Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File: QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier: u+8t/BZxx/ydyha5ArldwJVZyggl9BoC21M0VLvR5vY=
Subject key identifier: C3:A2:75:2E:04:A5:01:33:68:0C:4A:8A:03:C0:61:C3:BA:95:BC:F7
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer: /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial: 019763966C7D124A31F3AC75E8CFD5E80E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number: 0997
Signing time: Thu 12 Jun 2025 10:01:31 +0000
Manifest this update: Thu 12 Jun 2025 10:01:31 +0000
Manifest next update: Fri 13 Jun 2025 10:01:31 +0000
Files and hashes: 1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: WJhIddRwCXAiYRmGvDRSe4a9TXsyDlMlaXGPVpf7DwU=)
2: e4JEVh_6cDhCUoHK96y7TvtTEf0.roa (hash: xuBEIWySS4QJ6iOhH7VSUCCJB986bi0LqcmYz8ug3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:96:6c:7d:12:4a:31:f3:ac:75:e8:cf:d5:e8:0e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Validity
Not Before: Jun 12 10:01:31 2025 GMT
Not After : Jun 13 10:01:31 2025 GMT
Subject: CN=c3a2752e04a50133680c4a8a03c061c3ba95bcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:17:9f:58:53:ba:0a:de:ff:90:79:e0:e4:
02:67:8f:ba:d7:bd:f8:6f:b0:f4:9d:38:f6:2e:84:
14:7d:03:3e:63:24:de:f6:fd:83:c9:ee:ef:4d:93:
90:0c:66:6c:ec:97:7c:2e:87:90:3c:c2:64:2d:6f:
19:06:14:65:89:fe:84:ed:d0:b6:bd:98:a2:ca:76:
45:39:54:06:aa:a9:43:cf:0d:5e:a9:3d:ad:76:93:
92:d0:1e:77:ab:1c:66:61:9b:84:78:c7:44:4c:23:
db:67:ae:de:c6:0a:20:fb:fa:8e:ad:49:e9:03:e3:
21:55:54:3b:7c:c5:71:f3:2d:ea:76:1e:84:e1:68:
60:10:01:57:be:b5:88:d8:47:8c:8b:ce:c9:72:68:
b8:60:2f:3c:66:89:ea:5d:da:cd:43:4c:bb:6f:7e:
fc:10:c4:00:14:ac:89:a5:96:ba:60:b6:bc:8d:1d:
b0:a5:f0:31:d0:36:57:cb:d2:24:85:20:98:c7:c5:
4a:4b:a8:d4:93:7d:20:a6:a7:89:82:ef:85:ae:de:
30:d5:68:e6:15:3c:d5:00:3a:45:80:92:c5:63:72:
4f:d7:db:fc:c5:4b:93:5b:70:11:62:08:4e:ad:5a:
ec:c4:a0:0a:e5:18:54:1e:ec:5e:1e:2c:ae:99:47:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A2:75:2E:04:A5:01:33:68:0C:4A:8A:03:C0:61:C3:BA:95:BC:F7
X509v3 Authority Key Identifier:
keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c2:fd:81:05:11:01:0d:93:f7:5d:ce:6a:9f:4d:61:64:fc:
77:c1:f5:76:ec:bf:6f:50:9b:bf:b2:50:91:19:0f:d1:13:56:
b7:8e:04:c4:55:db:3d:6b:aa:82:cd:b0:6e:7e:61:49:49:97:
2f:5a:1e:e2:45:bd:61:e4:f7:b7:99:ce:cf:20:0e:a0:45:cf:
76:ca:80:94:2a:63:c9:a4:50:a9:00:2e:ee:bd:14:dc:b0:46:
2f:5f:82:52:50:5a:ee:84:5a:e5:2f:7d:44:2c:e0:e9:e5:a8:
95:06:c7:47:09:66:08:44:c3:08:a3:57:13:19:7d:fb:e8:aa:
88:25:f1:77:15:24:b1:9c:9f:94:b4:1e:42:04:b7:92:ab:09:
43:3a:22:86:19:45:be:95:f8:29:c4:1b:37:f8:3d:ca:52:ea:
53:e0:96:6a:1d:48:d6:84:ee:dd:5f:99:5e:d6:a6:b3:12:e1:
02:65:af:56:33:86:77:60:67:fe:32:3e:5c:1d:b4:3c:a9:de:
91:47:7d:3d:a1:a8:43:47:85:64:87:8a:fe:cb:bc:67:6f:fc:
7c:67:36:c0:24:19:9e:aa:97:a6:75:04:13:a4:51:c5:81:5b:
98:a9:eb:79:b9:97:28:e8:86:c8:9c:ea:21:d6:7f:d1:34:8e:
7b:10:5c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:44:31 2025 by rpki-client