Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
File: qnp9oeIjsYMKC5G11hyDrSYMERs.mft (raw, json)
Hash identifier: OEw6fAs3jMhIRDc91Xs7yTWFcP398XQpEDBmyjWPi1c=
Subject key identifier: 0A:FE:89:ED:AC:3D:70:92:99:9E:E3:41:FE:A9:18:E6:3E:43:4F:C6
Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
Certificate issuer: /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Certificate serial: 0197771CB4A303352C70882B0F0966BA953F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
Manifest number: 115D
Signing time: Mon 16 Jun 2025 05:00:59 +0000
Manifest this update: Mon 16 Jun 2025 05:00:59 +0000
Manifest next update: Tue 17 Jun 2025 05:00:59 +0000
Files and hashes: 1: B2uv5t_GiMUr8rM-r5uKbUdnEoQ.roa (hash: YpVmIqGmMDZopEuL6KgYwvjCxwixGKfs5u+qFRIV/jw=)
2: qnp9oeIjsYMKC5G11hyDrSYMERs.crl (hash: 01XjSmuhAbkdx0CECY8CSv40u9qJNg4vC38IUX4IjqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:b4:a3:03:35:2c:70:88:2b:0f:09:66:ba:95:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Validity
Not Before: Jun 16 05:00:59 2025 GMT
Not After : Jun 17 05:00:59 2025 GMT
Subject: CN=0afe89edac3d7092999ee341fea918e63e434fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:ff:59:2b:3c:a5:bb:36:f7:d6:4e:6f:c1:
8f:f8:f8:62:cf:a3:4d:82:b0:30:da:d9:95:dd:d6:
41:b7:56:88:6e:b6:db:c0:eb:8d:73:8f:39:a6:25:
74:f2:31:93:52:fb:c3:3b:9f:77:dc:28:a9:13:36:
4d:e8:43:af:9c:01:a0:b1:45:c3:f8:7d:c6:7c:a4:
82:0f:79:ba:3a:95:a5:72:da:7d:21:45:5c:5d:e8:
c9:d6:70:4b:33:c2:2d:a0:ed:63:24:85:1c:a9:62:
ad:df:43:06:e5:66:d7:e0:2e:70:57:6b:30:3b:40:
20:45:dd:8d:fe:dd:ac:ca:bf:79:0b:08:36:57:ec:
96:3c:8f:1b:dc:c3:48:0f:0d:12:5e:62:b9:b6:24:
92:d6:12:a4:17:8b:a7:3f:a1:37:a3:0a:99:69:e2:
2d:a9:0f:17:7e:1a:05:02:0d:27:32:89:82:f8:f9:
94:10:47:ee:7c:81:1b:b6:47:df:2d:bd:76:4b:52:
60:66:38:e2:04:fb:86:45:5c:db:85:91:99:18:14:
38:cb:03:1f:f5:7b:de:0f:40:f2:c8:80:77:fb:e6:
c0:74:79:b4:4d:53:5f:43:40:d4:30:04:86:56:b7:
06:66:c1:af:23:b6:fb:c8:21:b5:eb:4d:a5:f2:8d:
eb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FE:89:ED:AC:3D:70:92:99:9E:E3:41:FE:A9:18:E6:3E:43:4F:C6
X509v3 Authority Key Identifier:
keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:72:f0:f0:45:5b:38:9a:a4:8e:54:0a:59:54:1e:e0:8f:e4:
20:02:9c:17:04:0e:01:51:d6:5e:46:8f:ce:a5:4d:53:a6:d5:
27:5f:b5:71:f0:ee:91:e0:f1:2c:c7:b9:47:d5:0e:b5:36:32:
da:e4:fe:38:47:f1:26:75:24:97:e1:8e:f4:71:cb:ca:3a:37:
95:d3:12:8e:0f:eb:27:0e:7c:d0:9f:f1:24:99:ff:19:2e:6d:
a6:2c:48:5c:87:a6:99:dc:ac:ab:22:ef:9a:be:7c:f3:df:13:
60:0d:96:88:a7:14:7d:52:f8:40:e3:f0:a7:1e:82:cb:fa:7d:
e5:c6:09:b7:0e:64:60:d4:56:2b:fa:f0:d1:95:fd:8e:25:62:
0b:f7:ab:c0:0a:d5:ac:79:e8:8a:97:5b:a1:4e:4d:18:8a:ff:
f3:5a:db:40:88:d7:44:73:fb:c7:19:d9:eb:76:23:33:9f:74:
3d:cf:43:07:b2:29:10:2a:d7:ee:e9:9e:15:e2:19:eb:0d:a1:
bb:2c:b6:94:9f:b7:a6:15:1e:15:02:7c:d5:11:6e:16:20:e6:
86:23:5b:71:8d:42:e2:4b:ad:c4:5a:72:d0:e5:d8:47:f6:41:
8c:4f:38:e7:dc:65:91:9d:48:5d:4f:be:33:26:49:79:51:c9:
e1:4e:7d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:16:07 2025 by rpki-client