Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
File: qeC20TzRHzYRT6mEAzgElByC8UM.mft (raw, json)
Hash identifier: Z83HSmyb38/ECwVjsDs41Yuv3IXE4xKtQ/M+KmqYtV4=
Subject key identifier: 85:9B:22:F5:14:75:83:45:8C:88:F8:7D:50:DE:55:5C:FD:E1:0A:25
Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
Certificate issuer: /CN=a9e0b6d13cd11f36114fa984033804941c82f143
Certificate serial: 01977F0D10FF7F67C38C7D43A83EA7DC3C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
Manifest number: 1173
Signing time: Tue 17 Jun 2025 18:00:52 +0000
Manifest this update: Tue 17 Jun 2025 18:00:52 +0000
Manifest next update: Wed 18 Jun 2025 18:00:52 +0000
Files and hashes: 1: lO3U7O5xn_SH8biBa02wbaj6rwE.roa (hash: Ur2/ddmmedYhTdeyhrYUxfNHrSlslVFvOy6wD+8Tc1U=)
2: qeC20TzRHzYRT6mEAzgElByC8UM.crl (hash: ISwtKQGgZDzf3Gis9BmxxMUO/XtPTcaeUok6nSVfebM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0d:10:ff:7f:67:c3:8c:7d:43:a8:3e:a7:dc:3c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143
Validity
Not Before: Jun 17 18:00:52 2025 GMT
Not After : Jun 18 18:00:52 2025 GMT
Subject: CN=859b22f5147583458c88f87d50de555cfde10a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:a2:f9:1a:6f:fa:af:5b:03:51:a9:80:8b:
5d:bc:a7:3b:a4:7a:03:8b:fe:23:be:f3:6c:f8:48:
da:cb:d4:22:28:95:cd:02:d5:ce:ac:17:84:29:88:
c2:47:aa:63:42:38:10:46:a9:ef:ae:d1:1d:20:e2:
a5:17:62:00:dd:6e:99:d0:32:1a:ff:36:7a:f3:34:
55:18:cd:1d:06:16:49:92:30:b8:e1:55:77:a2:5e:
10:56:06:48:b6:68:be:18:3f:6b:a0:ca:6c:81:cd:
3c:f5:73:87:03:4c:40:51:5f:f7:23:99:52:80:c9:
f5:06:51:64:d1:e1:cd:73:06:a7:9e:ad:73:8f:1f:
50:8a:3b:a7:12:1b:45:9f:18:c8:5c:e0:bc:fb:55:
66:ee:a1:36:b3:ae:8a:e0:57:20:59:1c:72:41:2e:
35:aa:57:5f:de:82:c4:51:34:93:7b:39:d2:77:6b:
de:73:80:ab:f5:39:25:50:21:13:f8:4f:d8:61:49:
76:94:4c:1c:51:93:61:ff:56:b1:c9:66:f1:28:93:
68:ab:1d:97:bf:3f:b7:18:89:9b:33:c5:6a:60:f2:
b1:e1:1e:cb:ee:49:25:02:27:30:52:e9:06:d3:cd:
51:42:af:9e:2c:26:05:26:1b:a0:75:7f:be:7a:07:
fa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9B:22:F5:14:75:83:45:8C:88:F8:7D:50:DE:55:5C:FD:E1:0A:25
X509v3 Authority Key Identifier:
keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:bf:4e:96:34:47:1c:9c:75:fe:5a:38:85:c1:45:db:b9:9a:
df:94:4a:bd:ef:cc:7d:9e:e3:c2:2b:8b:b1:a8:5f:c0:3c:b1:
ef:a7:20:8e:f9:06:bf:d4:8b:0f:7c:63:40:c3:17:3d:67:43:
bd:00:42:bb:e7:74:e8:07:a7:f5:e5:40:eb:e7:93:be:ed:d9:
24:6c:dc:6c:d4:c1:66:8d:08:c0:4b:8c:17:36:96:9b:87:b1:
64:2e:d6:89:a4:c2:45:7a:0c:30:9c:24:f1:b0:43:1d:0a:e9:
4f:6f:fe:61:cf:d4:d4:f6:16:96:21:57:98:ca:f0:db:b1:b1:
e1:ed:65:07:ad:50:d6:19:37:76:77:b1:c4:de:da:cf:20:41:
71:0a:a5:9e:82:38:fa:30:7a:8e:7a:c0:23:9d:22:b4:92:68:
92:41:fb:63:2f:9b:71:4d:6f:58:06:72:7e:23:86:9c:42:ba:
ea:b0:68:fd:bc:6e:d1:33:59:9c:97:10:0d:c5:04:c5:1c:dc:
f0:a1:1c:cb:0a:0a:3d:03:5a:cb:d5:e7:15:50:5c:94:f7:61:
9a:b6:ba:af:1b:a6:ff:56:51:e6:f9:7f:2b:0c:6c:01:eb:09:
7f:d7:0f:3b:b6:bf:96:8b:08:5f:22:66:6c:95:7f:f0:f2:b4:
72:da:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:10:09 2025 by rpki-client