Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
File: QiYpIEOCMfMh47gQEIiyD5DAjUY.mft (raw, json)
Hash identifier: oCSS3C/86knvNJNSVvdksvVfeG4nVFPvtb2TksLk3nE=
Subject key identifier: D8:CC:DB:2F:5A:DE:A3:F5:FF:5F:66:DF:E9:D8:5F:B9:75:A2:CC:AC
Authority key identifier: 42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
Certificate issuer: /CN=42262920438231f321e3b8101088b20f90c08d46
Certificate serial: 01975E0178C172B9D6C4717F01A168AF3BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
Manifest number: 04E9
Signing time: Wed 11 Jun 2025 08:00:44 +0000
Manifest this update: Wed 11 Jun 2025 08:00:44 +0000
Manifest next update: Thu 12 Jun 2025 08:00:44 +0000
Files and hashes: 1: QiYpIEOCMfMh47gQEIiyD5DAjUY.crl (hash: euKKxlBBt9ZdmGdtMmdUcY6xhhNBPtXmo5PJAW0GhCE=)
2: vzK0GcfKIhsh5S1UL0NdOS-MO04.roa (hash: tbZrlZm8dX+O2bKlUBHktkojMJRjyTWeZk1UwYb3Lj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:01:78:c1:72:b9:d6:c4:71:7f:01:a1:68:af:3b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42262920438231f321e3b8101088b20f90c08d46
Validity
Not Before: Jun 11 08:00:44 2025 GMT
Not After : Jun 12 08:00:44 2025 GMT
Subject: CN=d8ccdb2f5adea3f5ff5f66dfe9d85fb975a2ccac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:e3:6d:85:8a:87:b8:ac:1c:3f:c4:a0:5f:
79:90:e5:44:cf:9e:a0:42:f2:03:ef:fb:bd:10:57:
03:1b:bc:94:d3:c4:8b:07:01:f4:9d:4f:e6:10:ac:
ae:9d:57:d9:05:a6:a5:27:a1:5a:74:45:4c:f2:5d:
8d:2a:a3:9a:d3:f5:1b:b4:32:e3:b5:bc:6e:d8:ab:
bd:5d:b8:d3:16:17:4d:d9:40:84:95:29:23:a3:32:
ae:2c:19:68:bd:80:b4:a7:c7:6e:af:2d:f7:6e:9d:
61:80:7b:79:f1:70:c2:c9:fe:22:ca:ef:d6:23:99:
13:b9:6d:0a:b7:41:af:8c:f5:f6:f3:58:a4:e3:b1:
76:e9:94:17:7a:e5:9c:55:de:39:0d:06:84:ba:de:
71:a0:4d:a2:74:7f:62:d3:85:ce:67:33:93:f2:73:
28:f1:8c:7b:0c:ec:e0:cb:29:b8:99:b8:d9:e9:c2:
67:0f:d3:83:6f:3b:6b:70:8b:5c:ac:26:a0:a1:d0:
a3:cd:b9:ed:d6:8a:7d:66:69:e7:05:76:bd:1d:6f:
82:2e:3d:b9:81:fa:52:d5:cf:52:02:86:d6:f4:a9:
a4:28:2f:e6:f0:64:c7:3e:c9:0b:72:94:f1:92:ba:
9c:d1:8a:ef:de:db:66:a6:b1:06:24:6a:3b:b6:a2:
75:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CC:DB:2F:5A:DE:A3:F5:FF:5F:66:DF:E9:D8:5F:B9:75:A2:CC:AC
X509v3 Authority Key Identifier:
keyid:42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0c:e2:0d:75:c9:59:42:c9:f7:6b:df:7d:33:60:51:33:34:
86:4e:e8:0f:7b:25:54:52:7e:1e:18:e7:2c:7c:c0:f6:78:a5:
67:41:c3:c3:18:df:af:1c:92:36:85:9b:31:00:a0:78:9a:95:
3c:45:14:6f:0c:44:02:40:1b:68:84:10:c7:a3:55:fa:88:6c:
ef:22:de:ab:f2:57:ac:be:ec:4b:00:50:25:33:64:29:a4:16:
be:5c:0d:04:1d:0d:2f:73:61:15:a1:49:32:a6:94:1e:68:f3:
a9:d6:bc:0b:46:aa:33:fc:d4:e1:5d:f7:75:2c:e4:70:0b:59:
e0:63:8d:f3:63:9d:90:e4:d9:a2:d7:3b:d2:f6:9c:ba:97:5f:
3c:61:13:79:97:b1:eb:ed:03:cd:2f:7c:8f:95:8c:1b:f7:9f:
60:a5:58:be:84:57:0e:b7:d7:e6:22:de:74:46:25:58:97:a0:
85:b2:51:3d:1e:d8:24:76:ec:7a:fa:96:5a:bc:38:76:28:17:
f8:83:55:ed:f6:7e:63:29:c3:b4:21:36:20:f8:db:ab:c2:33:
4a:a6:ee:a3:f7:66:57:e4:97:2e:0d:c3:ea:c3:2b:4f:9b:6c:
d6:72:a0:c5:59:db:63:fe:f1:b7:21:99:41:5a:96:f9:a5:6f:
ee:33:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:07:40 2025 by rpki-client