Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: AzJi2MjbLphA+OGihJGY84O+0GZx8q6ljbPLd+mkgAs=
Subject key identifier: EF:EA:66:71:E6:33:3E:57:89:3E:CE:F7:3E:62:84:92:5B:F5:B8:8C
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 0197722CC6D4E20BAF6F5B7347B51858231A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 0285
Signing time: Sun 15 Jun 2025 06:00:26 +0000
Manifest this update: Sun 15 Jun 2025 06:00:26 +0000
Manifest next update: Mon 16 Jun 2025 06:00:26 +0000
Files and hashes: 1: B5665HYy6kSNy90OpMzSYkfYZ78.roa (hash: l3LMbVnBNYo1auwulw02upGn169zVSqtpPpAH0JkHoI=)
2: BhseQy6cfY2KxD85qSiLzXh-5UM.roa (hash: 0YvZXzvsO+BZgmZ0JpcK1I5V3fjP6y+JiPN3ak5ChGQ=)
3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: UIxsmYxIaTc0mwlogmiHd5TEgxGW6uD/P1Yb4PLVZy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:c6:d4:e2:0b:af:6f:5b:73:47:b5:18:58:23:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Jun 15 06:00:26 2025 GMT
Not After : Jun 16 06:00:26 2025 GMT
Subject: CN=efea6671e6333e57893ecef73e6284925bf5b88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:15:0d:f7:06:75:1e:ff:dd:40:f6:27:8f:
f4:0d:df:fd:b9:b8:ac:69:2a:4d:5a:7c:9a:a5:9c:
9a:97:d9:92:06:20:e9:52:b3:13:9f:a2:a2:bb:74:
f5:d0:eb:ce:c1:52:d4:ed:24:df:29:08:30:c6:13:
28:56:fd:4a:cd:8b:98:8d:fe:40:ed:b6:80:71:c5:
87:09:b4:b3:23:f2:78:1a:61:f8:63:b4:45:c8:69:
27:59:fc:bf:88:0c:5f:d7:df:68:25:4b:24:57:2b:
5e:01:1e:6b:8d:b3:48:35:0b:ed:3b:02:32:b7:21:
9b:f6:80:d8:4e:9e:25:b0:94:2b:43:14:4b:44:23:
ee:02:df:2b:4d:ab:e6:36:b1:1a:c6:04:83:a6:d6:
b9:2f:61:8e:28:c8:c7:0a:e0:ed:a4:14:6e:28:38:
99:72:e1:19:aa:56:7a:ca:13:c7:76:3a:08:25:43:
db:21:85:90:a5:e5:79:31:89:51:23:11:bb:5e:26:
8c:4f:8a:21:44:dc:71:80:86:b0:17:3b:ba:55:b5:
b6:84:02:aa:98:c1:fd:7c:8d:35:13:68:71:a2:b6:
bc:d1:ec:04:ec:a0:0f:3f:e5:41:d5:50:2f:bc:c4:
63:5c:69:db:60:bf:95:76:4b:50:e5:75:ea:15:5b:
9a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EA:66:71:E6:33:3E:57:89:3E:CE:F7:3E:62:84:92:5B:F5:B8:8C
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ac:27:6c:36:2e:19:75:47:b4:1d:83:fe:52:fc:07:d8:e8:
b4:82:d8:c3:4c:c1:06:aa:60:33:9d:0c:40:ef:70:fa:7d:52:
77:86:2b:39:c1:fa:1f:9e:00:05:27:ea:59:16:41:85:2e:d3:
86:b5:24:4e:98:71:66:6d:f5:09:c2:b4:ad:a0:47:9a:ea:11:
e0:78:05:fd:cf:7d:04:d9:e7:21:78:6a:5a:bd:a7:ae:d3:10:
db:b6:6c:c5:3c:c7:c3:ef:46:fc:3d:d1:e1:67:31:04:36:4b:
80:3a:ed:45:ad:02:08:b4:15:0b:85:11:41:05:14:7e:da:94:
35:01:49:59:f6:74:0f:cf:59:d6:b5:77:1f:95:e2:0d:2d:95:
76:85:f1:1c:48:dc:02:67:73:b5:96:e2:1e:91:f1:5d:ba:45:
c9:cd:20:5c:65:45:b7:c6:d8:20:2b:9e:a1:57:59:a1:c2:fe:
60:55:a2:6a:6e:18:19:cc:26:6b:0d:28:52:73:d6:7d:ef:54:
91:45:e5:56:be:c9:68:36:8e:52:42:6c:83:22:aa:20:3b:71:
00:01:74:6b:26:e8:ae:b4:ea:a1:26:f9:31:01:34:f3:f5:b3:
7e:20:1e:5c:5a:e5:6d:91:64:b1:76:05:d5:ff:81:f7:ef:b6:
2d:24:1e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:04:05 2025 by rpki-client