Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
File: QftrFwgzUAawpqrGUL-v8_yNKSw.mft (raw, json)
Hash identifier: S1EWSlSSpQODs6H8cYuC3rVhlxRmZE7QotL/aW5NVLs=
Subject key identifier: EE:CE:D8:D0:45:FC:29:2C:2A:5D:73:CF:71:0E:CC:0E:F7:07:16:6A
Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
Certificate issuer: /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Certificate serial: 01974B8D549575BBF8F44EF020269EAB808F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 18:00:42 +0000
Manifest this update: Sat 07 Jun 2025 18:00:42 +0000
Manifest next update: Sun 08 Jun 2025 18:00:42 +0000
Files and hashes: 1: FmQTGAptfwQVIkuMpg8hJc2vZxA.roa (hash: e7opOpYhedUnony/T0f78z282oNfXK2DZuJyjlY4Q0s=)
2: N5QNqPYfQDsZsb3UbswlkLMUOVI.roa (hash: K+50oxv12Lx2bczUpm74apszZeVkTFLJaHzFVSZLhe4=)
3: QftrFwgzUAawpqrGUL-v8_yNKSw.crl (hash: FfwDxX6Gv7NVEC+Zh8xPl6FMsIa6stcHBDTZ4w+wB4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:54:95:75:bb:f8:f4:4e:f0:20:26:9e:ab:80:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Validity
Not Before: Jun 7 18:00:42 2025 GMT
Not After : Jun 8 18:00:42 2025 GMT
Subject: CN=eeced8d045fc292c2a5d73cf710ecc0ef707166a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3c:b3:95:51:ba:22:be:b1:9e:fd:b4:93:6f:
fe:6a:11:9c:ac:ae:1f:58:27:3b:dd:c4:40:51:90:
6c:da:ce:f5:53:84:e1:7c:08:1d:1a:d7:3b:c7:40:
41:bb:e7:ab:0c:04:78:2e:22:6d:1c:60:b8:db:4a:
79:04:0f:36:0d:29:b7:de:bd:4f:1b:6f:b5:cc:83:
29:e4:b6:aa:64:d1:31:75:7f:ae:f5:0e:cf:99:f3:
b9:f6:90:5e:4d:90:82:f6:0b:c5:f6:ee:50:51:23:
6f:df:af:2f:12:0e:32:0f:b9:b9:fa:8b:23:17:95:
8f:8f:c9:d6:e7:39:28:fa:2e:c1:16:b5:12:57:e1:
2a:ba:d8:41:0b:71:6a:19:bb:5e:dc:b0:56:92:88:
eb:03:67:1f:a7:7b:0f:54:6c:1c:29:6a:9c:35:78:
9f:5a:3f:f1:74:f3:5f:8d:b2:a9:a3:e3:1a:78:63:
10:cd:2b:43:32:d7:9b:60:75:9e:7d:42:fc:4c:4e:
46:2b:0d:2d:e3:79:6d:c5:c5:a2:72:e9:50:9b:d3:
15:96:ba:a8:a9:16:69:4a:08:14:fb:d9:75:4d:60:
ea:78:c6:10:25:88:4a:ef:6a:46:6f:06:24:09:1f:
19:2e:45:0c:ee:4c:ab:6a:d3:e1:82:a9:cb:1f:20:
5b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CE:D8:D0:45:FC:29:2C:2A:5D:73:CF:71:0E:CC:0E:F7:07:16:6A
X509v3 Authority Key Identifier:
keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f7:a6:f4:f5:ad:5f:b7:83:da:5f:6e:2e:f3:30:57:ad:d4:
b2:4b:c2:e8:ba:33:14:3b:5a:b0:c1:3f:44:c0:ad:b2:ed:e0:
24:a7:a7:6e:ef:69:c0:9d:91:f7:3c:45:0b:c0:15:32:05:a0:
ff:1a:12:ac:c0:58:6d:c2:5f:83:a0:00:50:e8:14:50:2f:8b:
1c:d6:c1:ec:76:37:75:7b:b4:60:78:ae:23:5a:d2:e6:95:35:
0b:48:b3:b1:3e:e6:a0:9a:99:0d:b4:c2:7c:24:56:54:bf:cc:
dc:d0:47:59:d7:10:dc:4f:8c:2d:89:98:ab:39:f4:f1:25:55:
d1:85:d2:ed:7d:c9:45:6f:c3:6f:80:d3:78:97:da:51:9d:22:
39:19:a7:25:91:dc:94:02:1a:9d:96:23:c8:54:39:e6:27:6c:
e8:2f:c9:b7:26:87:f5:cd:2e:f3:c4:60:81:f0:0f:cd:fb:4a:
c3:bc:cf:f9:0f:35:42:27:f9:ed:af:9b:61:74:b4:c3:94:0f:
2f:17:f4:18:f3:5c:db:67:27:ab:87:e3:03:9f:a7:60:2d:8f:
ca:16:8b:14:73:b7:88:6c:b6:80:8d:2e:49:eb:e6:94:3f:a8:
bd:3a:e8:c8:a0:8f:fb:a7:ae:03:e7:f1:31:f4:07:e4:0a:d6:
51:03:e2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:34:03 2025 by rpki-client