Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
File: qiIvVnO4KKeuUvmboMYqzXCXSjg.mft (raw, json)
Hash identifier: kico7YH66a99BsJve+cWJLPqiqFdgZGKhXvAVB7cxNk=
Subject key identifier: 32:00:46:AE:F7:A8:B2:CB:CC:F5:0B:64:5F:6C:01:DA:31:27:5B:1A
Authority key identifier: AA:22:2F:56:73:B8:28:A7:AE:52:F9:9B:A0:C6:2A:CD:70:97:4A:38
Certificate issuer: /CN=aa222f5673b828a7ae52f99ba0c62acd70974a38
Certificate serial: 01977007D89BFB7E2B28B7DD8CC9C17C1357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
Manifest number: 028B
Signing time: Sat 14 Jun 2025 20:00:51 +0000
Manifest this update: Sat 14 Jun 2025 20:00:51 +0000
Manifest next update: Sun 15 Jun 2025 20:00:51 +0000
Files and hashes: 1: Lh_NKL7D2mWFyhzHGugt5SgY5Oo.roa (hash: DjvsQWCGurUIzxMM5VASKrLIiSf6rVM8+QHojBeXG6I=)
2: qiIvVnO4KKeuUvmboMYqzXCXSjg.crl (hash: rGZGVeGfxnTZSYJybFgaLWEbL9qL+XKhYGrEsydkfgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:d8:9b:fb:7e:2b:28:b7:dd:8c:c9:c1:7c:13:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa222f5673b828a7ae52f99ba0c62acd70974a38
Validity
Not Before: Jun 14 20:00:51 2025 GMT
Not After : Jun 15 20:00:51 2025 GMT
Subject: CN=320046aef7a8b2cbccf50b645f6c01da31275b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:54:62:06:95:a7:fb:ce:72:50:12:8f:12:76:
98:30:ba:31:cb:d0:98:57:c4:03:05:c3:13:5a:4b:
cd:bb:3a:c3:e6:e5:17:4e:d6:15:90:ed:00:7c:e2:
6d:b6:b4:ec:c8:38:8d:be:0a:de:1b:1a:d8:47:58:
2c:0d:81:2e:5e:e5:7e:85:7f:ec:fe:df:65:30:15:
9a:a1:7c:88:7e:76:66:c3:38:17:f4:56:3d:35:ee:
7d:3f:eb:e1:9f:f3:5c:71:c9:20:fa:c9:fd:4b:ae:
88:10:9d:7e:5f:d3:51:77:f8:7a:99:f7:08:97:d8:
70:1c:a7:15:13:41:67:c3:52:c6:60:7d:54:78:d8:
fd:0f:46:bd:7d:85:54:ff:e2:4f:f5:0a:e6:d1:a4:
9d:65:3a:a3:8d:9c:ed:73:a3:04:8f:39:15:7c:2d:
89:55:e1:f6:27:d3:8b:eb:d6:d0:cc:c3:6b:6b:00:
09:f5:41:5b:db:19:10:68:0e:45:e1:24:2f:dc:64:
14:20:2f:46:37:e2:28:bd:53:a2:58:66:5b:e6:16:
c6:2e:ce:66:57:5e:a0:b5:0a:4d:a5:ef:2c:11:92:
4c:6e:1f:3f:6b:37:45:8c:d5:4f:c2:19:ae:df:f0:
b4:64:05:72:6c:ef:81:7b:dc:9a:f0:bc:b6:dc:15:
9c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:00:46:AE:F7:A8:B2:CB:CC:F5:0B:64:5F:6C:01:DA:31:27:5B:1A
X509v3 Authority Key Identifier:
keyid:AA:22:2F:56:73:B8:28:A7:AE:52:F9:9B:A0:C6:2A:CD:70:97:4A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:50:e2:47:03:8e:2b:4f:07:0b:6c:30:55:ff:ec:1b:c5:d0:
11:f8:c4:12:cb:4a:3e:77:85:c6:eb:12:2d:13:0a:bd:02:0d:
4c:8c:17:b5:4d:cd:f6:93:60:5f:b9:99:73:ce:04:e7:9e:83:
90:61:d5:05:9c:89:21:a8:b2:7a:3e:ae:43:b3:53:60:35:41:
51:ae:4d:68:13:f3:6f:da:55:b4:e9:f8:62:c0:0d:9b:fb:ba:
4a:66:25:75:e9:19:ae:7d:b3:f0:14:6f:f7:9a:91:a5:6d:4f:
81:75:83:a0:77:b4:a2:1c:a5:b3:8f:b2:32:bd:2b:7c:3c:21:
28:17:70:d3:3a:51:68:84:87:e8:55:b6:50:90:cb:76:8e:77:
8d:de:10:66:6b:1f:7e:a0:47:e0:77:92:40:7c:96:64:06:39:
55:16:36:00:52:2b:8d:65:4e:62:14:27:6f:0b:ae:34:8b:3f:
c4:89:00:28:b2:ec:35:96:d8:10:7e:8c:38:e7:cf:b2:a9:78:
a6:b1:c9:46:e9:63:4a:ae:95:b3:7a:d3:31:4b:ee:23:cf:bb:
af:49:65:6d:e1:c4:58:c4:30:6b:2f:c8:cd:a6:7b:e2:7f:ce:
20:3b:7d:ee:9c:30:15:c7:95:14:d8:1e:e4:d6:05:81:64:80:
9d:dc:1c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:10:03 2025 by rpki-client