Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
File: QVHWtEHT9XdiwDL4-tIXYIoi96E.mft (raw, json)
Hash identifier: f6zBFzSVSqV9AcUE4GeWuTDZRNl+sZ0Ot5WEwksHLNI=
Subject key identifier: 6C:C2:2D:89:B9:EC:F0:0F:57:E5:0B:F4:66:07:0F:0F:FD:36:43:2F
Authority key identifier: 41:51:D6:B4:41:D3:F5:77:62:C0:32:F8:FA:D2:17:60:8A:22:F7:A1
Certificate issuer: /CN=4151d6b441d3f57762c032f8fad217608a22f7a1
Certificate serial: 01974FA0F5C53F17029910BCCC99E3398E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 13:00:38 +0000
Manifest this update: Sun 08 Jun 2025 13:00:38 +0000
Manifest next update: Mon 09 Jun 2025 13:00:38 +0000
Files and hashes: 1: Im-QceSwk2rydy4UnBzai_RFayI.roa (hash: 7cmPd6tOwgpnXHTZZ7ExgoosfdS4LnMMgIaEbvg4EPQ=)
2: QVHWtEHT9XdiwDL4-tIXYIoi96E.crl (hash: nzgh0b0GqIVZEe4ikY+M8a0WEXWwIPYdutaXVk3x5NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:f5:c5:3f:17:02:99:10:bc:cc:99:e3:39:8e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4151d6b441d3f57762c032f8fad217608a22f7a1
Validity
Not Before: Jun 8 13:00:38 2025 GMT
Not After : Jun 9 13:00:38 2025 GMT
Subject: CN=6cc22d89b9ecf00f57e50bf466070f0ffd36432f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:33:6f:36:c4:2a:75:34:d5:87:f5:c6:8d:
68:9c:24:07:7f:a7:0c:85:9e:48:b2:f0:95:20:45:
a5:86:73:aa:b8:a9:ec:e8:42:b7:d9:fd:31:b8:e4:
b2:e1:a3:c0:25:dc:6a:54:6e:59:ec:84:3d:97:f9:
1c:b3:43:2f:0d:9c:50:b2:30:41:c0:c3:fb:b3:9d:
0b:9d:33:77:26:15:4a:53:96:31:d3:39:9c:51:92:
d8:b1:d8:a6:bc:25:5a:83:3a:55:51:74:2e:77:01:
cd:cd:b8:b8:2c:6d:5d:ed:fa:33:3d:5b:b5:7b:6e:
70:f5:d2:3a:c0:21:30:7f:e0:97:8a:db:ce:47:2e:
c9:49:01:57:f1:0b:c6:2d:1a:e4:5f:32:01:c7:3a:
5d:e8:51:b5:b6:a9:c9:59:95:6a:f0:7a:22:e4:c5:
b8:c9:49:b8:ee:ff:c9:bf:70:9b:20:4e:60:74:9c:
89:d6:da:61:60:e2:ff:d8:06:e7:24:2f:2b:c6:16:
68:2a:f7:e1:2f:1f:4e:ea:90:23:90:e9:29:c8:77:
ed:54:c7:43:ea:94:f0:fd:16:2a:83:05:44:c6:4e:
fe:3d:17:8b:4e:77:1f:bb:6c:be:22:33:01:e6:26:
27:42:e2:6e:eb:ce:0d:9f:65:36:ea:e4:09:53:76:
9b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C2:2D:89:B9:EC:F0:0F:57:E5:0B:F4:66:07:0F:0F:FD:36:43:2F
X509v3 Authority Key Identifier:
keyid:41:51:D6:B4:41:D3:F5:77:62:C0:32:F8:FA:D2:17:60:8A:22:F7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:bc:ea:a3:00:73:b7:5b:5d:b8:a0:b1:af:8f:dd:6a:89:29:
6f:bb:d3:ab:3e:fd:22:12:b5:5f:de:8d:7b:de:b8:a5:c4:e1:
51:89:65:b0:97:90:a3:73:35:a2:0d:d4:65:89:cf:c2:5d:8b:
9b:f6:c1:0b:74:07:70:af:25:3f:a9:97:bf:d6:30:1a:46:31:
43:ce:e1:26:ff:44:d3:79:4e:cc:fc:0c:52:d8:9d:6f:78:0a:
d0:24:a2:b6:8f:b8:ac:73:7a:56:71:b6:0d:a3:b4:45:34:d0:
90:13:5b:b5:cf:73:14:1b:0e:94:f5:f5:0a:42:ab:a8:03:04:
68:78:9b:cf:c8:5c:27:77:74:87:9e:aa:52:b3:37:ba:00:86:
bc:01:cf:0f:af:ea:5e:d7:0f:5d:c4:b8:4c:05:93:09:8d:45:
0a:64:ee:61:e7:0e:8c:1a:7a:9b:3c:28:43:d8:d6:47:0d:a2:
9e:98:f6:d8:8b:51:cd:5f:6b:a9:95:7b:5d:e8:b3:80:5c:99:
58:03:ee:b1:6b:d3:88:9e:fd:75:fb:c4:db:36:a9:42:43:df:
28:9e:3b:05:20:6f:97:9b:5d:ef:d4:89:9d:56:49:6d:bd:ec:
8a:c5:d6:b0:d9:31:46:59:3d:9f:77:60:a4:b7:97:6b:a7:79:
81:ab:80:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:23:11 2025 by rpki-client