Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
File: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft (raw, json)
Hash identifier: fI12yvuz6ypEGHRThS+e/X+C6LhlCHd9BHq5AuGaK1w=
Subject key identifier: 10:58:54:5F:CC:DE:E2:C0:2C:E3:1F:FA:49:81:CA:C2:DC:AF:F3:08
Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
Certificate issuer: /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Certificate serial: 01974BFB0A19C2FF762DE5144A41A46921AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
Manifest number: 0DDA
Signing time: Sat 07 Jun 2025 20:00:32 +0000
Manifest this update: Sat 07 Jun 2025 20:00:32 +0000
Manifest next update: Sun 08 Jun 2025 20:00:32 +0000
Files and hashes: 1: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl (hash: aWUvtITeAKq2xVMIN2ru+DtJBReXNoFp6qD1Bk1s1VU=)
2: epxu4ldel37euJv5iKK-6i05AIc.roa (hash: 8++9DWFJDI5Z8sw+rLXkJDDM4NKVAVZxp3Q8VNvU1K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:0a:19:c2:ff:76:2d:e5:14:4a:41:a4:69:21:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Validity
Not Before: Jun 7 20:00:32 2025 GMT
Not After : Jun 8 20:00:32 2025 GMT
Subject: CN=1058545fccdee2c02ce31ffa4981cac2dcaff308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:3f:dd:33:c2:2e:20:5b:6f:17:1c:9b:4e:
51:47:dd:ea:13:bd:14:5b:d5:f4:a2:ce:22:0c:4c:
a4:29:ac:2e:11:af:d6:ab:8d:b6:de:e2:2b:a0:ea:
f7:a1:c7:22:b9:6c:9b:d3:03:9b:8c:b0:e4:d3:b4:
b6:fe:ce:41:d4:42:9c:1a:06:17:cd:a7:a1:a0:cc:
9d:12:db:7d:ea:f1:9e:73:f9:a0:11:2a:07:1c:66:
7a:a7:fb:7a:c8:57:e6:a1:5c:3d:28:1a:68:2b:54:
51:32:4c:3a:8d:bd:78:2a:90:d1:4e:4b:79:36:d8:
41:a9:1e:33:12:df:74:81:f5:51:e2:64:d4:a1:91:
b8:6c:85:b6:dd:5a:92:08:81:32:0e:e9:a9:f0:c7:
97:05:56:aa:c2:14:d5:5d:9e:c8:a4:84:70:9e:4e:
0d:d6:82:24:77:7f:19:5a:f2:0b:af:18:a7:8e:f3:
a1:4c:30:59:20:d0:0f:46:87:29:d7:fd:94:06:27:
c1:35:ba:ea:d9:28:e0:12:2d:ab:cd:63:ba:08:5e:
8a:28:e7:a9:42:45:5f:30:a5:c9:30:bc:d6:45:a8:
b6:0a:4e:95:1b:71:2a:30:a1:b6:42:4b:ce:e3:d8:
c8:e8:dc:d0:a7:99:1b:43:53:2e:6f:9c:b0:05:ad:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:58:54:5F:CC:DE:E2:C0:2C:E3:1F:FA:49:81:CA:C2:DC:AF:F3:08
X509v3 Authority Key Identifier:
keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:df:5e:2c:18:59:2e:7e:3b:5a:a4:41:0e:fb:d7:d0:70:3c:
46:9a:b3:04:13:85:82:20:2e:b5:fd:69:34:e6:8a:ab:f8:57:
e7:6d:c1:cb:9d:2d:8d:d8:fd:80:a9:6c:34:79:70:67:08:72:
a7:01:b2:5a:56:af:2b:b9:1b:51:e1:33:59:f5:13:4d:61:00:
ae:32:b2:ae:72:da:d1:28:b5:27:f6:d2:cc:73:0f:f7:dc:96:
9e:9b:53:67:e0:25:89:f5:29:22:a9:0b:82:d3:9c:8e:da:06:
0d:60:d1:33:e8:08:52:8f:d9:a3:10:6a:3f:a2:af:3e:28:3f:
d3:24:6a:68:f5:f5:57:ca:b8:7b:44:7d:03:b7:88:4a:25:17:
96:f3:b0:85:04:00:5b:f3:dd:4b:2f:d8:bb:58:04:54:13:20:
ca:58:64:cf:8e:ad:e9:72:b7:6a:3b:8e:4f:53:e6:0b:99:a4:
ad:89:a8:f2:cd:ae:37:2f:ad:19:33:3a:ec:27:38:65:09:84:
4d:0c:4c:8a:bb:68:07:fc:43:5d:2e:d5:4e:26:51:ed:95:b8:
08:dd:a6:16:35:3c:40:d4:22:c4:76:f6:93:d1:ae:ff:fa:8d:
75:45:5c:14:a7:d9:04:19:ad:23:ec:90:9e:83:57:88:83:56:
e7:02:31:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:21:50 2025 by rpki-client