Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
File: fQtE5JJUnht9pTLIDDSIUMWkToA.mft (raw, json)
Hash identifier: X5AGX/wcmkSwE/K3iDCDQersRajIRQhiH83qpUU/V1k=
Subject key identifier: EF:66:13:62:2E:7E:34:8B:2D:B3:18:6F:6F:A3:D8:99:E9:68:D1:CF
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial: 01976C98AFDE25549BCAD9ACD36E3F1C2A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 04:00:35 +0000
Manifest this update: Sat 14 Jun 2025 04:00:35 +0000
Manifest next update: Sun 15 Jun 2025 04:00:35 +0000
Files and hashes: 1: Vh9zdU6UPXBw1wsGMQVn_pjjotw.roa (hash: RHQ7Mk9Ul2niP+vY1weS4xjGH8dOqLq3Efjab5Bc1HU=)
2: fQtE5JJUnht9pTLIDDSIUMWkToA.crl (hash: gFem1rQaT5HNfXXIeV4iaQ5kfPuuuY3edXV8ESpP9+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:af:de:25:54:9b:ca:d9:ac:d3:6e:3f:1c:2a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Validity
Not Before: Jun 14 04:00:35 2025 GMT
Not After : Jun 15 04:00:35 2025 GMT
Subject: CN=ef6613622e7e348b2db3186f6fa3d899e968d1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f7:a8:bd:5a:5f:b5:52:72:87:6b:a4:88:2f:
da:a5:39:14:52:f1:c5:f4:eb:6d:f5:b2:cf:0d:cc:
61:7f:fa:11:50:10:03:59:03:f4:74:48:56:e5:93:
98:1e:b0:67:ad:09:cd:9b:6e:39:20:a5:51:73:b0:
ea:c0:83:41:30:9d:02:5b:ce:93:bf:66:ac:45:4f:
4d:97:32:7e:f8:49:c5:cf:ff:ad:08:b9:17:33:d2:
c3:54:3c:72:9d:2b:9a:46:1a:35:3b:91:98:a3:b7:
be:0e:c9:e6:b7:35:c3:b5:a3:3e:fe:b8:c5:48:02:
9c:59:e3:ee:f7:22:75:e7:7d:cd:20:66:1d:4f:af:
ea:28:b3:57:65:85:28:76:10:48:b5:f3:13:a3:7e:
5b:af:bf:b2:47:66:79:82:4d:b1:b8:18:76:b0:a5:
78:71:4c:99:fa:89:76:66:be:da:0f:50:34:1f:5d:
ee:b3:c6:d0:b5:80:68:a2:c7:a1:ae:b4:46:2d:25:
b0:a6:d6:00:6f:69:d7:d0:43:87:88:01:74:76:a8:
a9:4b:2a:04:d7:7c:d8:75:d2:d5:8a:61:19:34:84:
b6:76:df:c8:c1:f7:2a:81:05:74:f1:d5:10:f7:8d:
34:49:36:42:1b:78:f6:86:8a:cf:f6:7a:61:00:47:
96:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:66:13:62:2E:7E:34:8B:2D:B3:18:6F:6F:A3:D8:99:E9:68:D1:CF
X509v3 Authority Key Identifier:
keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e1:11:a0:6c:34:f6:73:34:ff:42:e8:72:8d:7a:b3:f1:65:
8c:83:73:77:42:f4:12:ce:e9:85:00:f7:a7:18:df:71:ba:95:
e3:4e:a7:df:32:d2:35:43:fa:92:fb:79:4d:44:1a:9a:13:89:
1e:e1:9c:52:7b:b8:dc:c8:33:29:f3:a0:a6:19:07:88:37:5d:
b2:b2:de:3d:ef:87:e9:03:1f:6f:2c:f2:5b:f4:b5:89:72:85:
fe:3b:45:b1:b0:f1:aa:c9:1d:1b:6e:00:39:f0:94:41:de:79:
ae:80:9c:62:c1:0e:96:50:79:8b:e0:04:f8:6b:ac:88:4d:3a:
41:e0:af:93:a2:58:53:dd:13:9c:b1:4e:0a:65:95:fe:70:b5:
ac:5c:b9:b0:99:04:4d:8c:f8:d4:79:65:db:fc:a5:90:a4:be:
63:5a:d7:ed:3e:34:71:9c:6e:ec:d1:28:1d:2c:ed:6e:bf:6c:
de:03:78:13:64:72:ec:26:90:29:3a:ee:6a:17:07:52:77:da:
60:eb:48:54:c2:95:1e:47:49:02:84:5e:68:57:24:4a:4a:37:
83:b2:28:2b:d6:e8:89:19:79:c1:99:2a:a3:37:ce:ed:17:af:
8e:dd:d5:16:8f:ac:d6:43:f2:26:d4:83:0c:df:8f:b0:08:7a:
e6:28:00:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:15 2025 by rpki-client