Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json)
Hash identifier: YoVLJiUuMEtiRPlcZiAVRa/bYVu2/PEqQyj7/3iWTnQ=
Subject key identifier: F8:16:D3:C6:AF:C9:BC:9F:CA:7D:76:5E:A8:DE:66:2E:FD:B9:48:2D
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial: 019787A234E9C1DB36D9801F58F2CA718607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
Manifest number: 032D
Signing time: Thu 19 Jun 2025 10:00:43 +0000
Manifest this update: Thu 19 Jun 2025 10:00:43 +0000
Manifest next update: Fri 20 Jun 2025 10:00:43 +0000
Files and hashes: 1: _aJQ6oyDSsBM9CQBM0bENVTAfYk.roa (hash: TGsiDKL9QYKUEyLtO8kxrwWDCHZz/h4CK165UgZMbZA=)
2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: RVzmjy0g88Okmaki5YMdCMG4gwUinDwgkcFBx5IDcNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:a2:34:e9:c1:db:36:d9:80:1f:58:f2:ca:71:86:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Validity
Not Before: Jun 19 10:00:43 2025 GMT
Not After : Jun 20 10:00:43 2025 GMT
Subject: CN=f816d3c6afc9bc9fca7d765ea8de662efdb9482d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:df:0d:b4:00:d7:cc:f2:f2:70:3c:df:2f:
b0:9d:6c:55:d4:b9:9c:53:3b:d6:e5:4e:e3:41:89:
c4:7b:c6:df:41:6c:6c:aa:d4:24:7e:cc:53:6d:a6:
4e:f4:38:44:79:d3:a1:76:9f:84:91:7f:88:be:fc:
f7:af:33:ec:fa:78:2c:2b:be:74:d3:9d:f3:f5:9a:
7e:ef:37:94:36:3a:aa:2e:24:c3:8b:89:0e:4d:35:
98:d4:cd:31:e8:fd:2d:cd:c6:ef:e9:38:af:13:6d:
91:50:1c:5e:2c:8c:32:54:84:46:5f:73:8e:3c:f3:
19:cf:47:6d:ea:93:a3:5f:b8:ba:9c:59:7d:61:ea:
28:c2:d1:d4:f8:2b:52:d2:52:88:3c:f3:92:e5:cb:
41:21:d5:62:6e:fc:6d:3f:59:c8:64:d4:47:cd:3d:
19:19:67:cf:56:ac:ce:f7:b2:ac:ba:72:0f:3a:4b:
5b:6c:4e:ea:be:3b:a4:83:25:9c:2a:42:84:20:19:
fa:df:62:48:51:35:d7:6e:3f:f6:26:4c:81:e2:4c:
3a:8f:83:c8:ec:e9:7a:45:8a:07:41:50:7f:c0:93:
7a:1e:31:37:0f:00:ab:97:93:73:0e:b3:3b:76:da:
91:de:29:0e:5f:f3:ff:e8:9f:25:f4:bf:3d:97:4f:
ca:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:16:D3:C6:AF:C9:BC:9F:CA:7D:76:5E:A8:DE:66:2E:FD:B9:48:2D
X509v3 Authority Key Identifier:
keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:57:32:98:13:41:b5:c3:cd:9b:62:c7:67:2f:4f:2f:1c:c0:
54:c2:45:4f:be:b5:93:f8:b8:36:81:65:78:d2:15:15:1c:40:
09:98:9c:fe:b0:4e:bc:07:a2:d5:82:bb:36:4c:84:f7:58:75:
51:43:f7:55:6f:15:ee:c9:35:ae:b5:fc:1b:c3:fc:c6:e9:e1:
9d:e9:59:75:1e:25:c4:36:55:ac:23:82:49:90:45:61:f8:76:
0b:6f:cd:fa:93:8a:26:74:46:a8:82:e8:bf:d5:93:c0:df:d6:
92:35:26:83:bf:8c:21:95:41:a3:4e:37:b7:72:05:c9:bb:6e:
95:5d:a7:6c:4a:b0:c8:74:6e:24:69:7d:57:cc:8d:5c:6a:7b:
0e:5d:ea:d3:6a:56:8f:29:0b:f9:a5:94:f9:a2:14:69:9d:b7:
f7:92:62:48:8d:8a:67:f2:dd:7d:ad:78:08:45:04:b8:d5:dc:
d0:a3:95:0a:67:6f:ea:d8:3b:c2:63:0a:2d:75:90:f4:43:b5:
38:97:f1:fe:bf:13:b0:cc:5a:eb:08:88:40:11:8e:f4:8a:fa:
b7:c3:7f:c7:18:6b:ba:be:89:bb:27:18:fa:92:39:12:85:bf:
1d:be:1b:76:c3:a1:25:24:35:00:8a:3d:4a:cf:89:29:0a:7b:
ea:a7:a1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 19:26:40 2025 by rpki-client