Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
File: qQ35UgJATbHy5A7D3n7sON1qn-4.mft (raw, json)
Hash identifier: 029Vgt7xUSAhHmKe6bzedI3M3kGC75o9chkijd5IMrg=
Subject key identifier: D0:22:06:6B:77:AB:54:F1:F6:8A:36:8E:85:DD:D7:3B:BE:75:39:6B
Authority key identifier: A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
Certificate issuer: /CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Certificate serial: 0197771CDA8C16741A4E60B93C6618E9D38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
Manifest number: 0129
Signing time: Mon 16 Jun 2025 05:01:08 +0000
Manifest this update: Mon 16 Jun 2025 05:01:08 +0000
Manifest next update: Tue 17 Jun 2025 05:01:08 +0000
Files and hashes: 1: qQ35UgJATbHy5A7D3n7sON1qn-4.crl (hash: +6byGFvRFPH59fn1mgwoypimwmEoyqtl4rP8WPE5gCU=)
2: xDaTSU1r08U3icbYzh9eT36EBN4.roa (hash: AXlgpTaBb24aHDSoXt8sy77THaBujLte6mCP+q3Zt1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:da:8c:16:74:1a:4e:60:b9:3c:66:18:e9:d3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Validity
Not Before: Jun 16 05:01:08 2025 GMT
Not After : Jun 17 05:01:08 2025 GMT
Subject: CN=d022066b77ab54f1f68a368e85ddd73bbe75396b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:4a:20:a7:2c:f5:b5:f0:7a:f4:b1:e6:a8:
0f:3c:10:8a:8f:5a:9d:cf:c1:ae:51:b9:f9:4c:36:
3b:5f:60:29:f7:93:0f:85:86:4d:b4:c9:3b:26:e8:
43:f1:75:ca:04:b2:63:2e:d8:d0:3a:b4:2c:fe:01:
ba:e5:e3:70:38:4d:7a:86:f2:93:67:fb:fb:c4:ce:
db:5e:ee:7e:8f:40:46:8b:54:3c:04:bc:64:eb:29:
32:bb:29:48:87:87:b6:ca:9b:59:53:b7:fb:5b:ef:
ca:b4:2f:54:a6:c9:b2:3a:00:cb:ad:75:17:da:24:
54:57:45:25:1a:88:ea:dd:ab:48:db:ff:61:2b:7f:
12:e0:b6:df:5e:e6:d3:07:fb:f7:50:43:54:24:d7:
d3:df:8b:7f:e7:ea:fb:c2:ec:63:8c:9f:1c:34:23:
6d:60:7c:49:76:36:09:a9:7c:17:79:6b:ab:39:82:
26:ae:53:c0:79:1a:50:5a:80:9e:93:71:5b:95:b2:
c1:b2:90:cc:e1:4c:d1:46:51:27:56:2b:8b:65:4c:
a6:67:51:82:01:b9:7d:9b:b1:1e:49:dd:55:6e:aa:
dd:9a:94:06:92:99:78:5e:7a:1b:ff:c5:4f:55:e2:
b3:07:2a:d7:0f:e4:3a:6d:c4:d1:70:03:63:b9:ef:
3a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:22:06:6B:77:AB:54:F1:F6:8A:36:8E:85:DD:D7:3B:BE:75:39:6B
X509v3 Authority Key Identifier:
keyid:A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:be:8b:66:31:2c:07:3e:f9:60:c6:eb:a1:68:59:0f:0e:cd:
bb:78:87:20:4b:1b:c2:21:a2:81:c9:7b:6e:f3:6f:de:9b:6a:
1f:66:4e:59:eb:08:f4:b4:b4:84:00:33:22:31:ce:c6:2a:e7:
c8:32:fd:59:e5:42:fc:5f:84:62:ee:53:f7:48:8b:91:50:1e:
28:1c:23:f9:13:bc:90:f0:1c:99:c1:6e:f9:5e:9a:c4:72:9a:
0c:6c:89:aa:f9:28:1c:0a:e1:58:e1:07:f2:b7:ba:5f:d4:cb:
a2:f4:07:2e:4e:a3:62:c6:d8:2c:f4:b0:56:60:19:03:30:d0:
75:fa:86:f6:a6:24:e2:19:91:e4:57:6a:a9:db:f5:8f:f4:ca:
61:4a:f6:c5:4e:65:a1:b5:f9:d5:51:b4:38:43:32:f8:fd:58:
c3:79:3b:de:52:a1:36:05:63:32:5f:62:42:c9:a3:bf:a8:2c:
46:57:e2:b6:8d:47:6f:7f:74:97:8f:ce:0f:4f:52:5e:be:6b:
7f:dd:09:85:58:f8:51:6e:96:55:30:95:1d:8c:f6:ae:9c:fa:
23:40:43:25:eb:36:d0:85:64:81:01:b8:2e:f1:3d:39:77:5d:
cf:b1:1f:57:09:4b:be:1a:ee:91:ae:9b:e1:b4:57:03:88:53:
64:a0:0e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:28:36 2025 by rpki-client