Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
File: QZHlgmJw9J6umZ1InoXezMhHc4s.mft (raw, json)
Hash identifier: 26DS4Px8Ldva9Noa4bNBRsqwPiqjH5SioQGDdc3YbRw=
Subject key identifier: 23:1F:63:5B:0E:93:94:E2:C9:9C:0C:E9:A8:B6:42:5C:A1:6A:4A:F8
Authority key identifier: 41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
Certificate issuer: /CN=4191e5826270f49eae999d489e85deccc847738b
Certificate serial: 01975CB7AF26A596491F5232AD87B9409F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
Manifest number: 10A2
Signing time: Wed 11 Jun 2025 02:00:31 +0000
Manifest this update: Wed 11 Jun 2025 02:00:31 +0000
Manifest next update: Thu 12 Jun 2025 02:00:31 +0000
Files and hashes: 1: 5a04uRMLuLPqwpXzKrFBWV5ma_s.roa (hash: pqBMscBUXLlLFYQmwhp2Q/lEjdKvHVjvXqUWPX0LeGM=)
2: QZHlgmJw9J6umZ1InoXezMhHc4s.crl (hash: 6FbCpAL4UjTWe+i6jK0Q+hZCrJRQHrRyjRtz6bZgFvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b7:af:26:a5:96:49:1f:52:32:ad:87:b9:40:9f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4191e5826270f49eae999d489e85deccc847738b
Validity
Not Before: Jun 11 02:00:31 2025 GMT
Not After : Jun 12 02:00:31 2025 GMT
Subject: CN=231f635b0e9394e2c99c0ce9a8b6425ca16a4af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:44:4a:42:8c:d6:6d:b8:68:ec:96:2e:d5:
ae:29:c8:93:d7:6d:15:ee:03:c8:bb:7e:2d:8d:76:
b0:ba:a8:a0:60:2f:96:73:7a:a5:ec:75:48:43:47:
d6:c9:3b:89:93:8f:24:e1:23:dc:13:4f:c5:e8:d1:
db:f5:24:ca:c1:5c:98:82:3d:23:08:77:92:c3:b2:
2c:fc:14:e8:f3:d7:8a:4a:19:96:ae:e7:00:ef:ca:
1d:8a:e3:3c:c6:3d:b5:65:1e:3e:e5:ec:6b:a6:92:
81:a8:82:e1:c6:60:01:f1:7f:dc:c5:39:f3:dc:ef:
93:42:af:f2:77:e8:8f:ca:56:05:f4:42:cc:21:08:
5d:bc:63:20:23:06:36:83:c0:63:76:b1:ea:0d:81:
da:49:50:96:e2:93:28:31:82:a5:f0:ac:c2:f0:bb:
7c:a8:c8:6b:be:a5:66:90:e7:dd:27:63:26:36:93:
5b:db:f5:e5:1f:79:98:f3:3e:47:99:2c:c7:2c:0c:
9c:2f:53:7a:a5:1b:66:e8:55:a6:67:20:a5:0b:42:
4b:92:8d:92:00:25:dc:bd:33:49:9f:4e:05:65:ba:
24:17:d6:02:6d:59:71:9e:07:4e:1d:ad:ff:42:1a:
87:2b:61:96:68:55:a5:96:94:6b:82:87:07:cb:7a:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1F:63:5B:0E:93:94:E2:C9:9C:0C:E9:A8:B6:42:5C:A1:6A:4A:F8
X509v3 Authority Key Identifier:
keyid:41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:85:cf:7a:cc:ba:5d:63:87:dd:7a:a1:59:a5:ce:00:62:f8:
8a:77:92:22:6f:9a:d0:b0:7c:96:0e:14:1e:be:f7:40:27:09:
32:08:6b:48:a0:11:53:58:52:14:7c:e9:6c:c3:d4:31:f8:5b:
95:24:df:f2:4f:ce:62:8e:a2:12:18:17:62:14:23:18:4d:41:
c0:25:a8:7a:a4:c2:75:dd:f7:5c:d9:8c:14:92:96:92:7d:17:
b0:67:4d:14:9e:f4:69:e2:94:32:7a:67:0f:06:63:27:f2:b9:
9b:a0:e4:93:5f:29:db:fc:a6:80:40:ba:ab:66:f6:4c:fe:8f:
fe:8e:90:cd:21:75:01:2c:4c:cd:25:4c:d6:24:9e:83:fb:03:
88:56:75:9b:03:45:2c:12:47:6e:e8:56:5a:0e:22:1e:af:ef:
c4:99:49:55:3e:67:6d:20:26:62:8c:37:b1:d3:82:9f:97:3d:
35:c7:a9:d1:2b:99:dc:a7:8f:ed:b8:24:b4:b5:2f:86:c8:cd:
31:70:7f:35:61:66:de:2f:83:62:18:77:c2:2f:cf:ed:36:b2:
02:d9:fd:9c:d0:3d:61:dc:18:9c:c4:c9:f7:e7:c1:0e:a5:e8:
91:58:a0:34:bf:58:c2:e6:16:af:ff:a9:7a:8a:8f:6e:9a:65:
65:80:3b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:50:33 2025 by rpki-client