Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
File: QNVbeINqk_tvnsn6enntm4vqK6E.mft (raw, json)
Hash identifier: T2ZMNjn4YAzPU2D0eUAtlXlPXt24HzuAQO8fwbx61hE=
Subject key identifier: 3A:F2:1F:F9:9C:49:29:F9:7A:D8:FB:C9:F2:76:ED:FA:2E:59:98:94
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 019759493CC6BF34E8EBE5D0989421E58D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
Manifest number: 158E
Signing time: Tue 10 Jun 2025 10:01:01 +0000
Manifest this update: Tue 10 Jun 2025 10:01:01 +0000
Manifest next update: Wed 11 Jun 2025 10:01:01 +0000
Files and hashes: 1: FM1ZToDPfltq70sgYZxUZRvW9lw.roa (hash: gobn7d36Th+HhvhLfnOuWn7jGYlz7+noOsxaYpWSY6w=)
2: QNVbeINqk_tvnsn6enntm4vqK6E.crl (hash: 7LMN7Ysn3i8X7/qm9mvdXy26tKaQFefn9ErpfYhBXHI=)
3: QOyV471MiAdrv1gx1_mQKqZThmQ.roa (hash: AoS7cULghj9S2ceuce/DAbxzcNkBLN2/6i/FkUDAidw=)
4: Ufx_uGX33YMRJk96-Ns3OVYoYkY.roa (hash: R6OFTPlC+5+pTqseUyT+JKWuhsqJ8TflqBO+jG6Oft8=)
5: aouWF1EL5PqaDekCOWFKRFFElco.roa (hash: meYwuUzRknXw4amv6l3WdhCHcJ6/5boQjSOQLig1VyA=)
6: t0LizRcpCedVGV7G-fII8jBvx0A.roa (hash: ZN5BTBda6bGmBj8NTopRMZUMlk+FQ8YAMSGu4VazGr8=)
7: tRjkLyLC--HaV6NcWuFGLxVHLUQ.roa (hash: W6/eiMbwnnO5tx0lNIccNziZp4esvsx84586cppqO84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:49:3c:c6:bf:34:e8:eb:e5:d0:98:94:21:e5:8d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Jun 10 10:01:01 2025 GMT
Not After : Jun 11 10:01:01 2025 GMT
Subject: CN=3af21ff99c4929f97ad8fbc9f276edfa2e599894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:97:f6:ce:f3:7a:23:81:d4:c3:9b:04:a4:
15:d8:ff:4e:4b:95:53:33:95:e9:00:94:e3:d0:af:
f9:3d:fa:8e:fe:56:18:6d:9e:b9:c1:b7:3e:ff:b4:
dc:3f:ca:d9:be:5a:99:16:8c:5e:a4:06:63:d6:00:
84:f2:e4:51:0c:27:b8:54:68:c0:bd:53:68:6c:ff:
70:1d:32:71:23:a3:2f:9b:f1:90:3e:8a:09:46:66:
de:cb:e2:8e:e5:4f:24:a5:b3:ae:64:f1:b3:0f:b1:
8e:dc:f4:a1:27:81:5b:4b:27:6d:7d:3d:b0:82:86:
04:69:c5:7d:0a:46:5d:e4:d2:15:1f:51:5d:71:1b:
70:30:2c:0c:1f:e8:b3:4c:44:db:1c:be:df:70:a9:
1b:1d:82:f9:e3:05:64:d3:74:89:51:98:24:a7:a4:
07:98:9d:a9:ba:2a:3d:8e:15:f8:6f:0e:32:fc:ab:
4c:2e:99:8e:84:51:4f:54:d6:41:52:d4:21:f3:ed:
5c:3c:eb:f9:33:31:25:d0:9d:70:00:ac:89:46:95:
a9:af:e8:3b:ea:e8:57:e8:79:f9:dc:fe:82:fd:5b:
a1:f5:84:bf:18:e7:ad:82:1c:ba:3c:40:b3:aa:ed:
28:47:56:38:94:60:cf:49:3a:22:3c:cb:e6:d7:10:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F2:1F:F9:9C:49:29:F9:7A:D8:FB:C9:F2:76:ED:FA:2E:59:98:94
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:30:a7:24:af:36:52:38:04:6f:e1:4d:8f:99:ec:9c:20:ea:
03:c2:51:d8:c8:36:20:47:68:e5:7c:21:ba:64:e7:bb:25:ac:
96:62:e6:c6:f6:a9:e2:42:c3:89:45:5e:51:94:49:2d:fe:de:
6b:1d:29:6c:34:a3:31:4d:e0:93:7e:8c:6b:da:65:ac:15:72:
4f:5d:7a:2c:74:1c:d1:b4:82:bd:d7:37:22:b6:d8:e5:91:47:
7a:f4:f5:40:2c:06:23:c7:43:c3:48:99:9f:ad:88:94:6e:bb:
f0:5f:60:07:84:91:a1:29:0b:57:09:84:18:29:1e:4e:c8:84:
5c:fa:cd:5e:4e:17:d5:17:46:7e:0f:15:e8:bb:aa:e6:ef:fc:
28:82:d3:24:2a:0b:19:b5:fc:b9:ee:77:f3:af:09:53:4d:22:
06:a5:41:9a:a8:a0:ef:93:2c:5b:65:de:7e:ed:07:05:61:0a:
cc:2a:f5:f3:50:c5:c1:3b:31:a7:11:af:e7:a6:ac:92:13:97:
ce:00:67:e0:cc:65:a1:f4:7d:cc:5e:5d:16:68:57:87:44:61:
3e:35:b8:7b:8a:73:5f:19:2b:5c:2c:a6:5c:32:10:71:be:9e:
f3:a7:1d:42:5e:d9:b7:61:43:0b:62:5f:4b:40:08:bd:73:18:
de:20:5d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:59:37 2025 by rpki-client