Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
File: 00QDowsxN1mvliav2NPSOAX8yA4.mft (raw, json)
Hash identifier: 4aGvbuKxHmAYuCPySoWZYaFly+O0QNwvnB3C2lp7vX8=
Subject key identifier: 47:04:5D:19:C6:87:E3:5B:45:54:48:24:96:3A:61:EB:A5:CF:1F:01
Authority key identifier: D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
Certificate issuer: /CN=d34403a30b313759af9626afd8d3d23805fcc80e
Certificate serial: 0197711AB6854C3E3A5DA94A72D03C73541F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
Manifest number: 13F1
Signing time: Sun 15 Jun 2025 01:01:05 +0000
Manifest this update: Sun 15 Jun 2025 01:01:05 +0000
Manifest next update: Mon 16 Jun 2025 01:01:05 +0000
Files and hashes: 1: 00QDowsxN1mvliav2NPSOAX8yA4.crl (hash: GyPyOGgN3c8gHThw1gs4yGzmf+cZl0U+PxOprzf7/Oc=)
2: cVpmuHdAZzlijHGAjGSKkGw9RjA.roa (hash: qNHNU4vOIkFIe1aGqstJlXjPN0jdP5RduNW12cDiCyg=)
3: yay3nN2FWSrpjXKo77YZUaENbjA.roa (hash: 3dd/DLtrx7aUgl5CmfhFn/D7OtLGGdM5Nn2M37wMGvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:b6:85:4c:3e:3a:5d:a9:4a:72:d0:3c:73:54:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34403a30b313759af9626afd8d3d23805fcc80e
Validity
Not Before: Jun 15 01:01:05 2025 GMT
Not After : Jun 16 01:01:05 2025 GMT
Subject: CN=47045d19c687e35b45544824963a61eba5cf1f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:0b:b1:ad:f6:43:a0:14:b6:12:99:5d:f9:
fc:ab:59:9f:af:50:90:e7:99:16:16:2b:f9:de:c3:
19:e2:41:ec:85:3d:19:c8:8a:40:ab:c9:f4:34:e7:
c9:9c:bb:a0:c7:cd:0c:75:0c:f3:95:36:4c:71:7f:
1b:05:6c:fe:ed:b3:2c:70:23:75:14:48:73:21:35:
d3:8e:92:95:3e:63:6d:5e:ba:ac:16:86:3e:12:a7:
32:3c:b2:24:2b:9a:51:cb:70:1d:c2:a7:14:f0:a2:
6b:0a:10:fa:1b:ba:e3:11:f9:fc:f7:8c:1f:e8:fd:
ef:b2:a5:b2:5c:a1:ec:f7:49:1a:7a:ae:51:ea:64:
4f:0e:85:e6:e0:fa:2b:66:6a:48:f1:b2:87:a2:50:
08:ac:15:cb:3d:6c:e8:48:a6:ee:40:f0:e5:81:56:
40:9f:c0:de:6f:a5:4e:6b:47:79:a9:18:45:fa:06:
ff:a2:35:73:15:a8:ed:da:b4:3b:5c:1f:33:20:ed:
36:11:d5:9f:6e:69:94:38:46:70:1d:29:8e:d9:65:
7d:c6:90:f6:aa:a0:d3:a6:66:a1:33:96:94:74:52:
f7:e8:5f:1e:1c:2c:4e:d8:78:32:d2:67:4e:bf:fb:
bc:d2:91:b4:d4:ea:09:1a:10:15:7e:ed:8d:f5:39:
a1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:04:5D:19:C6:87:E3:5B:45:54:48:24:96:3A:61:EB:A5:CF:1F:01
X509v3 Authority Key Identifier:
keyid:D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2d:27:02:cb:e1:ae:86:bb:71:67:5d:4c:12:1b:76:e2:6b:
85:3e:d6:4e:9f:3b:4a:fd:8d:8f:fa:82:17:f8:d7:95:22:bc:
a0:62:7f:f4:e6:b5:fb:01:32:51:4c:f4:98:b1:2e:12:f2:c3:
0b:88:ef:eb:ee:0c:22:94:1a:90:9c:96:7a:8f:fc:6e:22:08:
86:a3:2a:79:73:13:17:ff:ff:ad:37:9c:9f:c5:c6:0e:71:46:
d1:73:c3:c5:53:f4:a5:cc:4e:5b:7d:41:09:e7:2f:a5:e8:a9:
5a:9f:c2:e2:f7:da:90:90:50:e3:1c:f2:71:4f:35:16:0a:6f:
01:ad:8c:60:a9:76:1c:64:5a:a1:b6:fd:43:ae:5b:ba:d7:13:
88:19:aa:ab:a7:8e:ef:ed:31:8b:66:21:33:81:25:7f:12:62:
65:53:e1:84:05:84:86:b8:b2:80:61:a7:1d:1a:42:19:b7:67:
25:9c:f4:e1:39:0a:0f:6d:ba:c9:b7:fb:25:b8:bb:39:90:16:
84:9f:59:ea:01:68:5b:7e:09:bf:03:b1:c5:65:b7:1e:4d:9b:
a4:0f:26:af:74:18:33:b1:9f:59:5a:24:9b:85:ac:f1:db:29:
d7:a9:74:1b:00:58:1f:2c:09:eb:a1:b6:00:ae:94:3f:07:95:
2d:53:a7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:00:19 2025 by rpki-client