Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
File: qFOfk1XT63eLG7juJyMyYBGhIps.mft (raw, json)
Hash identifier: 9YRYXakQmuJO8N8+xiIMQJQv3PB37HPsSfciOSnKlMs=
Subject key identifier: E2:1C:27:20:47:91:05:C3:18:55:56:A8:50:E1:B6:5F:17:1C:2B:A3
Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
Certificate issuer: /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Certificate serial: 0197778A917D5EF2E49649B44D0AF340EC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
Manifest number: 1525
Signing time: Mon 16 Jun 2025 07:00:59 +0000
Manifest this update: Mon 16 Jun 2025 07:00:59 +0000
Manifest next update: Tue 17 Jun 2025 07:00:59 +0000
Files and hashes: 1: ShowtNM2m2UKeBL8F3fZYKX41FQ.roa (hash: fLdZxXolLRuOUGV4tUzHHqmQm+iuYEtRLW2OEHSE+Js=)
2: qFOfk1XT63eLG7juJyMyYBGhIps.crl (hash: 1kn1oxZ+srIA3RSSAYx2/N9kF1cGkGQ+Es/2f76sbvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:91:7d:5e:f2:e4:96:49:b4:4d:0a:f3:40:ec:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Validity
Not Before: Jun 16 07:00:59 2025 GMT
Not After : Jun 17 07:00:59 2025 GMT
Subject: CN=e21c2720479105c3185556a850e1b65f171c2ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:d5:de:de:6a:54:c7:0a:a2:62:98:71:6c:
2f:53:ac:3f:19:26:36:53:27:09:c9:8f:85:be:14:
43:e7:03:9f:35:98:a3:09:6a:21:fe:8b:7f:da:9a:
6f:c2:b5:00:d8:e6:d0:43:57:c6:4a:67:66:1a:64:
b5:33:9a:99:08:6e:96:37:0e:de:c0:6b:3a:13:84:
a4:60:27:35:7a:86:92:28:0d:04:ea:97:a0:87:b7:
81:46:7a:ca:7d:a1:a9:04:98:b0:4b:37:1e:80:c7:
e3:0f:2a:78:2d:bc:27:8d:ae:b6:bf:f0:da:61:13:
4a:e6:b0:75:19:54:5c:68:fa:bd:97:0b:d8:85:93:
03:93:40:2c:b4:2f:49:ff:70:4d:cf:a8:2b:5b:0f:
51:fa:3e:1b:7a:39:c7:c0:43:20:e3:b6:c4:ed:d5:
19:05:56:a4:6c:ac:87:a4:5d:43:1a:b7:ca:8e:c6:
55:96:ed:f9:69:0b:69:27:bb:79:51:1c:8c:fa:c2:
40:ca:a7:3f:8a:2b:61:25:c0:06:bf:7e:de:3a:4e:
a6:8c:09:9a:a6:d1:41:7d:79:54:61:92:77:42:bc:
df:fb:8f:a8:f1:49:a1:08:07:c1:13:7d:6d:30:45:
12:85:e3:77:91:16:c0:6c:38:a5:ac:fe:79:f3:e6:
87:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1C:27:20:47:91:05:C3:18:55:56:A8:50:E1:B6:5F:17:1C:2B:A3
X509v3 Authority Key Identifier:
keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:30:e7:89:0e:77:a8:a0:72:d6:58:90:20:64:ab:8a:aa:52:
62:88:9e:15:ef:77:e6:bd:17:ad:27:a3:ae:59:50:3b:ef:e2:
00:a7:3a:de:f5:14:6f:a5:02:98:43:01:9c:2c:13:98:8f:5c:
a3:55:5c:c6:78:f7:f1:ae:6f:8b:b6:87:e2:1d:b5:e9:92:5f:
8b:4d:ea:80:86:e1:de:92:08:ad:8f:e5:71:b0:a0:b6:68:c0:
29:1c:17:4a:11:9e:ed:4d:8b:27:1a:d8:28:64:9e:6b:bb:e1:
2b:96:c8:fe:27:f6:71:e5:85:50:f5:de:46:e1:3c:af:ff:6d:
9b:a1:d9:77:41:e2:d6:fd:50:36:9c:59:4d:7b:bb:42:b2:a8:
06:36:e8:8a:3b:04:fd:8d:4d:2a:2e:0f:e9:05:56:4a:0d:d2:
26:6c:95:21:fa:d2:1e:3c:eb:20:7b:0f:64:bd:d3:20:af:a0:
d2:24:59:79:2c:ac:53:0a:bb:d2:d9:44:3b:81:e6:8d:60:c7:
fc:c3:f3:5d:93:f2:9c:89:1e:09:f4:ce:c2:b6:b8:5d:67:b2:
29:ba:dc:1a:c0:21:36:b7:08:cd:71:3e:5f:30:80:71:1e:c7:
5a:0f:ca:c3:bc:5f:ff:39:1b:0a:1b:66:f8:dd:cc:3e:cd:ad:
34:ba:01:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:36:01 2025 by rpki-client