Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: nu9dULTP8B+e7d0Ut9GXhcv1sjKc/FLfeA3aM9NVt60=
Subject key identifier: B7:75:09:DD:D5:0C:A5:A6:E1:9A:E1:F2:97:22:22:2D:A9:AC:B5:13
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 01974E5774ED89B449429D150C0F876A767D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 07:00:43 +0000
Manifest this update: Sun 08 Jun 2025 07:00:43 +0000
Manifest next update: Mon 09 Jun 2025 07:00:43 +0000
Files and hashes: 1: 1-OpArz-cvr3_w4LMxpPZzSxCtqI.roa (hash: p66SMlwKH8qksSnzyFy8M1MJ9eGvVUlsB0A2v++rXYg=)
2: BO2GxdENWf3nZf4IjS3W9dxIBdA.roa (hash: CoT9/NP4/6nCeDdnm6fFk7HZ3lUZardt1KwDlood7sQ=)
3: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: 6kpo6//OO416Fkr2QieBxJ0N6KTa9hIMfXQ2ZykmSD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:74:ed:89:b4:49:42:9d:15:0c:0f:87:6a:76:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Jun 8 07:00:43 2025 GMT
Not After : Jun 9 07:00:43 2025 GMT
Subject: CN=b77509ddd50ca5a6e19ae1f29722222da9acb513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:08:76:be:81:bc:46:82:6e:89:53:02:b6:
8e:4c:3c:eb:64:8b:0d:bf:0c:6f:5e:fc:4a:46:e4:
d3:39:24:99:39:ce:8d:31:a0:ef:15:10:22:ba:b9:
9b:0e:d2:9a:dd:f3:65:e5:27:68:6f:f0:41:c8:28:
40:af:63:4b:3c:65:a7:87:bc:23:e2:71:9d:2f:61:
44:d0:10:8f:4d:85:53:46:56:a6:fd:08:cd:03:04:
27:d7:fb:fb:e4:c7:de:46:cf:74:b7:67:b0:44:28:
e7:45:0b:5c:bf:cf:10:66:4e:7f:64:2c:9f:ca:84:
5a:b3:de:fa:33:36:ab:93:c4:6e:b2:f9:2a:f7:58:
d9:15:8c:a2:50:76:6e:02:56:9d:5e:62:fd:08:3e:
20:d9:ab:f6:4a:7b:c3:e4:88:cd:52:87:25:81:43:
b8:a2:02:8d:5c:5a:05:70:bd:0f:fd:2e:b4:80:2d:
60:31:9c:8f:42:c4:44:89:56:6c:d4:b5:57:07:82:
51:ee:73:45:80:72:f3:c7:17:cc:03:06:0d:ab:5c:
5d:db:1b:c1:6c:37:be:41:1c:67:87:a5:5f:6b:da:
5e:3e:40:92:c8:4c:a3:11:8d:b2:4d:ca:aa:8f:14:
14:9c:0e:10:3f:72:e6:d4:0b:97:5e:f7:ee:de:3f:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:75:09:DD:D5:0C:A5:A6:E1:9A:E1:F2:97:22:22:2D:A9:AC:B5:13
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:71:6d:09:28:f6:14:25:fd:0c:a9:51:25:36:ba:10:84:9e:
60:91:3e:2a:95:96:79:28:2b:04:a1:6d:32:a0:2d:cc:75:1c:
90:80:ff:4c:f0:6b:a5:59:1b:7b:c2:7c:69:17:67:fa:f1:4b:
f1:a2:6f:2f:b0:58:77:72:8e:d5:48:00:ef:9b:ec:ae:3c:b5:
a1:56:e7:02:5f:f6:18:41:a5:7d:4e:bb:15:47:e9:67:a5:8f:
35:fa:ac:87:3b:0d:3a:e9:e7:be:01:8d:c6:48:36:b8:f3:43:
22:02:a5:75:90:34:5d:ef:fc:58:c5:f7:e8:0a:76:65:6a:c0:
0b:ee:a8:be:eb:42:b3:15:89:9f:da:2f:da:4a:b9:40:93:87:
7c:1c:e9:64:a0:3d:b5:9e:d9:72:c2:70:96:a0:b8:57:de:c4:
9a:ec:2d:1b:bc:cb:f8:07:73:6f:ca:d1:f8:9d:f3:43:9a:63:
d4:33:97:e7:2c:c5:da:0f:4f:59:ed:fb:39:cb:27:13:a0:20:
ca:ee:51:01:96:5c:62:2a:22:c9:94:a6:a6:74:61:a3:25:a7:
4d:88:47:58:e6:52:a6:24:ed:9d:a4:c0:b4:4c:1a:11:79:af:
97:11:9a:32:f6:ba:13:3d:3b:5e:f0:51:d6:7f:71:4b:cd:1d:
57:52:b5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:47:54 2025 by rpki-client