Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
File: qPSR8hDFe_RvtS1K8i5-z29M2oA.mft (raw, json)
Hash identifier: mJely4qsQqDjBTLb10lbRjTMH12wb+DIySL76Gnvu24=
Subject key identifier: 88:C0:69:8F:48:A7:1E:13:CD:96:BA:D8:D7:82:8D:DE:F7:85:CA:FC
Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
Certificate issuer: /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Certificate serial: 019768F2960FE1707AB6B344BD397257FE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
Manifest number: 0B69
Signing time: Fri 13 Jun 2025 11:00:17 +0000
Manifest this update: Fri 13 Jun 2025 11:00:17 +0000
Manifest next update: Sat 14 Jun 2025 11:00:17 +0000
Files and hashes: 1: ZZqXGnxEBhLfDD9lB7yOqiX8_H0.roa (hash: AmgNgGv8HaEfNgQu4ILsUPklwcafU90+t65Aj2bSX9Y=)
2: qPSR8hDFe_RvtS1K8i5-z29M2oA.crl (hash: 0tyqADqlpQSuw9xxkj6QvRPMsXLBGIwAa9HzXCcedAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:96:0f:e1:70:7a:b6:b3:44:bd:39:72:57:fe:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Validity
Not Before: Jun 13 11:00:17 2025 GMT
Not After : Jun 14 11:00:17 2025 GMT
Subject: CN=88c0698f48a71e13cd96bad8d7828ddef785cafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:f7:ce:9f:c7:b0:8a:c4:ab:7d:25:51:a2:
5c:4e:59:00:da:01:4f:d8:3d:f5:e2:bf:15:3a:12:
08:0e:37:04:bc:f1:83:08:41:ea:ca:98:f8:a1:2f:
fe:5c:2a:57:05:da:54:ce:ad:47:e0:57:f9:e5:5a:
e8:36:7e:4f:1f:14:f6:4f:e6:70:9b:b0:ea:50:2b:
91:c9:2f:32:e5:ed:08:43:33:6d:42:fc:50:94:9a:
54:97:34:23:46:fc:e9:d6:a5:71:a7:80:65:aa:5c:
41:e1:40:22:da:54:ab:39:88:25:8f:97:a8:21:e3:
4f:5e:55:38:3f:24:00:f9:fa:35:e7:21:da:f8:0e:
78:9a:67:60:b3:11:74:fb:bb:df:3a:d4:56:35:21:
97:2d:0e:33:05:a7:81:ed:93:af:68:8a:a3:fa:93:
76:f6:d8:da:f8:d8:c8:c6:50:7c:da:96:ed:90:cc:
60:54:5f:1d:19:e8:16:02:8b:db:13:72:14:68:d2:
34:2f:24:5d:60:ba:fc:f4:09:36:c3:24:f8:bb:eb:
1a:61:01:0b:4a:91:db:da:f2:2d:45:9a:f3:19:df:
5d:cb:6d:29:b1:0a:35:b7:a8:f6:06:cb:75:b0:e5:
d4:d4:10:0a:5e:8a:65:4f:d7:e8:e9:50:83:55:6b:
54:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C0:69:8F:48:A7:1E:13:CD:96:BA:D8:D7:82:8D:DE:F7:85:CA:FC
X509v3 Authority Key Identifier:
keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e5:2f:da:5c:89:0a:0e:14:6e:bc:b3:2a:f7:36:78:b1:2b:
78:46:0c:ce:2a:32:50:b6:4a:90:70:d5:ac:14:6d:30:19:1d:
b9:63:39:c4:ed:db:a9:1d:a8:c1:3c:1c:55:83:98:29:e3:d5:
bb:ba:2f:15:27:f0:d0:ec:17:58:61:e1:b1:70:6c:58:a2:7a:
37:7a:24:78:fa:67:17:5b:83:55:21:25:f5:58:52:2c:64:12:
df:1a:76:5c:ff:c4:76:ba:5f:0c:39:c8:cc:dc:5a:07:bb:86:
c6:7d:8b:0c:0f:a0:c5:21:ab:96:32:96:2f:59:9f:cb:c2:6e:
76:df:7e:95:0b:75:06:fd:8f:9d:f4:35:0f:ad:1c:4a:11:7e:
c8:76:ac:5a:2a:21:62:c1:f7:05:4b:78:86:5c:2f:ce:23:ab:
b8:cc:cd:85:71:ec:45:ec:c6:bc:5f:6a:76:48:1b:17:2c:d2:
2d:8a:10:96:f9:28:a2:2d:38:7d:82:47:ec:8f:6c:39:10:6f:
0a:7f:53:d7:82:6e:2d:9a:b4:9b:24:2b:49:33:03:a0:f5:a6:
e3:5d:2c:4d:8e:dc:cb:03:a2:1c:2c:c1:48:3b:9c:e2:74:0c:
66:e6:0b:70:ec:44:e5:03:cc:d1:6f:8a:37:8f:a5:c4:6d:30:
93:ba:04:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:25 2025 by rpki-client