Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
File: QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft (raw, json)
Hash identifier: PMdCJp48Jux0ScelnWQDHyGOcvC17/aYMm4WvSJJ0P4=
Subject key identifier: E7:F6:EE:E1:2D:FB:67:59:C6:79:C1:02:D7:4A:42:9D:30:98:43:E1
Authority key identifier: 41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
Certificate issuer: /CN=419a82be1e16422f9a88549af6d542481d691ac9
Certificate serial: 01974666A8A4AE5F8F860C505A295D8CF9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
Manifest number: 046F
Signing time: Fri 06 Jun 2025 18:00:22 +0000
Manifest this update: Fri 06 Jun 2025 18:00:22 +0000
Manifest next update: Sat 07 Jun 2025 18:00:22 +0000
Files and hashes: 1: QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl (hash: sxG8xB3qJxP05o8KtHysNaASqrbpkzJH2hcA18SVG+4=)
2: ixxoDXsLiKFHG8cJ3pni9CuIWeY.roa (hash: e7F9bx5lz4I+jxRKeA3TL2cV3HxTGyF8ndmJymIUkLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:a8:a4:ae:5f:8f:86:0c:50:5a:29:5d:8c:f9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419a82be1e16422f9a88549af6d542481d691ac9
Validity
Not Before: Jun 6 18:00:22 2025 GMT
Not After : Jun 7 18:00:22 2025 GMT
Subject: CN=e7f6eee12dfb6759c679c102d74a429d309843e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:57:e6:d9:f4:59:5b:08:90:b1:2c:bf:b1:
97:75:8b:59:3a:b7:5c:ee:cf:dc:05:41:44:15:fc:
3a:8a:32:03:d9:0e:23:90:10:f1:07:a3:c4:f8:62:
c4:2c:02:65:17:ff:72:a0:01:eb:bc:bb:e7:25:65:
d2:0c:46:8b:e5:35:fc:a3:58:8d:6d:a2:ac:ef:e1:
f7:4a:83:e5:1a:03:44:40:42:8b:31:57:73:72:e0:
9f:b8:0c:5f:f8:e7:e6:e7:3d:f2:38:c7:50:31:47:
27:97:0d:80:d5:bf:39:42:42:e1:1a:07:50:2e:89:
58:4c:30:94:29:d6:6e:b5:e1:fa:2d:d4:2a:cc:bc:
3c:bc:fe:c4:01:c8:b1:7b:93:99:be:23:aa:d2:0f:
05:68:b8:fd:d0:f4:8e:6a:b5:2f:57:f6:f1:2b:4b:
d1:a8:9b:41:45:21:cb:2c:19:6d:ac:1e:78:a7:4d:
36:87:eb:7a:45:45:cf:30:cd:6c:36:7a:55:d8:7a:
c5:db:66:cc:45:ad:8a:4c:ca:b1:e0:94:17:30:60:
79:e2:ad:e0:5c:fc:0f:73:28:82:14:05:49:9a:b6:
70:09:36:d6:ad:53:d6:6a:49:a8:cb:34:7b:26:bb:
29:ba:0e:a1:2c:69:2e:f8:b6:04:68:17:25:f4:3b:
43:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F6:EE:E1:2D:FB:67:59:C6:79:C1:02:D7:4A:42:9D:30:98:43:E1
X509v3 Authority Key Identifier:
keyid:41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f6:89:9f:03:43:02:cd:94:8f:f4:d6:e9:0f:4e:cc:9e:6c:
80:9c:d7:45:d6:61:69:0a:10:dd:9e:a6:df:e2:cc:74:e1:5a:
52:d3:85:d2:95:62:c4:fa:3d:c2:20:85:16:7b:3f:6f:85:3e:
88:00:85:f6:90:88:a8:1f:b9:41:06:3a:db:8d:dd:89:40:1b:
07:80:e6:26:6d:f7:99:8b:07:ef:9a:1f:5c:83:fd:64:57:2a:
14:c4:cb:3d:3b:a9:3b:c7:c4:bc:9b:5e:f0:aa:ef:3d:8e:15:
0c:45:6e:24:cb:9d:85:53:60:7a:0d:8c:18:7d:ae:ca:4c:98:
7b:be:b8:8c:95:b5:a5:ab:c9:cd:68:c8:4c:8c:af:db:b6:e3:
cb:df:aa:e0:15:1b:27:50:9c:44:36:d4:43:55:2e:5f:2f:7b:
47:42:8e:65:e6:8a:c8:8f:89:3f:5d:b4:36:23:8f:13:c4:89:
c6:a4:23:6d:c8:39:0a:76:e2:9f:c0:19:52:d6:25:f5:42:3b:
39:a6:6f:06:5d:20:b3:83:d2:43:dc:be:4b:fe:e3:2d:99:dc:
fb:59:99:32:0e:3f:30:d3:99:2a:36:34:02:1d:d7:4a:33:6f:
e2:ad:d1:0a:ad:41:3b:27:c2:ee:b7:13:26:e2:cf:6b:7d:ae:
0a:b3:71:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:36:39 2025 by rpki-client