Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: AHoHLWdZMoX3EwUo6ivNj8KDXB6zpOCEUhqIVSJwu64=
Subject key identifier: 14:A1:F2:3C:64:F3:4E:F5:36:1F:EE:AA:FF:25:D5:65:AC:7A:6E:19
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 0197523453FD102D3E45249A69E562081B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 0E58
Signing time: Mon 09 Jun 2025 01:00:50 +0000
Manifest this update: Mon 09 Jun 2025 01:00:50 +0000
Manifest next update: Tue 10 Jun 2025 01:00:50 +0000
Files and hashes: 1: 2NcvU0UpvnNamvYiw-Ck0PihIIs.roa (hash: tZbbyWjYNX8D1xoSb7TrcdUI4Ec9SAHjICqo4Qu+A30=)
2: 4Vo1LbgSg-781dFksjaURY1r5lM.roa (hash: cGkOqX+2Vt3J4A41hGsuYT10AGm/PDPU84x1eGxgeOc=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: Tyn7sL4faTshPsoo5pPRQ2SLsA2Vwi3nto0M5J+oWrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:53:fd:10:2d:3e:45:24:9a:69:e5:62:08:1b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Jun 9 01:00:50 2025 GMT
Not After : Jun 10 01:00:50 2025 GMT
Subject: CN=14a1f23c64f34ef5361feeaaff25d565ac7a6e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:5f:fd:6b:ea:a8:b0:e3:e9:79:00:89:71:
6e:4b:e8:dd:e9:7b:0d:a9:28:65:43:59:7e:e0:2d:
72:83:23:43:ec:d6:b7:35:83:e7:87:dc:52:ed:5c:
58:88:06:1c:d4:a0:8c:c7:32:73:ff:43:b8:b2:22:
5f:36:ce:7f:41:c3:8e:3e:b5:53:f1:1a:53:f4:98:
1b:1d:64:59:e0:b8:f2:95:8a:af:05:89:2a:6b:f4:
3a:5d:21:b8:f7:83:75:86:84:b6:e7:7d:80:02:e7:
24:9b:e4:56:36:f5:e2:f6:f7:fa:c6:2d:c7:31:2d:
b0:3d:df:d4:1c:f3:dd:1a:7b:35:bd:61:3f:ef:3c:
89:9d:05:0f:df:20:54:b2:c3:11:62:a1:eb:6b:d0:
43:4f:5b:a2:07:38:78:0e:91:a1:17:16:75:9d:7e:
8c:c9:ec:12:62:58:cf:77:ca:03:33:c3:b5:31:fa:
94:a7:50:e6:09:76:be:40:a7:2f:ae:fb:ba:3b:87:
7f:c0:9c:68:cb:53:63:e9:57:05:ba:90:36:ac:7b:
e0:4d:e7:95:08:6e:91:06:72:c7:eb:71:5f:53:ff:
1c:02:07:df:7a:b4:9c:9c:98:92:ea:8a:03:bd:a0:
75:31:7a:f7:2a:79:bb:7c:2c:d2:88:8f:9f:4c:ed:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A1:F2:3C:64:F3:4E:F5:36:1F:EE:AA:FF:25:D5:65:AC:7A:6E:19
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2e:43:2e:d2:bd:bc:ee:e4:14:a6:a8:db:29:c2:84:c7:fe:
63:16:66:c5:b6:9b:52:10:c9:bd:65:db:5d:7a:60:6e:6c:5b:
61:c0:d8:2a:0a:84:71:0d:96:cf:15:5f:01:75:1f:7c:6e:64:
d6:0f:81:b0:fc:cd:62:c0:1e:8d:c2:f2:98:83:11:46:fc:49:
69:45:cc:4b:92:36:a6:8f:cd:9d:04:f6:44:f7:46:4b:74:b6:
a9:a2:9f:8a:82:34:38:ed:a6:c0:3b:dc:09:a1:a5:09:d5:36:
73:0d:f3:ae:41:6f:2d:a5:49:37:ca:54:a6:71:55:68:70:4e:
f0:17:2c:18:b5:79:91:42:8a:46:45:11:ca:fb:a2:a4:22:76:
2b:27:35:5b:7a:8f:5e:33:83:9b:3d:eb:fa:40:62:2b:49:2f:
94:56:e8:60:f9:ac:1b:e5:1e:eb:06:e2:b7:c8:1f:b5:bc:d8:
f9:ba:dc:4d:d3:65:bd:0d:f6:35:5a:99:a1:f1:e8:71:10:c8:
42:84:e6:df:85:b1:47:37:17:55:05:30:91:90:74:18:a0:0d:
9d:37:52:0b:a7:49:f1:54:13:e6:6f:57:f4:7a:be:62:d6:17:
82:d4:47:ed:b9:db:ea:e5:9a:3e:80:c1:76:1b:36:d1:22:55:
3f:67:a6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:55:05 2025 by rpki-client