Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier: 8onRslQLBYC8RvTeOLwdh1RPKwoRRXzLxXVFH4UJMck=
Subject key identifier: CC:7B:91:6F:23:3A:3B:5D:19:8A:12:30:9C:7C:29:C7:CE:76:6D:9D
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 01976EBE200A2F4A8C61600DA00A38DAB143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number: 1128
Signing time: Sat 14 Jun 2025 14:00:43 +0000
Manifest this update: Sat 14 Jun 2025 14:00:43 +0000
Manifest next update: Sun 15 Jun 2025 14:00:43 +0000
Files and hashes: 1: JkN8bIkVpi2C1QQ33sarGe3s8jc.roa (hash: qS4cYRYxbkUSSNoTxCHI4UmRIFnlPxYoJcBSjDIdM1g=)
2: d03ojnbuBeIJ-lnd7OihnLWEVxw.roa (hash: XlMC0ZRLbmiqoXJQRP7mRdNP4FsXpGfEzY9nYp5h2sg=)
3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: lifuqkUmcJZZQqdJeCBoEGGOYhKXQqNY37AaNA8aEcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:20:0a:2f:4a:8c:61:60:0d:a0:0a:38:da:b1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: Jun 14 14:00:43 2025 GMT
Not After : Jun 15 14:00:43 2025 GMT
Subject: CN=cc7b916f233a3b5d198a12309c7c29c7ce766d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:eb:ac:aa:08:9c:21:13:7b:13:4f:ef:61:
01:ed:f4:af:a2:97:29:a0:d7:fa:a5:e2:0f:bb:e5:
f2:b7:ff:1d:b9:b7:89:9a:fc:6d:49:73:bf:34:59:
52:a3:3a:73:e3:98:6e:f4:d9:a7:37:cf:3f:55:f6:
8f:93:d2:e6:4e:56:00:59:d1:c0:01:f0:83:6b:72:
34:1b:19:85:41:4e:6d:9c:92:7f:44:ae:b2:54:47:
be:52:03:1e:8d:6c:18:bc:81:9f:d8:54:15:74:25:
8c:1e:35:51:5a:b3:65:85:96:bc:e6:6d:d2:99:94:
9c:f5:bd:5d:14:3d:a8:88:08:80:71:02:4a:a2:6b:
0b:a9:08:d8:65:07:ae:46:28:9e:34:01:fb:b5:21:
5d:9b:15:2b:26:f4:a5:8a:2f:ba:e6:dc:17:06:e4:
e5:4e:d9:fa:a9:df:fb:0f:a6:a2:2b:90:2d:f2:73:
bc:59:bb:65:00:dc:32:f9:53:26:55:48:b6:ab:03:
c4:39:80:b6:d0:20:70:fc:3f:a0:00:33:4e:45:be:
93:2a:2e:c3:3d:60:f4:e8:90:6d:0a:da:fc:24:15:
65:e9:cc:91:69:f9:82:4b:25:f1:82:aa:3b:7c:33:
f9:3c:56:18:0f:de:dd:7b:7a:a4:28:47:38:1e:3c:
5e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7B:91:6F:23:3A:3B:5D:19:8A:12:30:9C:7C:29:C7:CE:76:6D:9D
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:30:8c:87:87:15:30:ad:5f:4f:02:37:90:82:33:43:87:3c:
97:2e:fa:fd:76:39:15:2e:74:07:38:84:8c:a3:c1:77:8c:1c:
70:38:f6:cd:48:fb:3b:5c:83:19:e6:cb:aa:bb:3f:07:b9:a3:
bc:41:23:94:47:55:6f:2b:1b:06:56:d3:38:c3:18:94:0e:c7:
00:5a:86:b7:99:7c:6e:b1:3a:b6:83:cc:22:b6:48:03:cc:5a:
89:d1:42:bb:cc:5c:f6:c4:bd:5e:0b:79:0b:14:92:b3:12:03:
4b:6c:2e:07:20:85:0a:11:a1:af:6e:fb:d3:6e:77:0b:54:38:
4a:7d:83:6b:6f:07:0f:c9:7f:8f:6b:e5:5a:94:73:b7:27:fa:
23:2e:fe:3e:c2:fc:04:57:b7:b2:b7:5b:5d:18:8a:5a:54:8a:
f8:e2:9a:19:62:c9:9f:a0:2f:dd:fe:3b:7d:5e:7f:eb:b5:73:
f2:4a:08:cc:67:fe:bd:25:69:cb:76:51:8c:39:94:29:e3:74:
17:e7:75:b9:49:f4:b2:c5:ca:a1:dc:6e:5f:be:18:ad:5e:0a:
98:17:59:63:ab:cf:de:1c:39:c6:06:55:96:45:6e:f9:db:70:
11:91:41:33:02:df:65:dd:f7:13:93:50:a4:9d:ac:a4:2d:9d:
de:cf:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:46:55 2025 by rpki-client