Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
File: dq0qu3PflryxsdG42Z019bn9mCg.mft (raw, json)
Hash identifier: BLkrdwCxCI4um6pohaDZZaEiNLXvUh+RwYnBV0u43nw=
Subject key identifier: 69:B1:8E:3D:1F:A1:0F:30:C8:ED:59:94:35:32:94:26:DF:F2:6C:0D
Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
Certificate issuer: /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Certificate serial: 01977187E809627351F66FFD5781633537CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
Manifest number: 073D
Signing time: Sun 15 Jun 2025 03:00:21 +0000
Manifest this update: Sun 15 Jun 2025 03:00:21 +0000
Manifest next update: Mon 16 Jun 2025 03:00:21 +0000
Files and hashes: 1: IAlG_JZnxdKZaAbKbMqU0apa1zM.roa (hash: 6NM8ywaQ4KrTjMahsMkK26ddWwbEVRn9bOmHvEoirEw=)
2: dq0qu3PflryxsdG42Z019bn9mCg.crl (hash: IJ2j+8rCZOt7vaUOxU3fIr4Np4dgkQXCiOBmDQ2Qzys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:87:e8:09:62:73:51:f6:6f:fd:57:81:63:35:37:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Validity
Not Before: Jun 15 03:00:21 2025 GMT
Not After : Jun 16 03:00:21 2025 GMT
Subject: CN=69b18e3d1fa10f30c8ed599435329426dff26c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:34:2c:4f:82:1c:c1:ac:15:2b:6e:20:8d:4b:
9d:ed:5c:9d:fe:e8:e7:6d:9e:dc:30:94:35:b5:8c:
fb:48:86:ee:ae:00:c6:eb:5e:4c:fe:8d:93:ae:da:
d4:42:c3:08:08:81:08:bc:a7:f9:97:0a:22:7a:d7:
88:43:2a:d6:a2:96:ea:d5:0a:0c:a6:06:af:53:fb:
a2:db:09:04:47:6d:0a:47:3c:a0:47:fc:e6:4b:a7:
2b:a2:ea:10:7d:8e:9d:00:f4:aa:0b:b8:1e:43:8e:
d7:bd:43:ac:2a:3e:d6:21:a8:ad:53:6a:29:dc:00:
c6:e7:9a:01:26:82:22:98:fa:43:d1:6a:cd:bb:cb:
0d:b2:ed:ea:a4:bf:96:1a:c1:7a:b2:b7:f7:a9:66:
c3:64:bc:3a:2a:cd:df:2b:04:14:40:f9:c9:38:8b:
d7:e3:5a:5e:7e:8c:80:40:73:75:3b:ee:8f:9f:73:
b0:cd:1b:87:9f:5a:cc:57:09:75:07:d1:68:ab:79:
1d:88:66:00:b1:52:33:17:37:2f:6c:42:04:ca:74:
6a:c1:6c:3b:b7:25:84:fc:d3:a5:10:23:95:97:3a:
9f:4e:8f:55:21:dd:4a:f2:2a:31:07:b3:c5:b4:21:
2a:78:3f:39:ae:5c:37:93:b7:3b:2d:f9:cd:bf:2f:
91:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B1:8E:3D:1F:A1:0F:30:C8:ED:59:94:35:32:94:26:DF:F2:6C:0D
X509v3 Authority Key Identifier:
keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d3:90:34:e0:9d:a8:d1:46:24:36:5a:79:ce:f3:d4:f9:7d:
25:bb:41:eb:82:13:3b:71:f3:d0:91:6e:fa:71:1d:29:81:86:
b7:8e:e7:26:00:ef:64:51:23:3d:8d:df:20:28:b4:a9:31:e0:
3e:b0:c8:68:57:87:c1:1d:65:7d:37:a1:83:31:f5:2c:95:63:
ff:64:83:16:4c:bb:a6:b3:4f:71:1e:93:e1:2d:61:fa:2c:cd:
dc:95:88:a5:b9:92:3f:dc:a4:07:28:fb:83:e7:79:94:e6:ab:
b6:38:4e:d3:74:09:fe:e3:8e:ee:1e:4b:36:4d:55:31:40:ca:
94:12:bb:e5:f5:76:72:5f:8e:ff:40:6e:7d:2b:03:03:e9:f2:
72:c5:29:7c:5e:26:03:71:16:37:78:4d:d9:18:d1:b5:0f:8e:
4f:22:5f:32:07:ae:99:45:a3:2f:63:86:67:c7:2b:60:75:0c:
b9:8e:46:d2:41:5e:e1:01:d8:5b:ad:32:60:ec:eb:df:6e:4d:
be:dd:fa:0f:74:20:66:7d:42:db:9b:f0:b5:8b:dc:9f:0c:4a:
1d:cb:5c:26:1b:41:f7:21:11:bb:51:9e:62:ad:e3:65:95:f6:
19:a2:30:6e:2d:bf:e7:05:13:53:50:a5:69:2a:eb:87:50:01:
2a:e0:39:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:44:13 2025 by rpki-client