Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
File: q-CopGLQ3h9NMBLD455c2mA-j5E.mft (raw, json)
Hash identifier: Gx931NVxQU3gAn6z9STWzKygs6g7bsXKnAsR/uU+xrA=
Subject key identifier: 67:09:51:0D:06:3F:20:A3:5C:E7:CE:95:E1:7E:92:8F:2B:6B:6B:C5
Authority key identifier: AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
Certificate issuer: /CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Certificate serial: 019873E37ED0B8DC0650B99D5A1F1CF8A289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
Manifest number: 1269
Signing time: Mon 04 Aug 2025 07:02:25 +0000
Manifest this update: Mon 04 Aug 2025 07:02:25 +0000
Manifest next update: Tue 05 Aug 2025 07:02:25 +0000
Files and hashes: 1: 1W5smHKXook3Cttl9rBFCphz4iU.roa (hash: pODFfCt0njdSi3l+0iabpv9dot/GnoaQcWWIJ30v1gM=)
2: q-CopGLQ3h9NMBLD455c2mA-j5E.crl (hash: TgXQIvVGxVhE5KbMfdEt+LjGD+XU4fxxqTL7asVvLSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:7e:d0:b8:dc:06:50:b9:9d:5a:1f:1c:f8:a2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Validity
Not Before: Aug 4 07:02:25 2025 GMT
Not After : Aug 5 07:02:25 2025 GMT
Subject: CN=6709510d063f20a35ce7ce95e17e928f2b6b6bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:21:af:e3:52:d8:77:05:38:06:44:e7:c5:13:
d4:c4:8c:21:16:77:c2:91:ab:8b:3c:2f:a6:6c:00:
9a:3b:02:c0:6e:20:90:fb:1a:83:e8:ed:d1:6d:a3:
a7:bc:a8:43:18:75:d0:1d:fb:bf:8d:a6:41:17:5a:
07:53:1e:3a:42:60:ff:2b:ae:fc:af:16:50:82:0e:
47:e6:cd:fa:0e:e4:05:cc:14:cb:e4:3a:02:3c:23:
f9:3c:12:bc:a8:29:fa:79:a0:69:52:06:7a:df:28:
23:c5:91:90:c9:0b:87:e4:7d:29:d5:0c:61:ed:b3:
65:70:86:1c:84:f8:18:e9:03:0a:84:6a:47:ed:94:
22:78:81:b1:a1:83:fd:73:18:a3:5c:ce:5b:71:ee:
da:ef:c9:d9:ce:3e:93:ea:95:66:51:13:73:0b:7d:
81:bd:78:1b:16:97:4b:0f:fc:56:bf:f8:28:d6:7e:
d9:c4:ab:38:51:ef:09:11:4c:49:ab:0f:d2:73:d8:
a6:23:3b:fc:d1:d8:4c:81:8c:0a:57:c7:8e:1f:41:
d4:81:bb:32:b1:60:0d:49:f1:e3:7a:a9:91:58:2d:
b0:bc:89:7b:e3:76:39:bf:02:6d:2e:72:15:44:18:
49:b9:0e:e9:4c:34:06:5f:69:f0:d8:6b:15:9c:07:
04:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:09:51:0D:06:3F:20:A3:5C:E7:CE:95:E1:7E:92:8F:2B:6B:6B:C5
X509v3 Authority Key Identifier:
keyid:AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:34:c1:1b:69:61:7c:05:8b:39:d8:fa:b6:79:17:ce:5d:23:
5e:ea:54:98:30:09:e2:a6:a9:ff:b4:27:24:8d:19:0d:c1:b0:
fc:f2:df:38:93:8a:a2:76:79:ed:a2:9a:4b:77:0c:66:2e:50:
f8:88:03:a0:f9:6d:8f:01:03:cc:b4:cf:1e:2b:d7:a3:81:bd:
bf:0c:18:2c:50:c0:d8:08:4a:f1:88:28:5e:38:ef:e2:51:97:
05:9e:b6:bd:03:fb:14:3d:66:17:d7:84:16:c1:b4:46:7e:d2:
ec:08:55:20:ec:37:35:1c:2e:d0:c7:d3:aa:ea:68:61:6d:cc:
81:1c:4d:54:d1:17:ae:47:dd:10:3d:1d:8e:ac:0f:9d:73:4f:
40:2c:36:2c:1e:bc:d9:94:dc:0a:1d:46:68:d3:f7:4a:d6:9e:
5b:cf:07:ee:21:a8:bc:c8:aa:0c:3e:6c:d5:fa:0b:3a:2d:ba:
d6:28:f9:3d:a9:34:02:15:8f:4e:99:ea:f7:ce:d6:42:0d:09:
7d:c0:e8:c9:49:b4:a6:e2:2b:cd:6c:0c:46:db:be:31:7d:4c:
3e:37:5f:b4:07:ce:67:15:8d:a8:18:38:65:6b:b7:e3:3a:bd:
b3:e5:a1:8b:a3:48:5f:6d:20:88:73:31:16:a8:b6:ec:0d:5d:
b6:f6:09:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:51 2025 by rpki-client