Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier: RtSeRyCB2eo9pde/Yrq2HcYNOdx8BIb7m3wx/LDYHmI=
Subject key identifier: 39:6A:53:02:9E:82:37:0E:3F:AA:40:3D:BD:B9:EC:C2:F2:AB:EC:4F
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 019752A27997B50DA666D55FB55EC5F6B12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number: 1268
Signing time: Mon 09 Jun 2025 03:01:08 +0000
Manifest this update: Mon 09 Jun 2025 03:01:08 +0000
Manifest next update: Tue 10 Jun 2025 03:01:08 +0000
Files and hashes: 1: 7347cFurkIFVNRTShqXtdTwOLOA.roa (hash: 81GL5pa945jQA5j8/X64fsQyRv+u1Eyr3yERMPF2bKE=)
2: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: HPXof9VS70h9BR+DYUbqSTXavPd4PjOAfrYke2FTKp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:79:97:b5:0d:a6:66:d5:5f:b5:5e:c5:f6:b1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: Jun 9 03:01:08 2025 GMT
Not After : Jun 10 03:01:08 2025 GMT
Subject: CN=396a53029e82370e3faa403dbdb9ecc2f2abec4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:74:38:f7:5c:71:9c:8f:a9:c2:8e:59:69:
09:2a:bc:28:29:52:09:ac:21:55:7a:80:76:e0:76:
29:21:21:b3:1c:61:db:41:a3:cc:e2:3b:2f:d4:9d:
4c:06:76:94:5f:8a:d3:bc:e6:0d:13:6e:ad:20:d6:
bf:90:2e:ce:aa:a5:58:03:73:00:30:c4:da:5d:e7:
cf:cf:ad:73:e5:8c:78:f0:5c:30:f8:5d:92:b3:25:
63:39:15:d1:5d:59:ef:8f:07:7a:47:c1:d2:12:30:
4a:88:0d:30:2b:8a:b2:14:c8:87:31:d5:d8:a7:90:
cb:34:8f:d7:09:53:ab:ba:89:51:b6:b2:e8:a2:87:
1d:50:e2:e9:2e:a3:b6:48:fc:ae:18:02:e7:ac:3b:
26:3d:03:db:e9:54:8e:48:c0:bb:bc:26:59:cb:36:
5c:a5:79:9b:0f:24:73:43:4f:e8:be:ac:5f:81:0d:
9a:ea:44:1d:48:5d:4f:ec:cc:4f:ff:d3:b2:e8:a3:
79:53:35:20:9b:25:f9:aa:6c:a8:d4:77:ca:0f:56:
86:19:5e:35:b0:85:05:0e:3e:20:9b:6c:2d:9f:9a:
d5:fc:61:6d:97:7f:9c:05:27:9e:a6:65:e8:3f:bd:
71:95:8e:be:77:40:8c:9d:1e:7b:31:63:dd:31:35:
d3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6A:53:02:9E:82:37:0E:3F:AA:40:3D:BD:B9:EC:C2:F2:AB:EC:4F
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b5:c9:05:aa:ba:34:07:dd:01:44:4f:88:2a:70:1e:00:46:
22:b0:29:46:1c:aa:10:da:69:c9:cd:ab:cd:85:5c:e6:b6:fb:
42:a1:b7:da:eb:69:2e:aa:6d:2a:2b:da:cb:eb:2f:61:29:63:
22:85:0a:38:0b:61:7c:20:ff:e6:f1:f9:12:8d:6a:1f:0c:a2:
b5:6d:5f:2d:6d:a1:53:46:e3:1c:37:41:a6:85:c6:72:9f:98:
a0:62:f2:3a:df:f9:81:98:d6:d9:d3:2c:b1:5f:94:3b:47:c7:
fd:2a:f5:f1:23:4f:92:d3:01:2d:3f:19:df:ed:24:6d:ce:3b:
c3:1e:a3:f5:1f:5d:24:e2:98:bf:61:f1:39:c0:d4:43:1a:32:
22:21:49:90:68:4b:62:48:54:98:92:8c:60:15:51:5c:58:aa:
4a:69:90:97:61:7e:c1:96:f2:8f:bf:c9:0c:d6:4e:c2:55:79:
b7:15:5b:9e:12:ad:be:10:7f:73:cb:9d:eb:01:c1:c5:43:85:
ef:28:b2:9f:ad:72:da:6d:f0:db:39:14:05:58:23:4f:f6:9c:
63:76:1d:3b:d5:f1:02:11:73:51:8b:88:89:35:72:39:ab:ae:
89:a4:70:21:78:b7:a8:70:22:2b:f8:22:8f:87:34:a0:86:da:
0d:9c:21:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:00:55 2025 by rpki-client