Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: 2iBxeeb77Ns9njI6IcELgyBvkxm81zbif+pMUmJCwC4=
Subject key identifier: 62:AB:CA:DD:B9:F1:CA:A9:1B:88:14:88:F5:97:6E:6C:BD:58:49:94
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 01978C249923097A13A471BCD9B5BD24C23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 13A9
Signing time: Fri 20 Jun 2025 07:01:38 +0000
Manifest this update: Fri 20 Jun 2025 07:01:38 +0000
Manifest next update: Sat 21 Jun 2025 07:01:38 +0000
Files and hashes: 1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=)
2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: D7expZmmV95FFFplZDvXlRJMf7VpneJ5zHV1nZUFNr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:24:99:23:09:7a:13:a4:71:bc:d9:b5:bd:24:c2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Jun 20 07:01:38 2025 GMT
Not After : Jun 21 07:01:38 2025 GMT
Subject: CN=62abcaddb9f1caa91b881488f5976e6cbd584994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:50:a1:54:e3:8a:b3:71:2d:fa:0a:01:1e:
5e:8c:12:69:e4:0b:1c:2b:e0:fa:2a:c8:3b:4e:96:
51:35:d0:1f:88:55:3c:70:4b:65:0e:61:ed:7b:66:
68:46:10:c2:da:5b:0d:4d:da:df:2b:08:7c:20:37:
eb:f3:94:d9:0f:6f:33:77:f5:91:8a:17:c8:e0:9f:
97:7e:18:d2:73:ac:cf:79:d6:4d:14:5e:3f:e3:fe:
75:e5:57:93:7e:e6:6b:5a:48:e5:cb:5b:31:b3:43:
69:fe:72:23:3d:93:9b:18:1f:5c:d5:1b:21:79:9d:
80:cc:18:95:20:57:75:bd:5f:2f:5c:87:db:43:f7:
59:98:b5:e1:68:46:ab:ce:4e:ab:a0:6a:eb:87:4b:
97:1c:4e:85:09:77:7c:e6:53:77:b0:cd:e7:99:f6:
b4:dd:df:e0:b5:4d:77:dc:10:27:14:a7:f3:52:0c:
67:09:c8:76:15:1e:a5:79:db:4d:97:08:32:c4:81:
a0:2e:ba:19:45:3c:e0:f7:4f:ff:80:7f:90:85:c1:
37:29:ee:2b:5c:c9:00:e6:18:af:9e:1e:53:ae:a3:
6e:f1:a6:f6:48:cb:ea:6b:89:f6:16:1e:9f:0f:92:
83:ce:f7:c0:17:6b:48:2a:50:46:c9:e4:7d:c4:b8:
54:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AB:CA:DD:B9:F1:CA:A9:1B:88:14:88:F5:97:6E:6C:BD:58:49:94
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:af:7d:d9:44:e6:17:0b:c2:1f:70:26:8f:42:44:4a:a7:2e:
07:e4:e7:c8:8c:91:b7:9d:d9:4b:ba:a7:21:d7:40:2c:06:15:
2f:2e:bb:27:3a:e4:34:02:85:c2:09:fd:9c:6b:18:4a:c2:c8:
0d:17:73:ca:64:29:ca:c2:34:97:ed:9c:6c:53:04:3c:85:23:
ca:72:8f:49:47:81:50:52:a9:54:79:5e:b6:64:43:a2:db:ed:
b2:24:3d:f7:c7:47:8f:d0:76:e2:87:b4:f5:b4:5d:d4:4d:6c:
20:25:8d:cc:cb:87:73:2b:f3:66:3a:85:0c:00:52:3b:06:45:
83:ac:f1:05:9b:fa:66:15:c0:9a:63:a0:c6:35:5e:18:98:43:
f4:73:21:68:c1:a6:65:31:29:42:e5:f8:2e:b4:3d:2a:1b:55:
25:37:c9:87:83:5a:5a:18:5c:21:82:6c:eb:5d:7f:d6:61:b4:
e1:80:70:95:ac:0e:91:dd:8c:7b:6d:91:4d:86:81:6c:81:5b:
1b:d6:55:55:4e:23:a8:a7:eb:95:b5:d5:47:01:be:a3:9f:df:
88:88:b7:8e:97:4a:a7:3d:fe:59:1a:64:7f:5c:6b:ab:10:68:
2e:ed:e6:70:8d:e9:a5:ef:05:f3:fc:31:4e:21:a8:9f:09:ec:
60:65:6e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 09:00:01 2025 by rpki-client