Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
File: QqYv_JnylBAtzOI13Bo8E9q81po.mft (raw, json)
Hash identifier: yt+l3sNCNNshQqDG0tMcGmDOR/DTSsUrFfktcdwbY8c=
Subject key identifier: 7F:01:7E:C4:F3:40:58:D7:33:F3:BD:15:6C:D7:FB:74:6B:77:2E:21
Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
Certificate issuer: /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Certificate serial: 01974D7BF921173FE991C6A6446EDF8B5D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 03:00:59 +0000
Manifest this update: Sun 08 Jun 2025 03:00:59 +0000
Manifest next update: Mon 09 Jun 2025 03:00:59 +0000
Files and hashes: 1: QqYv_JnylBAtzOI13Bo8E9q81po.crl (hash: T9QdECP715KObs94lKatP8IXbmddAUGDTqtnPT/Mfa4=)
2: WTARnFcaaxywjD8542Gln8y_dnw.roa (hash: Ftlz5tAZ1Wy4DgBSL6cjF0uXQi2BfjzAEtpVPnOo5XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:f9:21:17:3f:e9:91:c6:a6:44:6e:df:8b:5d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Validity
Not Before: Jun 8 03:00:59 2025 GMT
Not After : Jun 9 03:00:59 2025 GMT
Subject: CN=7f017ec4f34058d733f3bd156cd7fb746b772e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:68:9d:d2:fb:67:46:d0:46:05:6c:06:1f:89:
2c:56:d5:6f:a1:67:ed:6e:2f:c1:c4:9c:c5:4e:69:
18:c0:27:eb:2f:57:af:4d:09:42:34:ae:aa:75:70:
28:e0:d0:13:51:bf:13:c2:b9:7e:78:db:9c:df:5f:
27:ca:1e:ef:aa:99:ef:58:91:71:ec:4c:4d:11:82:
c5:b5:e6:d8:e8:f2:77:c1:89:03:dc:6c:ce:de:81:
85:23:0e:4c:8f:d8:98:ee:8d:af:97:dc:d5:5a:6b:
a6:eb:3a:02:ab:77:da:28:eb:d2:01:50:10:42:12:
f3:31:49:28:09:ea:0e:2c:42:24:ab:c9:44:bc:90:
f5:8e:f6:da:78:6b:11:7c:85:5f:21:a7:69:b1:19:
41:73:4f:0d:96:85:7a:61:d3:b4:72:4b:d6:23:e8:
8b:ac:d1:ee:ae:15:e7:f4:9e:dc:a0:3d:e7:b7:53:
83:1f:77:5f:8c:23:51:45:02:88:b6:cf:76:2c:15:
49:dc:76:1a:04:81:cb:40:a7:bf:54:03:c1:7f:7f:
82:ce:20:cf:25:97:25:b8:5e:e1:79:e4:a5:05:52:
cf:ff:42:d5:12:b6:77:e8:bd:f9:ca:53:52:86:cc:
4b:24:d9:bf:2e:cc:c2:c9:42:22:f9:cc:ef:88:87:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:01:7E:C4:F3:40:58:D7:33:F3:BD:15:6C:D7:FB:74:6B:77:2E:21
X509v3 Authority Key Identifier:
keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:14:9b:d0:39:d4:21:d4:9e:08:cf:63:c9:20:a1:61:d6:d4:
09:7a:d6:ee:24:74:d6:0a:a2:c9:64:d7:a2:4c:3f:80:d4:22:
77:22:8d:b0:34:a3:ac:dd:bf:1f:0a:ee:43:24:27:ea:a6:ef:
a4:07:92:7e:49:d8:c8:e4:a8:97:52:4a:92:c1:00:a6:f3:1a:
f9:08:37:76:64:18:b2:9b:5d:72:1b:ec:04:53:9f:55:5f:bb:
45:5a:7e:67:25:9f:72:5b:63:3b:23:92:b9:ab:8d:1a:e3:9a:
63:dd:40:9a:10:08:a3:77:ef:1c:40:48:ef:51:22:5f:c4:54:
59:41:62:31:95:a3:79:f8:c8:ce:4d:ea:8d:8d:1f:e9:9d:28:
93:3d:9a:6c:cc:b1:7f:8a:54:5c:68:2a:1e:d8:f9:3c:66:78:
20:70:6d:83:f1:c5:bd:7b:38:3f:90:ab:1f:e2:43:fb:d9:5a:
3f:79:23:c1:1d:52:a4:9e:bd:6b:de:50:d8:44:44:9c:b3:5d:
ac:f6:5f:3a:90:af:98:92:f9:f5:d5:7a:7c:76:f2:99:d7:83:
de:a7:a3:85:1d:a7:dc:db:22:60:65:77:d7:43:53:06:b5:24:
76:06:ab:79:39:79:5f:7d:6a:aa:f8:de:46:a8:6a:1e:0b:a4:
e7:01:93:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:47:01 2025 by rpki-client