Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: /d46mIZMQZVml3ZFjZkvCqOeBnDX85b5vuhAABO1KDs=
Subject key identifier: BD:95:97:B4:22:27:1A:F2:73:AA:86:0D:A3:63:34:EF:5D:C2:B8:33
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 0197481E9C95B81E934C4EDF0E4EA95B8AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0A88
Signing time: Sat 07 Jun 2025 02:00:55 +0000
Manifest this update: Sat 07 Jun 2025 02:00:55 +0000
Manifest next update: Sun 08 Jun 2025 02:00:55 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: RVbTVX/g8eP9ymyg5hq8uScENrrK+5kt1l3dClcy694=)
2: dKp1x4AjnPUcfIO_WrYQasCbX4c.roa (hash: BBLyfF5z+X1cauuxHi1cH0OZMMJW5dshnRCgSvteyno=)
3: uBNZ4MqXESz6xGHzQdhbKOD3CeA.roa (hash: Xvf1KJxZcyYU4khA0juJ7NXfjXv9HKqoCzWln+BqLrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:9c:95:b8:1e:93:4c:4e:df:0e:4e:a9:5b:8a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Jun 7 02:00:55 2025 GMT
Not After : Jun 8 02:00:55 2025 GMT
Subject: CN=bd9597b422271af273aa860da36334ef5dc2b833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0b:fb:1b:e7:a3:2a:19:f3:25:6a:65:ad:3e:
80:15:61:cf:12:9c:e7:50:38:00:d3:10:94:ed:f6:
3e:41:db:71:d8:f5:1b:fb:2f:1e:77:4d:b7:c7:66:
17:68:6b:4b:56:ab:27:e1:0b:34:e8:ec:c1:e6:5a:
ef:7c:50:ad:04:be:22:70:f8:94:f1:b3:55:43:93:
de:05:2c:2a:e2:39:d4:fe:1a:b7:74:e7:96:58:3d:
83:29:7b:34:ac:22:c8:65:ed:dc:97:6f:dd:37:af:
6a:14:27:68:8f:36:ed:de:e5:16:96:80:f4:f0:3b:
1c:e7:3f:8d:fa:42:92:82:83:40:26:40:00:53:85:
a2:69:d6:ab:df:99:df:46:7c:77:20:38:ee:39:c8:
c7:e0:5e:74:13:c4:96:06:c5:16:e1:61:35:37:28:
26:f5:0d:00:41:5b:dd:fd:20:82:82:e3:18:62:f2:
de:4b:d9:91:7f:90:d8:06:10:75:d8:32:8e:55:50:
94:1f:83:9e:97:4c:80:b0:d7:6d:f3:06:ab:c5:8b:
23:d1:ad:2e:9e:3f:94:c7:bf:16:d1:7e:f9:29:47:
f3:d4:b4:45:c4:7a:ec:03:05:c7:1b:de:96:d1:03:
78:12:50:6f:25:bc:d9:af:ae:4c:80:c0:88:7b:e6:
d9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:95:97:B4:22:27:1A:F2:73:AA:86:0D:A3:63:34:EF:5D:C2:B8:33
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a0:ca:16:01:6f:76:90:85:dd:1a:42:a6:56:2f:4f:07:b6:
21:5e:e0:d0:c9:0c:15:ca:ff:cd:56:f7:5b:c5:09:8e:51:62:
8d:bf:f9:fa:dc:66:18:bf:fd:9a:c9:ae:7b:de:07:a0:18:d7:
75:11:ee:9a:94:56:d9:c3:25:e4:f7:cc:ae:30:00:6d:85:d3:
2a:25:6c:10:3b:dc:e1:3b:8c:1b:47:59:80:96:6b:b3:45:14:
c1:f9:d0:a7:fc:13:ab:9b:03:a9:74:b0:90:1c:9e:80:79:c4:
55:03:bd:87:be:00:a6:fe:d4:ff:87:aa:dc:19:0a:80:01:01:
cb:bc:1f:02:3f:0b:6b:df:69:d1:52:f2:ef:87:2b:b5:a1:ef:
0f:c5:61:ef:ad:57:56:e6:ab:71:f3:1e:e5:22:16:8c:7b:39:
bf:43:a5:67:de:40:4f:7a:51:07:12:f4:e9:29:af:cb:06:78:
01:c5:ab:86:14:b9:a8:12:47:56:3a:91:dc:5b:2a:07:e4:39:
22:6d:e4:5f:03:60:7c:62:10:73:c0:57:a2:99:ac:a9:8b:61:
ca:69:58:a1:4f:c7:65:ac:94:c9:38:28:99:b0:7c:e5:d2:58:
3f:7e:94:c9:b2:ea:32:1e:ac:ba:b1:fe:89:83:d4:88:81:49:
9f:b4:94:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:04:44 2025 by rpki-client