Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
File: qo_QXutuoFoR1mer7djqEJPScbM.mft (raw, json)
Hash identifier: HCAtp5Ath6qxSAJkpD6QbkhZghepMkt9H0fBZenajRM=
Subject key identifier: 7F:32:34:1E:D6:4A:C1:92:BC:04:CA:81:90:F3:B7:33:F2:F8:DE:B9
Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
Certificate issuer: /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Certificate serial: 019745F9837D2F9D5B96C9E05AC83132169C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 16:01:09 +0000
Manifest this update: Fri 06 Jun 2025 16:01:09 +0000
Manifest next update: Sat 07 Jun 2025 16:01:09 +0000
Files and hashes: 1: lfJUEj9OpKtkyjj6xaEeSMukOrA.roa (hash: 9AsF2IZpbVSPw/O9UldkVW9AyHlVo6jZ0snpU1eDlm8=)
2: qo_QXutuoFoR1mer7djqEJPScbM.crl (hash: rWhq4JZhXWc6WlU3HzWlhYwmWRqPxBoD96ovVjur0cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:83:7d:2f:9d:5b:96:c9:e0:5a:c8:31:32:16:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Validity
Not Before: Jun 6 16:01:09 2025 GMT
Not After : Jun 7 16:01:09 2025 GMT
Subject: CN=7f32341ed64ac192bc04ca8190f3b733f2f8deb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:54:cf:d2:4b:0f:75:3e:a5:37:d5:d0:ad:
fe:23:31:a9:13:95:3c:06:d9:7c:04:aa:64:57:db:
91:95:75:f9:4c:0f:44:25:72:ad:80:e2:21:8d:d9:
8d:88:84:a9:df:1b:eb:23:f6:d4:5e:a0:74:59:3e:
42:cd:79:0b:42:22:05:d8:8d:9c:e5:22:26:ae:85:
52:04:57:43:6d:ce:38:07:a1:04:1a:9c:d7:ed:6d:
3c:f1:e6:89:93:1d:b9:b0:e3:60:1e:6f:40:0d:08:
55:ea:07:58:48:1b:bb:2e:e0:5d:b0:3a:80:0b:99:
d1:b5:95:81:39:fc:ce:ce:c4:18:fe:ba:9e:8d:e1:
2c:ba:a0:f2:9b:ac:33:24:e0:db:80:05:9e:04:3d:
a3:0c:f0:e7:57:d7:ca:d9:d5:ff:58:ef:50:90:e0:
ab:38:36:ca:9b:5d:ca:d1:2d:75:9c:18:b3:aa:24:
47:1f:b8:4e:aa:7a:5e:88:e9:77:7f:e5:8e:37:44:
e3:a9:40:b5:30:13:31:02:c6:73:f9:8e:4a:a3:f5:
dd:c6:90:4b:cb:e6:53:f6:f2:79:13:63:d0:ae:b1:
df:91:88:07:cf:76:62:3f:75:9e:fd:e3:96:2e:2e:
bd:67:ec:01:6e:6a:4a:0a:cf:94:58:68:e3:1d:82:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:32:34:1E:D6:4A:C1:92:BC:04:CA:81:90:F3:B7:33:F2:F8:DE:B9
X509v3 Authority Key Identifier:
keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:48:d2:72:9a:50:de:ab:44:61:eb:c8:17:4c:a2:17:ad:32:
a4:f1:09:a6:ea:37:3b:3c:d8:d5:d6:ac:1c:20:ae:82:17:7c:
b6:d8:10:1d:d5:91:e1:f7:f1:a7:e5:57:9e:69:ad:cd:44:b2:
91:3b:ee:f1:c8:03:7f:2c:13:04:89:5a:64:31:d7:4d:0c:b3:
86:4f:54:0e:32:74:e2:62:8c:fd:94:28:c7:3d:0d:21:16:f1:
d7:45:bf:79:57:13:c7:51:25:9f:c1:93:b5:11:00:71:91:fb:
24:7e:af:6d:12:67:da:13:79:82:1c:86:da:6e:ba:b7:2e:85:
cb:95:9f:b3:f6:ed:77:b9:e8:0d:6f:d9:07:e4:2f:15:75:26:
dd:4b:52:d2:2e:1a:d6:7b:5f:25:6f:3a:5a:1c:dd:de:3c:ff:
69:1f:cd:f8:41:88:f8:16:15:7c:70:a0:1e:14:99:d3:ee:7e:
1f:11:04:4c:88:d0:e3:96:2b:f1:78:35:9b:bf:33:52:3f:80:
a5:9c:e5:19:98:70:44:0b:86:94:78:f5:f4:07:63:d3:a2:89:
fb:70:3a:91:b6:7c:0e:f6:45:38:83:cf:d8:d0:51:40:9a:43:
2b:01:f9:dd:5e:57:2c:2b:cc:75:58:90:8e:82:63:b5:30:73:
f5:c9:78:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:15 2025 by rpki-client