Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
File: qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json)
Hash identifier: kB/WgZC4m0wvLJ3CX75cbkyjKMyOHnA1tIp2HLAKcUM=
Subject key identifier: FC:85:0C:D8:19:60:F0:1B:55:87:18:E4:6E:02:54:97:B2:EC:8F:A6
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Certificate issuer: /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial: 019768BC48A7F6CC6F8C34E5B1B2AE7EFFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
Manifest number: 1520
Signing time: Fri 13 Jun 2025 10:00:59 +0000
Manifest this update: Fri 13 Jun 2025 10:00:59 +0000
Manifest next update: Sat 14 Jun 2025 10:00:59 +0000
Files and hashes: 1: _n0xC-sidbdSFPfTnRV-lr4kGic.roa (hash: ++bpQemmXYA46AzwIRn3gko69y6uULCJsSLSxSSwsGM=)
2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: +B2tq8OxiEhwx1GSX5KKCfPFSFWyVuppChA0g7PCkBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:48:a7:f6:cc:6f:8c:34:e5:b1:b2:ae:7e:ff:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Validity
Not Before: Jun 13 10:00:59 2025 GMT
Not After : Jun 14 10:00:59 2025 GMT
Subject: CN=fc850cd81960f01b558718e46e025497b2ec8fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:ed:c8:9d:55:f9:50:90:99:3f:e7:f6:89:
e8:37:1c:50:64:30:3a:d4:d8:56:1d:00:3e:9e:4f:
8d:ba:85:da:fa:c1:a6:3a:e9:0c:5b:35:a7:ea:e1:
10:2c:ae:69:ba:93:ea:0d:59:2a:e1:5b:17:12:5d:
34:07:a4:19:cc:5c:9e:5d:d5:00:0f:a5:d5:b8:88:
34:bf:ea:b8:93:39:4f:b9:ba:cb:a4:d3:4f:ec:ea:
0d:08:65:8e:6e:a5:f5:dc:18:3a:17:b3:07:ee:e7:
18:87:fd:1c:1f:28:22:3c:e7:0b:e3:e0:40:79:78:
c2:f3:3e:bc:32:86:26:eb:27:3c:d1:a6:a6:07:cb:
3c:48:e9:f0:f2:a7:16:ce:9a:7c:fc:0e:83:22:2b:
12:f7:09:59:ed:c8:c2:e2:28:bd:43:2e:99:01:04:
3a:a8:6f:c7:c8:d8:1a:06:87:3d:95:2c:82:06:1c:
7a:1d:75:22:30:8f:50:53:7c:4a:52:59:e8:ad:85:
a1:1c:45:22:b2:ae:7d:3a:64:b8:d8:4e:53:b2:fa:
f8:28:55:72:74:87:78:ac:3b:c8:71:bd:88:35:02:
20:fb:ec:92:4f:bb:ec:0c:15:1d:b9:fa:2b:0e:dc:
2b:54:15:b8:a7:27:42:9a:c3:50:e3:5e:06:b5:19:
b0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:85:0C:D8:19:60:F0:1B:55:87:18:E4:6E:02:54:97:B2:EC:8F:A6
X509v3 Authority Key Identifier:
keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ee:68:12:35:0f:23:b2:83:2e:54:8e:b7:fb:d1:69:d6:9c:
fc:b9:df:74:3c:df:21:63:49:48:43:30:df:de:b7:ab:22:15:
91:3e:1a:ba:c2:8d:bc:30:54:d8:94:71:09:a6:be:bc:1a:4d:
1a:4e:2e:a4:b5:40:98:5c:c5:1e:e6:0b:56:4b:97:a0:82:f4:
81:4c:80:b6:14:31:ce:9d:44:8d:bf:9c:7f:92:65:60:7c:2e:
8a:92:96:61:34:92:f8:4a:e0:ef:a2:e6:81:92:cf:c5:db:0f:
8b:38:35:84:93:c2:90:52:0d:39:41:42:9f:ce:ce:25:f5:44:
6a:99:9f:ed:62:80:05:ac:4f:7b:59:b5:e0:99:85:f8:5f:d0:
3e:24:80:46:7c:da:36:8f:ce:d7:15:f8:46:1f:56:d4:8e:6e:
51:51:95:43:5c:70:ca:61:56:be:0c:48:f7:6d:97:d2:75:92:
55:ad:99:65:30:7b:af:78:67:2d:f5:10:d6:c4:b8:57:cc:0e:
10:97:e8:0c:93:8e:be:4c:83:d1:46:02:29:3e:d2:85:8b:5c:
84:b6:97:d8:f8:df:3e:1d:2d:98:e8:4d:8a:6e:99:e2:7c:9c:
db:96:eb:0e:6e:47:97:24:9a:7f:b8:58:40:d6:db:f8:f6:a2:
13:d4:c0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:35 2025 by rpki-client