
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier: NfklqWUCPLHhThTacaoV6y8B4uENl4jH0b1jfkxwpqQ=
Subject key identifier: 34:83:B8:BF:EE:1D:E9:CC:9D:CE:5A:6F:EE:09:F1:37:FF:9E:B5:AF
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial: 01974931118BA637B6D7C5DF482ECFB85A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number: 10D8
Signing time: Sat 07 Jun 2025 07:00:41 +0000
Manifest this update: Sat 07 Jun 2025 07:00:41 +0000
Manifest next update: Sun 08 Jun 2025 07:00:41 +0000
Files and hashes: 1: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: psUi5+aI4s89U3g1VmoIr/X+WfA+DuzC/Lt8ZAZVKcE=)
2: lvvS-y_t3pi3cv-oXJNHuuwFX60.roa (hash: fbIaohthqLUB14sBjDthABWLRfajk00zaK8xsJAksno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:11:8b:a6:37:b6:d7:c5:df:48:2e:cf:b8:5a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Validity
Not Before: Jun 7 07:00:41 2025 GMT
Not After : Jun 8 07:00:41 2025 GMT
Subject: CN=3483b8bfee1de9cc9dce5a6fee09f137ff9eb5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ab:1a:db:ff:1f:ca:24:bf:96:b4:64:b2:d6:
55:28:d4:96:82:39:9c:72:61:41:04:79:c2:85:ad:
3b:2a:f9:ce:e2:c2:a3:18:fe:93:14:ff:e1:05:19:
da:bb:f7:d6:bb:0e:bd:db:cf:6a:c9:b5:20:49:06:
46:17:3f:39:2e:76:99:e6:35:8f:02:41:ed:f2:b8:
5b:e5:82:81:f4:da:af:0b:c1:6b:dd:60:3a:00:8c:
07:9c:03:3d:a5:b2:ee:17:6f:67:eb:43:47:33:88:
35:64:fe:b0:75:fa:4b:0f:57:e6:80:ea:a4:86:41:
18:60:f1:21:69:3a:d2:1c:81:96:b4:10:0a:e8:c4:
07:c7:e6:47:86:ca:d1:c7:78:c3:52:46:26:e4:14:
6d:c2:73:9b:ba:ea:00:21:3a:47:ef:f9:b7:c3:97:
b0:7e:5a:91:f0:bd:fe:bf:cd:9a:43:3c:bb:1a:78:
7f:e0:95:fc:f5:f7:b8:e9:40:93:5b:c7:6c:f0:1d:
07:b7:26:e7:03:84:c2:14:be:68:fe:d5:0e:10:36:
00:0f:ec:70:54:50:f8:c9:8b:19:7a:a5:e8:6c:13:
e2:ba:74:70:7a:7f:6c:a2:c5:11:38:fa:02:65:60:
ff:be:44:16:0a:63:79:c5:99:aa:f6:c7:54:df:52:
c2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:83:B8:BF:EE:1D:E9:CC:9D:CE:5A:6F:EE:09:F1:37:FF:9E:B5:AF
X509v3 Authority Key Identifier:
keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b2:92:92:e9:5b:97:87:c5:15:55:b5:b4:f3:aa:cb:d6:c7:
37:d6:c6:9c:4e:e0:32:1b:6a:9e:f4:c9:99:63:7b:a2:a9:c5:
6a:7a:fa:0d:9a:2b:33:a3:72:f1:0e:88:0b:87:27:73:32:49:
da:d1:8a:db:62:e6:c7:7c:cc:b7:34:d1:40:a9:89:f7:d0:ce:
32:e1:f0:0d:ec:dd:14:40:5a:b2:7b:c2:24:7f:23:2a:89:ae:
d5:48:01:26:5d:6e:fb:07:92:7e:c4:dd:e2:f6:55:f2:0f:d4:
24:af:c1:28:5a:50:cc:f8:7e:de:da:6d:83:7c:eb:ac:71:a5:
56:67:76:75:e9:f9:98:36:5f:56:eb:3c:06:1b:40:e0:0f:fd:
49:d3:9b:5a:a3:19:c4:56:da:55:b6:f6:a5:e3:63:44:84:c6:
9e:28:50:2d:e2:3f:fe:b3:5a:0d:7f:54:52:21:61:ed:97:a4:
35:c6:38:e6:02:03:1a:94:21:f9:87:ca:26:a6:40:d5:3e:6f:
2a:b0:28:3a:ec:25:60:4c:10:de:b7:af:57:68:9f:f1:79:f9:
e0:6b:12:41:53:d5:e4:5d:f5:5f:82:d7:cf:0e:65:e6:70:e5:
76:63:d9:e1:d7:06:39:31:fd:41:c1:af:58:f0:2a:06:97:d9:
97:11:c2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:24 2025 by rpki-client