Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
File: QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft (raw, json)
Hash identifier: eY4wMZLdMuXRGRxA3KyJI/67ThSwjv2gq61hYBy9A6w=
Subject key identifier: 28:76:1B:D4:93:97:91:41:30:83:5B:25:25:6C:FF:C7:D0:75:BD:4C
Authority key identifier: 41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
Certificate issuer: /CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Certificate serial: 01974B1F1B790019FD19DD66BD952A8000A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
Manifest number: 073C
Signing time: Sat 07 Jun 2025 16:00:19 +0000
Manifest this update: Sat 07 Jun 2025 16:00:19 +0000
Manifest next update: Sun 08 Jun 2025 16:00:19 +0000
Files and hashes: 1: 7pmvBHJbdwVqFyqKem89BSyuKvk.roa (hash: yz/z7MiR6pHVCBirN+J/dsbi3QYekD7/Z8ghjQadQLE=)
2: LA-cz5sVCzNk_tA4a42FeutMowQ.roa (hash: uiKIsaEo4/vDsaJKzBGvYmUH1yNN4/rpS3B9ab7S0rw=)
3: QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl (hash: gC8Q1etybdROMBU2RZ/nLUDFFVmFEZ2De3LWRA7gFe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:1b:79:00:19:fd:19:dd:66:bd:95:2a:80:00:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Validity
Not Before: Jun 7 16:00:19 2025 GMT
Not After : Jun 8 16:00:19 2025 GMT
Subject: CN=28761bd49397914130835b25256cffc7d075bd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d4:15:80:99:19:c4:5c:53:e5:db:8e:45:d6:
92:0d:89:96:65:3a:07:a2:2c:72:46:a2:06:a3:57:
dc:23:cc:8f:38:67:2f:ea:13:95:43:5d:ab:be:93:
e5:60:3b:4f:2f:dd:21:d4:b3:9b:f3:b5:be:30:32:
02:db:e0:be:a2:0a:13:e5:b6:ee:06:61:3b:a2:1b:
5e:bd:e8:9a:e6:f4:dd:7e:ef:a7:ca:a8:d7:e3:bc:
cd:de:5e:93:b8:0e:91:d6:c8:40:2a:a1:5f:d1:53:
8c:70:86:0b:3c:f5:20:db:fd:a9:48:77:49:e5:30:
79:26:99:9d:05:b2:50:86:72:59:68:b3:07:c6:57:
e4:82:65:24:5b:aa:d2:20:58:2c:3a:da:8d:20:45:
7c:39:cf:60:51:3f:7b:cb:43:b1:d5:cd:d0:e7:76:
2a:2b:f6:18:58:e6:7e:dc:86:58:a5:2d:85:8f:bb:
bb:f5:be:33:99:e0:e4:79:1e:1e:a1:3b:07:60:d3:
c0:e0:c4:94:da:62:d3:02:2b:9b:3f:85:6f:15:d5:
61:a4:9b:74:30:b4:51:74:ec:3c:11:72:4e:d5:aa:
30:85:e1:83:3f:e3:f1:b4:ac:e7:b8:6b:eb:9f:47:
68:09:9a:92:63:be:02:dd:4c:26:05:15:b9:15:a8:
0d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:76:1B:D4:93:97:91:41:30:83:5B:25:25:6C:FF:C7:D0:75:BD:4C
X509v3 Authority Key Identifier:
keyid:41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:90:78:1a:a9:b8:ca:40:3d:c3:25:38:b5:58:ae:27:b5:6b:
43:2c:ea:0c:8b:12:6b:45:14:b1:a0:da:5b:bb:1f:87:21:a2:
bb:07:e8:93:bb:37:9a:bd:5d:5d:cc:ac:c0:09:64:95:90:18:
21:5f:2d:65:31:42:98:5d:4c:6d:06:60:6f:c3:21:42:8b:56:
e0:13:19:99:96:87:ec:a6:d0:0b:2f:66:c7:d9:90:15:2d:fa:
b3:1d:4d:69:c8:1f:9d:80:bb:75:a5:15:e8:c1:3e:8e:f0:27:
2b:07:6c:ee:39:6d:d3:d7:d4:5b:d4:95:95:12:7c:7b:da:62:
f2:d4:2b:2c:24:b7:88:c8:a3:7a:54:a7:f4:a6:30:bc:25:ad:
9d:e1:8d:33:cc:6c:c4:4b:a3:7d:ff:fe:c3:a2:1f:cc:ab:6a:
90:8d:16:6c:7e:ce:f4:82:0c:50:df:93:77:c9:43:3a:4f:f7:
49:07:b2:28:10:7f:30:d7:99:b0:4d:c4:d2:cc:a8:a8:96:90:
38:f2:d4:c7:53:4f:8e:18:8b:33:b7:3a:a7:2c:f9:02:4c:9a:
27:5c:fb:c0:4b:93:f7:4b:b7:62:0c:80:79:3b:4c:1d:9b:1d:
d8:b9:fc:50:19:73:82:93:1a:cb:af:4e:77:8c:13:bf:35:05:
ee:7b:0a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:35:33 2025 by rpki-client