Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
File: qzCSHSjHjt6BhC9xLmz3K95aYIA.mft (raw, json)
Hash identifier: rx6XDYHF00rsaHn7HEXGGzalSX34UYwHgJ69ZiJW7Q0=
Subject key identifier: 44:EC:D5:22:74:FF:D2:43:29:24:2C:C1:9B:81:9E:5A:41:5F:9D:86
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial: 0197499F2CD2B8EF5A57D4496AD58EB10BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
Manifest number: 1042
Signing time: Sat 07 Jun 2025 09:00:57 +0000
Manifest this update: Sat 07 Jun 2025 09:00:57 +0000
Manifest next update: Sun 08 Jun 2025 09:00:57 +0000
Files and hashes: 1: WRJMUYeRixw27CAPxZImqPYkDlU.roa (hash: i28cVSRe5f6zxa7/1YaErFOEzE3A0YFcGcdJGku5uCs=)
2: jGJqFQVdzPNIuq__x_RJveRfPgI.roa (hash: l/kSncaCyGC+QqprUZGRI2OdInXO3OkPgy+W2EUBUIg=)
3: qzCSHSjHjt6BhC9xLmz3K95aYIA.crl (hash: gVQfvsVsksiZ8qFxbZaDr/A4JZh8UZHsdR91w5pmYz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:2c:d2:b8:ef:5a:57:d4:49:6a:d5:8e:b1:0b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Validity
Not Before: Jun 7 09:00:57 2025 GMT
Not After : Jun 8 09:00:57 2025 GMT
Subject: CN=44ecd52274ffd24329242cc19b819e5a415f9d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:75:e1:01:cd:7b:49:0b:fa:94:51:dd:0a:
47:57:69:c2:70:39:d7:ea:8c:c8:ed:82:e3:d8:27:
e2:9e:eb:83:b6:a0:bd:f5:59:7d:fb:48:54:c2:16:
e4:62:6d:46:b1:f7:b5:01:3e:99:27:ea:1a:cd:19:
68:36:83:e8:1b:67:a7:93:56:a9:81:38:8c:dd:a6:
30:fc:d8:a9:69:7b:88:08:9f:53:9d:18:b0:df:3e:
dd:e0:ab:c5:68:1b:b9:42:91:de:ae:a2:ec:82:10:
5f:4f:15:3a:72:31:b0:e1:19:72:2c:05:42:93:d6:
d3:bc:49:de:92:43:0c:5b:ff:10:07:48:9e:c9:72:
14:b3:85:bd:ad:f9:fd:85:1a:73:e4:c3:83:e1:12:
b0:cf:97:ad:d2:c5:2b:39:62:b3:72:67:dc:22:9f:
b0:23:05:3e:9b:f2:3a:bf:aa:21:dc:d3:8a:81:ca:
0e:54:00:cb:b6:ed:ba:24:13:1d:83:90:c7:b5:6b:
55:f5:59:1e:39:e4:90:12:96:13:20:47:0d:87:ad:
da:06:97:43:82:a1:ba:90:5a:e4:b6:de:5c:a5:d2:
90:c6:ac:6b:be:82:7b:58:02:4d:19:15:4d:87:b6:
ed:5e:1d:11:d5:d8:c2:3f:7a:73:ce:75:aa:c9:2f:
5c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EC:D5:22:74:FF:D2:43:29:24:2C:C1:9B:81:9E:5A:41:5F:9D:86
X509v3 Authority Key Identifier:
keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7f:de:00:2b:53:e6:e0:5f:d6:46:bf:c7:b0:5a:e3:c5:a3:
cc:e7:05:53:c8:45:34:bf:42:b0:4e:2a:15:4b:2b:b6:52:d5:
9b:ff:8f:95:4b:ce:21:8f:2f:13:bf:5b:9d:8e:91:e8:e9:de:
d3:fd:55:26:90:de:84:22:94:db:8b:cd:64:a4:0c:48:eb:cf:
f7:24:e2:64:d8:50:99:d5:02:37:81:2b:ed:40:69:4b:2e:55:
db:8a:8d:e7:70:8b:23:87:b8:c9:44:41:a5:ad:29:25:17:3c:
57:12:1c:41:d4:13:f3:35:5e:16:46:ad:3e:71:1c:16:10:34:
fe:ce:24:8a:2c:b9:da:2e:39:37:c2:84:fd:6d:93:e7:49:3b:
e7:ff:a8:87:40:e6:27:cc:3d:4d:73:de:c6:6e:a8:b4:0b:7d:
52:7c:d5:6c:a4:3b:3a:c3:dc:23:8a:2a:e2:10:16:b9:cd:65:
01:26:9c:49:92:52:d0:1b:38:ab:51:79:e6:a1:6e:0e:61:42:
fc:13:68:26:c8:b2:83:54:ac:4f:31:33:ef:b9:fe:fb:44:a8:
3b:58:93:3e:72:f3:cb:1b:44:c2:ba:42:c6:be:2b:f4:32:03:
5c:34:a9:6f:a7:c9:3c:94:95:ee:18:44:72:2f:93:30:50:17:
23:0b:ac:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:57:13 2025 by rpki-client