Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: EsHARg7+GFIo34yUv7G5VdlaWXMmWBtIZvRZY1H2XH8=
Subject key identifier: 1D:A5:74:E4:95:A6:1B:E5:93:61:23:E8:EB:31:E1:0D:DC:F7:FF:A7
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 019938DFE83C154DBBB0A87CEAF3D40AAF33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 0F54
Signing time: Thu 11 Sep 2025 13:03:41 +0000
Manifest this update: Thu 11 Sep 2025 13:03:41 +0000
Manifest next update: Fri 12 Sep 2025 13:03:41 +0000
Files and hashes: 1: 2NcvU0UpvnNamvYiw-Ck0PihIIs.roa (hash: tZbbyWjYNX8D1xoSb7TrcdUI4Ec9SAHjICqo4Qu+A30=)
2: 4Vo1LbgSg-781dFksjaURY1r5lM.roa (hash: cGkOqX+2Vt3J4A41hGsuYT10AGm/PDPU84x1eGxgeOc=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: EHDr6t7B2CgpZNA/WP4UAJYtrpZN0cvjhEk+LIeT0yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:df:e8:3c:15:4d:bb:b0:a8:7c:ea:f3:d4:0a:af:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Sep 11 13:03:41 2025 GMT
Not After : Sep 12 13:03:41 2025 GMT
Subject: CN=1da574e495a61be5936123e8eb31e10ddcf7ffa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:03:53:61:db:ce:a7:d9:ab:94:ad:6c:22:
f1:4c:7a:5d:88:eb:3b:7b:3d:db:dd:40:07:b8:38:
3b:d2:06:b4:3c:75:e2:04:13:11:76:01:47:97:93:
f7:d8:48:93:08:d9:93:02:3d:5d:17:20:c3:ec:ac:
35:02:bb:a3:40:60:41:22:20:8c:b1:35:24:d4:39:
a6:57:34:7e:e9:9a:b9:dd:f3:f0:71:c0:11:e4:e3:
bc:55:3c:3b:40:f9:a6:1f:15:95:4b:f7:dc:6c:cd:
62:81:a1:b5:1e:ae:d9:d6:18:f3:38:03:f9:d3:f6:
42:63:d9:f6:65:18:ed:11:7e:99:ad:74:42:6a:17:
d3:a6:2d:da:31:ef:b0:43:74:4e:7f:57:27:4f:12:
b7:d7:a6:f6:62:70:85:c9:05:cf:1c:40:5c:38:df:
b8:67:ad:9e:40:fe:1d:9f:f3:7d:d8:47:d8:d6:d1:
d1:82:c0:f8:c8:6c:eb:df:ae:21:2a:bb:a4:3c:57:
6d:c5:ed:4e:74:9b:23:fc:b5:51:47:56:4f:eb:05:
24:9f:f9:61:b9:11:b7:92:c9:61:90:cc:b0:86:d2:
30:4b:45:18:90:5c:07:6c:20:16:c6:73:e0:96:85:
3f:68:ed:ec:20:19:32:f0:43:39:fc:9f:f9:cf:b6:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A5:74:E4:95:A6:1B:E5:93:61:23:E8:EB:31:E1:0D:DC:F7:FF:A7
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:0b:6a:7b:34:05:c8:d8:ae:02:2b:78:ac:eb:7b:7b:7f:06:
a5:23:61:32:87:81:68:76:d3:79:0f:a8:65:3b:ca:85:47:42:
7b:72:ad:9b:ec:b3:96:38:56:8d:75:70:44:66:b7:10:54:47:
fa:ed:f0:50:17:0b:78:71:a9:75:f8:c8:fd:74:68:37:9c:d9:
f5:1c:01:87:b7:11:fb:6e:89:70:12:19:dc:48:64:46:14:e8:
a7:5b:25:bb:e5:66:00:91:2d:93:7a:2f:c8:f5:16:45:89:0d:
7f:d2:60:30:0e:3d:89:bf:79:42:8c:f9:8c:c1:f2:a4:2f:c4:
26:1a:96:17:36:6e:8c:f7:a7:c7:cb:95:b1:f5:a7:19:19:bb:
a7:77:ad:be:03:b1:d2:b0:06:2a:b3:3e:6b:e5:28:94:d6:78:
68:f3:23:93:74:4d:6a:ca:36:ca:6d:b1:4c:02:1d:b2:4d:66:
02:f4:5a:25:23:93:44:3b:56:89:90:42:a7:e8:dc:28:06:11:
1f:65:94:61:a6:f4:08:97:2c:7b:90:77:e1:06:56:46:e5:48:
9f:15:45:c5:90:a9:ac:d4:a2:73:08:da:7e:c3:6c:d0:96:14:
52:b0:da:03:7d:2f:85:3d:7b:11:7e:f4:75:c5:7d:72:59:ab:
21:c7:b6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 21:49:09 2025 by rpki-client