Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json)
Hash identifier: Eg4URLK+6/mAL0hKVSn+MOmP4MpsqAjhCjiDeDXTUew=
Subject key identifier: 6D:0B:31:C7:31:94:BB:A6:09:84:E7:10:9D:9A:D0:BC:30:4D:35:A2
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial: 019771512CE45A21B0E2CB6BF1DA74D13754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
Manifest number: 1297
Signing time: Sun 15 Jun 2025 02:00:34 +0000
Manifest this update: Sun 15 Jun 2025 02:00:34 +0000
Manifest next update: Mon 16 Jun 2025 02:00:34 +0000
Files and hashes: 1: CLemqr75Yb48Km-cD1hApiGwC9E.roa (hash: EAtUhRgJzB5CWn94r1qk7eU5voV0S7bWsYXXanEEayY=)
2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: fNVDJODo2v93jiIvehD5PZ0OoCtAthCUdWS8vkyCOxw=)
3: yEsMSFNm5dJ-A_JpG2DXLz7wI-Y.roa (hash: 8AHka5aF5G+PfLY03Vs1HshDxFgYYrha9TXGX/Fcp3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:2c:e4:5a:21:b0:e2:cb:6b:f1:da:74:d1:37:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Validity
Not Before: Jun 15 02:00:34 2025 GMT
Not After : Jun 16 02:00:34 2025 GMT
Subject: CN=6d0b31c73194bba60984e7109d9ad0bc304d35a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:29:aa:a7:ca:85:19:c8:27:1b:ac:9d:3d:
89:16:fa:a8:ae:c7:44:f2:13:15:68:b2:b2:69:df:
e9:30:f1:e9:89:8c:7f:46:dd:bb:8f:3a:d6:53:61:
54:f7:5d:49:05:30:bd:11:8d:97:9f:ed:22:ff:1e:
82:d8:ee:fe:72:8b:e2:16:47:85:48:ff:0b:21:6d:
4a:20:32:66:e2:46:c8:29:33:51:91:cd:3c:d6:84:
de:ce:56:7f:bb:de:62:02:c9:36:f1:c3:b2:ba:08:
a9:fc:da:39:dc:0d:89:74:1a:47:b0:97:08:d7:70:
28:38:a7:90:32:e8:f2:bd:ba:13:9d:06:e2:52:02:
55:7e:13:eb:2c:58:8e:5f:ef:3d:69:46:59:32:38:
fc:40:d6:e2:13:6d:a2:70:68:a8:7b:6f:fd:a2:d6:
ef:e1:13:11:0b:de:bf:91:bf:4e:93:08:66:9b:4c:
73:07:92:6b:4f:52:74:72:c4:20:f5:cd:e7:18:ef:
fb:10:48:bb:5c:ce:fe:15:71:66:f1:7a:fb:98:05:
df:68:02:d0:3a:78:f5:b2:86:1e:37:e2:f8:b8:5a:
03:a8:90:92:67:51:63:2e:24:d9:47:aa:f7:96:79:
5a:25:45:e9:9a:be:c1:fe:b9:c7:c9:c4:63:7a:d4:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0B:31:C7:31:94:BB:A6:09:84:E7:10:9D:9A:D0:BC:30:4D:35:A2
X509v3 Authority Key Identifier:
keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:67:44:b8:0c:2b:34:48:a5:b8:b8:c4:4e:89:39:ac:cc:fc:
73:59:51:e4:99:05:b0:64:be:00:a5:de:e0:4e:ae:48:8e:58:
e6:6f:7c:a9:dd:c0:17:f2:3a:c9:f5:e8:65:4f:11:ac:dd:95:
8d:8e:21:0e:cb:53:5e:56:fb:42:e3:a2:58:20:ad:be:b2:03:
14:19:33:3e:c5:4b:96:96:4c:fe:c9:cf:18:15:2e:79:1d:7b:
b5:8b:5c:37:c1:13:c5:0b:a5:16:a6:82:a4:43:34:88:a4:86:
8a:fc:0a:35:af:d2:ba:d1:ed:d5:00:f5:c5:16:d2:d8:08:fa:
75:8d:e0:c1:f2:4f:ed:ad:e4:3f:e4:96:70:80:8e:08:6b:5a:
48:c1:d6:34:72:54:ff:f8:b3:22:22:ba:0e:8a:df:60:d7:72:
9f:2a:cb:8e:1e:e3:99:17:b0:95:a2:21:11:71:1b:75:88:51:
b5:5c:65:53:2d:a1:e3:8e:b7:70:c3:e2:8d:3a:23:0c:97:c1:
a9:4b:b0:8a:33:92:03:aa:da:bc:08:b8:41:68:57:d6:23:5e:
8b:78:c5:f5:af:92:cf:8d:76:58:e6:b9:fe:f3:e1:15:cb:15:
6e:75:d1:8b:a5:b7:74:26:3d:0a:8f:75:06:17:fa:e0:1b:e5:
05:5f:de:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:26:40 2025 by rpki-client