Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
File: QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft (raw, json)
Hash identifier: 4zUjrg4ZJqu31GnDXdLAHzvkpbRckG47NKFzoNLNU4Y=
Subject key identifier: 65:32:D9:B1:D8:EF:D5:1B:E7:81:A3:16:15:43:87:27:0E:66:6A:3F
Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
Certificate issuer: /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Certificate serial: 0197493195F42893E4EC423757B89171E82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
Manifest number: 089C
Signing time: Sat 07 Jun 2025 07:01:15 +0000
Manifest this update: Sat 07 Jun 2025 07:01:15 +0000
Manifest next update: Sun 08 Jun 2025 07:01:15 +0000
Files and hashes: 1: QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl (hash: Mf9lqIWN67bbYfWlE/ZY5ZzN9dOyIS6QrQ+qaD+itNg=)
2: _1j-vq_YcHaEMFMbb53TSNwHgps.roa (hash: FFNOOLLPGSug4NyRBtLQbxLYgOZN6JLp0mqYGuu/rHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:95:f4:28:93:e4:ec:42:37:57:b8:91:71:e8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Validity
Not Before: Jun 7 07:01:15 2025 GMT
Not After : Jun 8 07:01:15 2025 GMT
Subject: CN=6532d9b1d8efd51be781a316154387270e666a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:0d:13:64:e3:74:ef:1f:6d:dc:54:a2:ee:
f0:04:50:aa:f7:46:53:ac:c0:21:74:5b:5a:14:d5:
0e:05:28:1a:69:38:eb:70:5b:fa:57:58:d7:f3:83:
9d:19:b5:66:a9:b4:46:c3:fb:4d:4f:6a:de:e1:fa:
79:44:a6:72:9c:b3:75:46:f7:a4:52:ff:c9:bb:42:
26:98:7a:ea:3b:46:53:ec:04:db:99:58:87:bd:00:
b5:bd:a0:c9:ee:2a:a3:d2:9e:88:c8:ae:35:69:19:
b7:79:df:a8:91:0e:7a:57:17:fb:35:6f:c9:74:41:
45:e2:fe:2e:e8:1b:29:fe:4c:f2:ae:c5:3c:01:78:
38:a7:e9:34:12:3c:a9:ea:c4:f8:8f:de:a8:77:2d:
93:9f:ce:63:30:49:ee:cc:02:aa:7f:b8:62:c7:e9:
a4:39:c1:f9:42:43:20:56:4c:7f:b3:79:d8:9c:15:
c7:e2:fc:52:b1:81:24:d3:ca:e9:20:60:72:6c:05:
9f:d8:5d:af:bc:01:02:ac:cc:fc:c1:1d:73:fb:11:
07:ab:e5:5f:83:dc:1b:9d:ff:fc:9f:cd:0e:2b:7a:
48:62:d4:61:f7:31:09:a0:d0:94:31:25:4e:7d:fc:
d5:25:7b:7c:2a:85:55:ee:fe:9c:3b:b2:89:68:bc:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:32:D9:B1:D8:EF:D5:1B:E7:81:A3:16:15:43:87:27:0E:66:6A:3F
X509v3 Authority Key Identifier:
keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:54:0d:d1:19:b4:9c:3c:59:2f:c7:43:d2:a5:e5:0e:e9:bc:
fb:1a:6d:31:d1:db:c0:ff:29:0a:21:7f:e4:a6:52:f5:e6:83:
73:a3:a1:e5:a5:aa:15:98:3b:4c:17:7b:ec:ef:90:e1:d3:7f:
83:de:e6:43:21:12:7d:c5:7f:43:70:2c:21:76:3a:81:aa:b9:
ee:df:72:2e:d3:44:7b:71:91:db:a4:a9:2e:ff:5a:f7:1f:dc:
1a:cd:4a:7a:4f:f1:ec:81:56:3c:0e:68:b2:42:31:c0:4e:ec:
bb:18:d7:9d:aa:c7:7d:2a:b8:9b:b6:9a:94:8e:0c:34:21:39:
bf:f9:39:92:4d:77:ec:cc:de:2d:60:80:b2:39:e0:a1:41:da:
be:f4:a4:2e:a7:d4:bb:02:a6:c8:bc:61:e5:0d:e2:26:95:bd:
6e:e3:41:a7:83:f5:82:ef:c7:2c:80:f3:39:52:07:d3:7f:c8:
22:f1:dc:44:c2:7f:79:e9:20:71:24:bd:f1:a4:e3:dd:29:e4:
f9:bc:80:2b:2c:57:a4:bb:37:11:9b:1f:9e:7f:9a:1a:95:83:
3a:b2:ac:92:ae:f3:d6:0d:04:e9:43:b8:36:f0:22:aa:f8:96:
4f:73:36:af:60:39:79:5d:74:10:d3:83:f6:8c:11:39:7b:93:
61:6d:6e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:51:03 2025 by rpki-client