Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
File: QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json)
Hash identifier: NxYZirpzYlgfLtZWSHOJwRme9W7i2BiSa8tvzET/kFs=
Subject key identifier: 6A:8A:0C:29:5E:E8:DE:00:D5:CB:F7:4F:F2:42:17:82:6D:AD:53:24
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Certificate issuer: /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial: 01974742A9585FE76A1FA8D71BB88CDC6FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
Manifest number: 0AD8
Signing time: Fri 06 Jun 2025 22:00:40 +0000
Manifest this update: Fri 06 Jun 2025 22:00:40 +0000
Manifest next update: Sat 07 Jun 2025 22:00:40 +0000
Files and hashes: 1: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: ZhHOrVAQDBlrUYGZ+ZeabxJwrVgzEg1fgg+t0TeExHE=)
2: mDj0VP-jqiKwJjt-lOQdn-slpWo.roa (hash: nmxfsT+G50uuChDyNePbK+N70F1vF7/NLgZyTdzlZ3A=)
3: qi8SjamVLTZcWUyfEiVS4BoqkZE.roa (hash: 6lwU9eJcpe8KWWxmMOizpAa94mxqfcksgtQmJaF4BYg=)
4: xJg857yIwhyEdYeIjcGRADD28jk.roa (hash: 5mboHsfsR9FT8/O1wonNqgc6c/V/+s+AZdj8ipNclaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:a9:58:5f:e7:6a:1f:a8:d7:1b:b8:8c:dc:6f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Validity
Not Before: Jun 6 22:00:40 2025 GMT
Not After : Jun 7 22:00:40 2025 GMT
Subject: CN=6a8a0c295ee8de00d5cbf74ff24217826dad5324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:f5:86:8d:d9:3b:a3:8e:7c:77:ac:b1:8b:
e7:a5:47:d4:66:71:6f:2d:80:f7:97:7c:fc:d3:56:
ac:95:56:67:53:1f:d9:6f:d9:aa:c4:c7:6e:ef:05:
58:fb:04:6b:9c:8b:39:a5:88:34:8f:f2:33:1a:e7:
99:c1:ee:5b:80:62:05:2e:3c:91:b2:06:0e:a2:9f:
4c:af:c9:36:f2:b6:e7:fb:60:fa:db:9a:79:0d:1e:
6e:13:88:3f:8e:6e:40:48:31:0f:72:b2:4b:7c:70:
b6:70:ff:35:cd:51:29:29:7f:20:29:11:81:de:39:
2c:2a:bd:02:54:b8:d3:b7:e5:2e:a2:41:39:d2:c2:
1c:ff:f2:a1:70:0c:e8:4d:bc:ef:c5:28:0e:69:62:
9f:e0:d5:4a:d3:ee:23:3b:d6:f7:55:9e:6f:14:04:
46:e3:b5:b4:8e:fe:7b:f7:35:10:60:c0:64:0b:3e:
de:67:e0:7e:32:3f:14:ff:7a:a9:8a:6e:29:40:5b:
5d:e4:7d:bd:8f:a8:c7:27:df:6d:29:69:c8:9d:dc:
6c:23:0d:0f:80:e8:fa:31:03:9f:92:6d:03:3d:3e:
cf:20:36:0e:db:70:03:f8:28:0f:94:f0:df:2c:62:
7e:82:e6:0e:e0:a1:7e:99:13:b3:c0:22:ba:b1:dd:
51:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8A:0C:29:5E:E8:DE:00:D5:CB:F7:4F:F2:42:17:82:6D:AD:53:24
X509v3 Authority Key Identifier:
keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:82:7a:13:c0:b3:e5:7a:cf:4a:dd:98:09:49:b9:2d:d7:d2:
3c:61:44:84:0e:63:1f:90:d0:ba:b5:f5:84:ee:7a:d4:69:44:
1d:95:1f:e8:91:f2:71:29:2c:f5:6f:2d:dc:1c:ac:3b:95:d7:
93:a0:85:6f:4d:ba:70:45:ac:b9:5b:8b:d9:ed:10:e8:00:8c:
c6:50:af:84:49:ca:1c:cc:f8:2a:22:9a:fc:f9:96:0c:c0:d8:
a4:19:ac:35:0b:ae:b6:66:29:21:fb:07:9b:f5:c1:aa:74:0b:
45:0b:86:ee:a2:8a:e8:28:2d:f5:82:3e:58:13:58:e7:86:71:
55:f7:01:42:45:12:90:b8:29:a6:2d:74:61:15:1c:3a:63:cb:
d1:77:bb:c6:b6:97:91:02:40:ea:10:18:4f:89:f3:50:3f:0a:
4e:fc:c1:29:26:ef:ed:0c:4c:21:0d:27:a5:dc:e4:80:03:ec:
1c:7a:7e:53:1e:d3:06:df:31:72:a7:d7:ce:dd:0a:1a:1e:28:
63:77:c0:40:7f:32:fd:7f:8b:67:27:40:68:e6:10:b9:f5:49:
3d:ab:44:b9:5a:4d:6c:f0:a2:c4:a6:66:89:75:da:a5:e9:f0:
d6:5e:8c:6b:65:78:fd:c7:8c:77:3d:cf:13:ad:a8:43:fe:75:
b5:b5:39:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:11 2025 by rpki-client