Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
File: qw8tGCnW-40kf6TpZY6hfwbACwU.mft (raw, json)
Hash identifier: QnizhKWzu2F0nmFsKGstN3VLhnqvlibem/OFFsQhkBA=
Subject key identifier: FB:9A:06:92:3E:1E:66:7D:36:F0:84:42:E4:5D:00:E2:3A:7A:21:7B
Authority key identifier: AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05
Certificate issuer: /CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
Certificate serial: 01976EF4E1994F71FCF317EE7136A8380341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
Manifest number: 0425
Signing time: Sat 14 Jun 2025 15:00:31 +0000
Manifest this update: Sat 14 Jun 2025 15:00:31 +0000
Manifest next update: Sun 15 Jun 2025 15:00:31 +0000
Files and hashes: 1: OUpskfGQwP1azsM6n4Ec-VCqNso.roa (hash: +d2WLz7J+vMS5D/Rs6fGhF8erps5E2C6DQvq3JVrWbY=)
2: qw8tGCnW-40kf6TpZY6hfwbACwU.crl (hash: K3ka8oF4GJf+3M/rsaZUEyOdb0CqwCQsUGBdoDNj/54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:e1:99:4f:71:fc:f3:17:ee:71:36:a8:38:03:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
Validity
Not Before: Jun 14 15:00:31 2025 GMT
Not After : Jun 15 15:00:31 2025 GMT
Subject: CN=fb9a06923e1e667d36f08442e45d00e23a7a217b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:ae:9b:c0:60:a8:ac:1c:19:28:c4:f8:f8:
0b:c7:ee:ae:83:5a:19:94:69:7d:e0:73:39:05:ac:
47:2a:5a:59:a7:6c:34:31:4a:d8:be:2e:3d:14:e5:
c5:43:ed:58:69:68:52:23:ed:71:34:c9:09:5c:5b:
6a:f3:08:15:69:be:55:17:0e:38:77:3b:e0:d0:80:
c3:13:f8:29:15:e6:3c:39:2c:f2:51:b4:e2:25:89:
4f:b2:9b:48:c0:c7:f4:98:c7:f6:a9:b2:7c:bb:04:
d9:fd:07:f8:9d:2c:aa:23:b1:a7:a1:31:5c:e1:fd:
2a:01:74:5a:34:29:d2:28:49:1d:d5:a7:bf:ae:dd:
8e:e9:0c:38:66:6f:bb:d3:49:10:f3:78:62:c9:8f:
5a:c4:38:6f:27:32:68:60:96:95:5f:72:cc:ed:cc:
c1:16:10:26:af:d3:d0:db:81:d0:60:64:cc:09:53:
89:5d:ee:6e:d5:23:30:3e:93:b1:95:e4:b7:db:65:
85:04:af:20:4f:7a:33:aa:c3:94:9f:a4:33:c0:98:
bb:e8:b0:c5:57:f6:bd:ee:9d:6c:1a:e8:f2:41:65:
05:b0:de:7d:27:79:31:b7:99:2a:f7:ed:c4:be:4b:
aa:25:1b:dd:02:c5:26:fd:a0:ba:4e:2c:28:d9:d8:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9A:06:92:3E:1E:66:7D:36:F0:84:42:E4:5D:00:E2:3A:7A:21:7B
X509v3 Authority Key Identifier:
keyid:AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:90:69:43:51:fa:d2:c4:f1:f8:ab:b6:91:bb:9f:af:cc:c0:
2e:4b:5f:6c:06:42:82:9c:70:4c:b1:82:13:eb:91:73:79:31:
90:5b:db:f8:91:74:72:ed:66:9c:f8:83:45:5a:85:08:0c:c6:
85:c6:67:86:c9:85:a6:23:c9:9d:d6:83:3e:74:75:98:c0:70:
66:41:4c:f9:0a:fa:71:5b:66:4c:8c:58:20:ed:75:38:70:08:
eb:80:39:94:b6:91:4b:81:03:75:d3:8f:d4:a5:2f:31:59:c2:
6b:fa:5d:86:99:a5:cf:7b:11:17:17:dd:88:e8:57:bb:07:e7:
05:d0:1f:34:54:e2:af:ac:d0:12:58:86:b3:e6:4a:bf:60:1d:
5a:f6:79:62:e6:40:2e:26:3c:69:8a:05:66:4f:c4:8f:eb:48:
be:47:be:81:af:ad:1d:88:e5:1e:5f:03:e0:a2:c2:1d:8c:21:
0d:a4:00:f3:90:a6:0a:35:d4:1d:33:b7:d6:6f:a5:cd:15:0e:
0d:a5:67:91:0b:62:eb:c4:12:ba:a9:57:0c:f1:a0:66:c5:9b:
1b:6e:26:ed:dc:7d:be:fa:c5:cb:26:2c:26:4a:f8:19:8e:5c:
10:62:1d:00:58:f9:ef:e8:f7:3e:ab:f9:e3:f8:45:5c:5e:fc:
73:7c:9b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:07:00 2025 by rpki-client