6d:
60:e1:ee:f7:60:1f:6c:4b:0a:4d:2f:1b:68:ed:34:49:70:fa:
c3:6a:99:da:97:6c:da:3c:8c:28:bb:89:1b:7c:4a:14:e6:8e:
1a:f4:ba:17:33:d1:46:45:35:8d:b8:e3:62:73:e2:df:b7:56:
66:8a:cf:94:17:f9:ae:04:19:75:a4:b3:e9:f6:2d:0e:a6:a5:
24:cf:39:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:04:16 2025 by rpki-client