Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier: Uml2no7dc/Nk/RJmPZaHnEBtWcEqNcpB1Q9/6QEnHxM=
Subject key identifier: BC:59:47:FD:4F:F8:4A:D3:9A:44:D9:5D:7B:03:6D:56:0A:3C:30:59
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 01978545C6728BC7A9705EFAD9A0D12C94A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number: 0596
Signing time: Wed 18 Jun 2025 23:00:31 +0000
Manifest this update: Wed 18 Jun 2025 23:00:31 +0000
Manifest next update: Thu 19 Jun 2025 23:00:31 +0000
Files and hashes: 1: DcoOphnBv0Z-r0DRs1Wzn6GO5g8.roa (hash: /C9jr7QH16ykeDGqHdZ0LLAVK74Wkvu3hj1t3uV43yA=)
2: Nq6xP1ML7pMOmt1I4z-fGnkBjbQ.roa (hash: eP8YWZy4BtRcpeOrILokYjbMpuSFUnV4sCVcpAqWhwM=)
3: XmMK1HZ3DcPkTMV2el117ysMhn8.roa (hash: 4EKgTSdeFZXBlalCvjDw36pJD0WP5d5sVK8uLLXyrbI=)
4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: jSw6Q7lcigbrHc9rTnx4Bwyhcm5ki/1np1RZRaLmY1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:45:c6:72:8b:c7:a9:70:5e:fa:d9:a0:d1:2c:94:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: Jun 18 23:00:31 2025 GMT
Not After : Jun 19 23:00:31 2025 GMT
Subject: CN=bc5947fd4ff84ad39a44d95d7b036d560a3c3059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:74:71:b2:13:78:cd:c8:9e:cf:00:1f:c4:
bb:1f:0a:f3:b2:56:06:a4:20:f4:b4:85:84:f3:74:
64:19:0e:56:b5:ad:c8:c0:8e:28:38:4c:82:f1:e8:
eb:9d:b1:5b:68:ee:b2:ba:34:2b:f5:29:6e:d9:e9:
ff:b8:93:c0:07:bb:99:6f:ae:11:7f:ff:13:9e:45:
6e:a0:51:70:0e:43:2b:d7:5b:33:e1:7d:42:65:ab:
97:45:9a:ff:5a:a0:f3:58:1f:b8:76:64:52:e5:50:
69:6f:36:85:8c:e3:4c:08:15:b6:2e:b7:74:8d:cc:
08:bd:0c:57:36:36:d2:e0:c0:64:a3:91:83:8f:6a:
5c:1f:1c:04:d0:6e:ac:8e:df:c2:25:b8:0d:30:31:
67:49:8e:79:1b:c9:96:fd:99:82:0c:79:da:91:89:
6b:e1:72:91:10:bb:47:67:c8:de:3f:95:70:5e:86:
ac:d2:88:90:14:b6:0f:a1:61:98:a5:29:2e:4b:2e:
bf:78:e9:b7:e0:9c:7c:62:1f:77:89:78:8a:2f:f0:
67:90:c0:d7:6d:6e:5d:41:80:a5:82:cb:eb:51:2f:
ae:d0:3f:ed:a4:0f:69:23:a8:95:f9:d1:9b:55:13:
06:41:03:06:71:f5:1d:af:5c:eb:cd:89:06:a4:77:
c7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:59:47:FD:4F:F8:4A:D3:9A:44:D9:5D:7B:03:6D:56:0A:3C:30:59
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b7:e7:ba:14:ed:52:d5:51:7e:e4:37:91:54:71:06:af:cd:
7e:56:ba:6d:e2:75:60:2e:ae:d2:d6:e8:b5:db:65:43:f4:0c:
45:88:73:68:57:23:16:94:a6:c4:73:e5:27:f3:45:d7:c3:15:
92:74:2e:4c:b4:69:e0:fe:9a:78:70:31:a9:ea:96:7c:06:d2:
97:a6:8c:ee:ba:48:b8:d6:27:27:a9:af:f4:64:21:2d:a9:d3:
a8:90:d4:24:1f:a5:39:0a:1b:9d:43:d1:fa:28:87:31:85:b1:
45:df:99:23:58:8d:8f:57:21:9e:c9:75:49:b8:54:ec:72:dc:
32:34:a3:f6:fe:98:5e:9a:c3:bc:3e:70:64:b3:3b:9e:95:7f:
d3:4c:7a:ff:ac:1a:2c:40:50:58:4b:90:c7:4a:6d:9f:c6:1d:
a1:df:24:70:bb:89:03:26:bb:5f:ce:79:6c:98:37:db:b2:d5:
33:cf:6c:5b:73:cf:b6:56:0f:4a:53:60:c7:53:8c:a4:cd:0a:
a7:19:45:a1:17:14:88:d7:c9:0a:25:d7:5c:60:aa:63:c0:09:
48:de:c0:4c:ad:43:e1:4c:fb:8a:75:9f:67:00:8c:65:fc:c1:
ef:69:27:1b:15:99:98:b1:d1:3f:18:0e:9c:9b:ab:f9:11:f1:
e1:fa:f3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:56:22 2025 by rpki-client