Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: 7pDVx3Ciyj0x7jVCJvTj+fkqMsZ5zFbvsSSbmSJ1TfM=
Subject key identifier: A9:93:A4:56:F2:E0:37:E1:2D:A6:04:35:A0:0B:CF:06:80:06:57:53
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 01974EC5601477737FEAD18114D546FB9C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 09:00:47 +0000
Manifest this update: Sun 08 Jun 2025 09:00:47 +0000
Manifest next update: Mon 09 Jun 2025 09:00:47 +0000
Files and hashes: 1: 944hLyq4lZEVAFInZE509HNE3dY.roa (hash: u1nybjv+YghCeLuvRCrpHUYvYfZKGq/DNrzwKmuq+cA=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: UQ95GXH+c4KmwPpluCVOJ0RazW0+ndiKXI8lSUobUFs=)
3: sxEbMVXxezgFHIuSSYFInfXpizE.roa (hash: ZwybRY1zu9AemOu7O2YllM3HQ5PSxj94bjs9pLEXpyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:60:14:77:73:7f:ea:d1:81:14:d5:46:fb:9c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Jun 8 09:00:47 2025 GMT
Not After : Jun 9 09:00:47 2025 GMT
Subject: CN=a993a456f2e037e12da60435a00bcf0680065753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c9:ad:e2:61:65:f8:aa:26:bd:6e:58:04:6e:
0e:fa:e0:32:dd:23:70:da:1b:1e:4e:4f:f5:00:7d:
4a:7c:cf:64:85:46:0e:2b:ce:55:d8:b2:92:87:79:
0a:dc:fd:98:36:71:a6:2c:76:84:f1:9a:78:3c:ae:
f3:af:87:28:a7:ce:20:f8:b1:4c:78:d8:b2:e4:bb:
ae:0b:f2:dc:12:23:db:96:c8:dd:c8:7e:3e:b6:4f:
fe:f2:24:57:ad:85:2b:7e:ce:38:68:a0:45:7f:aa:
f1:6c:85:bc:e2:2a:02:f8:95:31:5d:ed:28:04:d4:
e9:2c:c9:29:06:c2:7b:29:e2:fd:50:1e:a2:85:4d:
ef:c0:76:6f:69:9f:85:53:e0:f7:e3:6d:d2:8b:06:
7a:9b:05:67:08:8d:9b:bf:0f:60:97:a5:a3:07:8c:
2f:a6:3e:57:86:00:08:c7:0f:d6:1a:6d:4d:bc:76:
48:c6:30:19:09:bb:bf:ad:de:b9:b1:c6:91:27:27:
a9:c8:43:b2:21:af:d1:a2:13:d0:c5:41:66:6c:01:
b4:6c:7a:82:03:b8:93:95:d3:ed:77:b6:e7:44:6a:
e4:8d:05:fb:bb:63:c6:a0:c6:70:04:3b:d7:9b:24:
75:95:12:74:b6:7f:e7:6f:6f:57:14:d6:d4:8f:48:
26:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:93:A4:56:F2:E0:37:E1:2D:A6:04:35:A0:0B:CF:06:80:06:57:53
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6f:97:b3:c8:f7:3b:30:af:6c:af:52:40:95:da:43:4b:f0:
da:39:a4:55:8a:24:11:86:2c:28:4b:5f:f0:10:b6:a8:a1:c3:
ae:54:03:8b:10:f7:a4:11:28:9b:83:8f:df:8a:3c:0a:a0:07:
4d:30:11:70:7d:f6:a4:d9:6b:ea:5a:d3:20:3f:47:7e:94:53:
3d:98:63:d4:cb:8b:3e:c2:24:6d:45:76:ef:3b:b8:af:d4:df:
bf:9b:b0:6b:db:b4:ad:9d:23:3a:19:09:2d:c4:1e:0e:bf:d9:
69:67:54:a6:92:35:9c:1e:0b:11:25:1e:00:fe:72:33:da:21:
97:e3:93:85:a4:e7:2e:81:c0:33:c7:cd:4b:53:33:e1:fb:3f:
8c:c3:5a:cc:6c:65:e2:9e:21:e0:f2:e3:c3:5d:79:92:6c:eb:
b5:ba:55:a2:77:e5:43:11:4f:8d:45:f9:dd:83:7a:1f:21:e0:
b2:fa:a2:0f:8c:3e:b8:e8:31:85:0e:3c:53:d4:6a:cd:a0:74:
95:e1:d8:41:17:67:5d:ad:3f:09:25:67:63:f0:24:49:fd:46:
16:c9:65:dc:64:4b:71:0d:8a:d3:e7:b8:e0:3c:cd:c4:76:eb:
8a:8c:89:e6:fe:0c:87:87:c4:e0:2d:2d:38:a3:16:96:70:43:
bf:8b:17:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:42:40 2025 by rpki-client