Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.mft
File: qF7VXxRNceZz5j9LdnDEE0TAlYA.mft (raw, json)
Hash identifier: Wvx/yBTXdONAKfAsrWcQOdJdvJOxJYBq3Orjshd0U3w=
Subject key identifier: 80:98:55:D4:D9:41:F6:92:C6:0D:AA:62:61:D7:32:DE:E5:1E:3B:A8
Authority key identifier: A8:5E:D5:5F:14:4D:71:E6:73:E6:3F:4B:76:70:C4:13:44:C0:95:80
Certificate issuer: /CN=a85ed55f144d71e673e63f4b7670c41344c09580
Certificate serial: 01976C98B692A2F03D907498A5113270D382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF7VXxRNceZz5j9LdnDEE0TAlYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.mft
Manifest number: 011C
Signing time: Sat 14 Jun 2025 04:00:36 +0000
Manifest this update: Sat 14 Jun 2025 04:00:36 +0000
Manifest next update: Sun 15 Jun 2025 04:00:36 +0000
Files and hashes: 1: cT2eGd63Px5rG_L6GRT2XCwHH8E.roa (hash: +Vm6cesMvrKle1O+NFaMGbBUxTSdI75W5YWzhqJGopE=)
2: qF7VXxRNceZz5j9LdnDEE0TAlYA.crl (hash: 734YQXFqQn64Y0stBgUQkKMLB5JY+ZMB7s7b0+SYF8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF7VXxRNceZz5j9LdnDEE0TAlYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:b6:92:a2:f0:3d:90:74:98:a5:11:32:70:d3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85ed55f144d71e673e63f4b7670c41344c09580
Validity
Not Before: Jun 14 04:00:36 2025 GMT
Not After : Jun 15 04:00:36 2025 GMT
Subject: CN=809855d4d941f692c60daa6261d732dee51e3ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:db:e2:db:c9:21:5d:5d:1c:8f:ee:25:6d:
1c:b7:44:83:06:5e:24:9e:99:d5:59:d9:ae:b0:e5:
11:8b:de:17:4e:58:fc:ad:9d:b8:8e:f5:cd:6d:4c:
21:2c:ad:a8:34:c3:ea:a8:35:af:9a:af:cc:d1:30:
65:d4:8c:0e:33:b1:11:1b:ee:08:81:40:4d:74:b8:
60:35:9e:9d:fa:32:67:67:96:98:2b:bd:07:e2:85:
22:fe:6a:53:da:c1:28:c4:6f:1b:a0:b7:ab:6c:fc:
e0:0d:67:ca:c1:43:41:14:6d:55:58:1b:c9:c1:15:
b5:ea:4f:13:43:d3:08:41:ca:cc:56:70:c5:8c:2b:
7a:ce:22:79:5e:cf:96:a3:e0:14:f5:da:1a:67:a3:
03:17:08:bc:0f:c4:0a:a0:ab:fc:ab:1a:a6:21:af:
98:69:b4:52:3e:03:9f:a5:0b:93:48:db:0e:76:e6:
64:f7:e9:a9:4e:31:85:fa:f8:9a:40:11:d6:21:95:
49:a1:8d:63:33:6f:17:64:62:97:af:b4:40:15:8a:
f9:db:f7:6a:13:91:aa:8c:44:0e:b6:29:15:a3:21:
9d:05:ac:f0:56:9b:d8:9a:e8:98:ec:40:f0:de:f4:
1e:f8:e5:ca:e3:07:5c:11:e6:e9:04:f4:e9:c8:35:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:98:55:D4:D9:41:F6:92:C6:0D:AA:62:61:D7:32:DE:E5:1E:3B:A8
X509v3 Authority Key Identifier:
keyid:A8:5E:D5:5F:14:4D:71:E6:73:E6:3F:4B:76:70:C4:13:44:C0:95:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF7VXxRNceZz5j9LdnDEE0TAlYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:04:a8:2c:76:84:69:c7:66:9e:e8:c9:c6:1b:a4:49:33:49:
7e:2e:db:b2:27:f0:51:70:51:a6:7e:42:67:33:5f:4b:25:db:
7d:6c:9a:fb:35:3a:03:1e:70:75:97:43:9b:72:9a:3a:97:26:
68:06:72:0b:6c:77:53:80:7b:c1:0d:ae:65:e9:ab:0a:0d:48:
64:a6:50:d2:09:e5:8a:83:f0:87:d3:2b:ef:d9:0a:ce:5e:0b:
c1:f8:53:04:63:24:77:3d:0b:d3:ef:87:a2:2a:a6:9d:e3:69:
8c:46:2f:b6:41:08:b1:85:c9:56:bb:a7:65:71:a0:1c:36:c1:
a9:e4:c6:8b:78:58:07:54:32:fc:9b:48:2c:c3:04:e1:95:de:
e1:58:aa:65:c5:82:31:f2:4c:5a:7f:f1:a2:8f:30:49:85:8f:
eb:72:79:1a:ef:d8:48:6f:40:72:93:58:90:ad:69:f9:d9:06:
8a:45:ed:0b:ee:54:7d:d1:75:1d:11:0b:dd:28:a3:06:59:17:
e3:4f:8d:2f:88:d4:f8:3e:b9:34:95:a3:c7:51:91:ef:e0:4a:
7d:c5:43:cd:f7:2c:29:82:f9:fc:bb:91:fb:2a:d1:76:19:b7:
f1:4e:71:f6:69:11:00:b3:49:f2:3e:38:1c:e6:c8:66:d8:28:
94:7c:e4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:20:19 2025 by rpki-client