Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
File: tRQMX448e8JKGtTIQGQVJj62ur8.mft (raw, json)
Hash identifier: UN/8QP4nZpd5rYSm/aojVzj5uXj+07T0a4goOtEyk+c=
Subject key identifier: 8F:A2:A1:3F:5F:DD:F7:4E:A1:FA:6C:94:39:2F:CA:9F:C6:72:AC:B6
Authority key identifier: B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
Certificate issuer: /CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Certificate serial: 019777F7FC892D280031C8FBEFF1327401D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
Manifest number: 1350
Signing time: Mon 16 Jun 2025 09:00:30 +0000
Manifest this update: Mon 16 Jun 2025 09:00:30 +0000
Manifest next update: Tue 17 Jun 2025 09:00:30 +0000
Files and hashes: 1: tRQMX448e8JKGtTIQGQVJj62ur8.crl (hash: ON6tby4nAtrV6qJRK3Aod9R5JPzKbky5yqqDuuLmK3E=)
2: vBSjooCv1VbYtFGvr_WsQil5zco.roa (hash: 9TpEuhk1/IC2lzmVZHygO3k9GcTIx0s6uCEc0lzgzlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f7:fc:89:2d:28:00:31:c8:fb:ef:f1:32:74:01:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Validity
Not Before: Jun 16 09:00:30 2025 GMT
Not After : Jun 17 09:00:30 2025 GMT
Subject: CN=8fa2a13f5fddf74ea1fa6c94392fca9fc672acb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:7e:1d:1e:e5:af:54:a3:9c:86:2f:be:40:
41:e8:26:95:06:a0:0e:fc:9a:ef:84:92:c2:e7:2f:
6a:3f:06:09:e5:b9:f5:c8:e8:0f:a7:1b:66:d1:63:
14:7f:e8:cd:c3:48:07:30:dc:11:f4:ae:c7:6e:79:
17:aa:16:f9:47:46:dd:0e:95:83:38:66:6b:5c:64:
a3:ae:55:0c:00:79:99:28:45:5d:57:75:7d:1e:ab:
a5:8b:5d:4e:bc:13:b7:5b:39:e2:e1:d4:d2:0e:8f:
ea:5b:ea:e5:2d:1c:1d:ad:1f:c1:d7:e0:e4:9a:62:
19:43:62:57:a8:ad:89:32:d1:5e:98:da:90:b5:23:
08:f1:8d:d3:ae:c7:4b:12:15:f4:86:a6:d6:e5:a6:
6d:9c:08:bf:e5:d8:2b:d7:e2:7e:94:1b:f2:93:77:
fe:0a:23:07:43:9f:57:1d:45:a1:5a:65:be:c3:ac:
b1:e3:b3:d7:dc:99:53:2b:3f:0c:d4:4e:0d:bb:27:
d5:e8:2a:b0:39:56:06:7f:ca:b0:b1:66:cd:13:be:
40:ef:92:6d:ee:67:50:a5:06:14:e4:1c:e2:51:62:
cc:41:ae:9e:bf:e2:63:ec:d4:9b:8b:5f:12:0a:fa:
ae:55:1f:f5:c6:eb:1f:43:f2:d5:76:69:ae:1d:d2:
af:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A2:A1:3F:5F:DD:F7:4E:A1:FA:6C:94:39:2F:CA:9F:C6:72:AC:B6
X509v3 Authority Key Identifier:
keyid:B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b9:1c:f9:83:d6:b9:51:a3:6a:03:7c:6a:b3:99:82:5b:b7:
f2:e7:69:74:55:a4:95:e9:a4:b0:3c:14:53:f5:03:95:81:eb:
d2:94:a5:c1:62:4e:e5:71:2c:87:31:ae:e1:28:51:ae:c1:48:
9d:3f:fd:8e:8b:41:b3:3c:9d:56:a8:a0:c6:75:fc:fb:1d:b9:
94:13:59:79:5c:8d:d8:00:7e:bc:9d:f0:ed:9d:db:50:49:dd:
6a:0b:1d:a8:c1:05:ee:69:6f:6c:5c:fb:c6:89:6b:6c:9b:61:
d0:d9:91:bc:e9:15:00:4a:c5:64:b5:29:bc:db:9d:ab:4c:c1:
62:2d:38:c7:13:b4:28:77:b0:4a:8a:a8:13:a7:21:aa:99:94:
7d:61:60:90:65:80:98:c9:c4:0a:6a:49:62:2f:90:d8:0d:06:
57:67:2e:1c:30:11:fd:7a:da:d6:6a:d9:4e:79:04:f8:48:ce:
31:d2:9a:6d:06:85:53:26:11:7d:af:74:c9:2d:c2:d5:7b:f6:
51:4d:7d:30:0f:55:ba:53:32:c0:90:44:d5:95:b7:93:d0:3f:
0c:2c:bc:e8:46:53:2d:d8:f2:94:e8:fb:f7:b5:a0:01:a6:69:
c4:67:5c:0e:6a:7e:7f:67:d9:e2:a0:1c:f8:aa:4a:9e:73:5c:
56:f2:3d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:08:17 2025 by rpki-client