Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: yHDRAqplKIW2hw1WsTOiU/KPmLHhbbMQ/di9ScONguo=
Subject key identifier: 27:B8:FB:85:93:65:7C:11:CB:C3:BA:A4:68:21:D4:B7:79:09:6D:1A
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 01975121B8853516862053A28D8CC1BF3188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 20:00:53 +0000
Manifest this update: Sun 08 Jun 2025 20:00:53 +0000
Manifest next update: Mon 09 Jun 2025 20:00:53 +0000
Files and hashes: 1: EuVjqybteP4_2uP1qrjFTh6Ex84.roa (hash: VQ7r6aXcK3EoAppW65m/zYlli6sD8iLPznPeACkUL+k=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: 0ahR/5g8yUbJrpQLhZ80yz8rupu/wMITFsNeQe2ByHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:b8:85:35:16:86:20:53:a2:8d:8c:c1:bf:31:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Jun 8 20:00:53 2025 GMT
Not After : Jun 9 20:00:53 2025 GMT
Subject: CN=27b8fb8593657c11cbc3baa46821d4b779096d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:d1:89:ff:8d:b8:1e:de:43:f6:fe:2b:5d:
71:e3:1b:63:0d:ed:e3:40:bc:f4:56:89:ec:f9:2b:
0b:57:1b:73:af:c7:3c:77:6f:77:31:86:49:f9:e5:
0a:50:0d:17:9b:2e:5e:48:ab:08:64:4d:01:75:cd:
7c:5c:5a:d1:e3:8f:5c:85:2c:62:cb:40:46:29:5c:
a0:51:d7:c8:72:96:9c:ee:e1:eb:e6:b7:26:4a:1b:
84:af:6c:08:29:77:49:d4:ba:ff:05:cc:4e:66:76:
0b:42:6b:ca:a5:64:9f:be:8c:26:9e:a3:3d:ea:8e:
f6:5d:0f:1d:a3:89:ed:e9:b3:0f:9f:b9:fc:1c:8c:
41:fb:a8:a2:3d:71:44:4b:ec:99:e9:ab:79:ae:34:
33:54:b4:f2:87:41:69:95:a7:b5:8b:7f:79:7a:24:
ba:ed:bb:1f:4c:43:74:47:8f:aa:1d:f0:df:42:49:
f7:59:92:d6:87:b5:33:5e:df:cb:52:cf:61:00:49:
78:12:b0:86:09:3a:df:a8:47:4d:e6:5b:92:c7:fa:
d3:5d:9d:75:4a:28:e5:34:ae:26:46:65:06:27:2f:
62:0d:6c:3e:66:7c:ae:98:4d:60:8d:ab:9a:ee:cd:
43:d6:3b:d0:9d:8c:64:0a:81:10:de:56:93:56:59:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B8:FB:85:93:65:7C:11:CB:C3:BA:A4:68:21:D4:B7:79:09:6D:1A
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d2:fe:67:34:3a:fa:77:52:df:e7:64:1d:e8:78:32:30:cf:
5e:00:bc:68:45:8d:16:45:2d:a4:2f:33:b9:dc:a7:85:4d:2d:
33:20:9b:12:2c:0e:3d:e1:50:c6:fa:1b:20:c0:10:89:c9:00:
0f:3e:1b:91:b8:11:a3:77:59:64:6b:7d:f8:b8:e3:b7:d4:27:
bf:95:25:b9:4a:da:bb:c7:68:c7:06:ba:a6:4e:8f:fe:63:85:
6d:58:34:d7:76:14:29:e2:b9:63:69:b0:57:59:c7:79:7c:d2:
00:ba:1d:e1:26:31:da:46:b8:b3:8e:b1:c5:7c:35:66:d3:0c:
c8:82:f6:27:c5:f8:37:52:99:53:f5:ac:d6:d3:b0:5c:26:5a:
e8:98:a9:e9:39:93:65:73:74:be:ce:a2:b6:e6:f8:cb:0f:b1:
ba:12:eb:a8:00:31:02:89:56:85:39:22:4c:2d:09:25:f5:31:
29:42:e3:ae:ea:18:c5:91:e1:2a:16:50:89:18:96:50:f3:71:
48:e9:94:5e:c2:0d:6e:8e:2a:1f:57:f9:5b:4f:7e:48:ec:b2:
53:22:21:ff:19:57:a2:53:5c:47:e2:fa:a8:59:b2:4d:d2:fd:
6f:79:78:4f:8c:18:64:8d:77:3d:67:4f:9d:01:5f:61:73:ab:
2a:8c:81:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:17:21 2025 by rpki-client