Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
File: QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft (raw, json)
Hash identifier: TwhJn++qi77kUNA+BP9mUBPML8TCg93aQSl5xvi4uG0=
Subject key identifier: 2A:7B:9E:50:9D:88:79:12:AA:99:28:63:8C:8A:08:EC:43:89:4B:F9
Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
Certificate issuer: /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Certificate serial: 0197537DFF75AF97A864DB1B639FC330FD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
Manifest number: 97
Signing time: Mon 09 Jun 2025 07:00:55 +0000
Manifest this update: Mon 09 Jun 2025 07:00:55 +0000
Manifest next update: Tue 10 Jun 2025 07:00:55 +0000
Files and hashes: 1: QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl (hash: +I7Ro3kCeaB+0scFZXaVbUbBolv/c+3ymWsoJ7nsdNU=)
2: WibstNWW6k-lvYl4Qh5sNtmSYhw.roa (hash: E/2K/0j7Ly/9Z6jM3FsBVp9MBphb1aZ9lSBmqs0GOgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:ff:75:af:97:a8:64:db:1b:63:9f:c3:30:fd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Validity
Not Before: Jun 9 07:00:55 2025 GMT
Not After : Jun 10 07:00:55 2025 GMT
Subject: CN=2a7b9e509d887912aa9928638c8a08ec43894bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:8c:9c:13:f5:38:09:ab:a0:8c:67:b8:dd:
8d:8f:7b:92:65:3e:e6:ea:d9:d5:bc:2b:f2:cb:fb:
9d:f7:58:b4:c1:ed:79:df:3d:3d:7f:30:51:3a:64:
39:b9:aa:06:0e:9d:df:5b:4e:52:7b:ce:b0:aa:30:
d3:bf:4f:5f:c6:09:f8:fd:41:6f:4f:ea:11:ca:88:
2b:7c:98:a2:87:c2:22:2e:cc:27:26:ad:ab:cb:3b:
2a:1b:d6:cd:af:f2:b7:33:44:d8:51:27:b2:d1:8f:
67:92:76:65:91:50:51:a5:c6:39:ab:e2:69:f3:27:
53:17:93:a7:c3:fb:d6:88:0c:42:94:fb:9b:6f:ba:
78:89:2d:d2:a4:44:be:54:d3:6e:26:0b:c6:a1:2e:
48:21:b4:cd:b9:ab:37:5d:ad:bb:03:84:0b:83:45:
62:a9:cd:80:05:5a:28:7d:f5:93:ac:13:53:40:88:
ac:ee:a2:1b:fd:49:dd:f6:44:ec:32:7e:11:22:2c:
ee:a4:17:c6:c1:91:27:a1:48:20:13:2e:b4:a3:75:
19:6c:41:db:61:ab:76:eb:53:4f:68:93:8e:40:3c:
18:34:9b:08:bf:48:b3:8c:df:ef:18:75:6d:23:f0:
b7:a0:f3:cd:37:d3:0b:a5:8f:ab:83:a0:3c:b3:da:
a4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7B:9E:50:9D:88:79:12:AA:99:28:63:8C:8A:08:EC:43:89:4B:F9
X509v3 Authority Key Identifier:
keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e4:c8:8d:53:df:be:06:07:0e:80:59:71:52:fa:32:29:11:
de:6d:21:5e:24:dc:0d:71:1e:81:1b:59:c2:12:a5:bf:5a:bd:
84:20:ba:c8:11:3c:4e:db:cd:ee:f9:ff:e3:10:7c:43:d4:21:
0b:4d:f2:3a:73:08:65:68:28:c4:9e:01:6b:97:cd:df:c0:ab:
f2:28:14:07:2b:70:9f:72:bf:f7:9a:57:e1:50:28:e7:f6:69:
77:e7:2b:d8:a4:ce:bc:e0:79:91:11:b5:a1:62:0e:e6:9f:d8:
e2:f2:40:bc:e1:86:65:76:aa:38:c2:b2:84:2d:ef:53:56:38:
1a:1c:1e:42:81:4e:4f:5d:11:8a:ee:83:29:15:e2:81:fc:07:
bd:3a:1d:0a:ae:71:08:b9:ba:e1:67:b7:2e:06:41:e6:24:5d:
2c:17:8a:c1:13:47:a6:c6:6f:e2:48:ec:19:a6:70:b5:6a:ed:
71:0d:cd:99:b3:6b:04:41:e0:74:e9:aa:3a:fb:8c:fa:de:a4:
be:61:80:9d:23:9d:29:4a:c6:80:d6:e7:9e:a8:a8:da:e8:81:
3b:a9:5a:66:44:f9:d8:24:8a:1e:b1:fc:8f:19:09:6d:5c:c7:
ed:f9:16:03:93:51:18:31:06:35:ac:29:41:d1:e9:6e:b6:c7:
9c:56:d4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:29:47 2025 by rpki-client