Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier: a0nvG76DjQ0G5cWC7KKDiivuAVvdYPpvU4Ulz21Cw+I=
Subject key identifier: AA:7F:E3:07:EC:3B:04:8A:1E:2B:4F:DB:A6:60:B8:28:8D:AC:7D:6D
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer: /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial: 01976E8762865C368EA662FFBE2AEDD8DBDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number: 106D
Signing time: Sat 14 Jun 2025 13:00:55 +0000
Manifest this update: Sat 14 Jun 2025 13:00:55 +0000
Manifest next update: Sun 15 Jun 2025 13:00:55 +0000
Files and hashes: 1: dvh6dEQn3L0Lue4PHisFZ5z30t4.roa (hash: YZ3UChYkMOxFSMlqaHDcH6csBlA5vkgT+POe5BlyoUo=)
2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: kyulQZBX0+TamNmxAlnq4T8B5ejZ3PRD5MCDvDGeyXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:62:86:5c:36:8e:a6:62:ff:be:2a:ed:d8:db:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Validity
Not Before: Jun 14 13:00:55 2025 GMT
Not After : Jun 15 13:00:55 2025 GMT
Subject: CN=aa7fe307ec3b048a1e2b4fdba660b8288dac7d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:2e:b4:ed:d4:1e:35:45:80:9a:9b:47:cf:
99:44:37:43:f0:36:f0:e4:27:56:42:ad:d0:4d:e0:
97:39:3b:16:2d:ed:30:20:bb:a1:ab:d6:0a:98:e8:
68:50:58:4c:6e:51:02:2b:09:19:88:6e:4b:cd:e9:
20:63:82:f0:79:b7:b8:ba:01:2a:c4:fc:5d:70:f1:
55:84:7a:eb:0d:98:a0:07:6f:c8:f1:be:4e:9a:20:
8b:95:af:de:cb:b6:f8:a7:7f:f7:22:37:5c:be:8b:
1b:8c:51:e3:a5:d2:51:48:72:31:85:6b:da:84:f1:
10:ac:77:b4:93:e3:e7:6b:eb:cf:f1:0e:d0:b5:7a:
e3:a9:f1:da:d9:8a:a6:61:ea:db:87:54:d0:69:5b:
6d:d1:3a:bd:a2:12:e8:3a:fe:3c:eb:44:5d:77:1f:
7e:aa:fd:49:ef:65:30:56:ac:04:da:66:4b:7a:e0:
33:68:b5:71:12:af:81:ef:6a:d2:b8:f2:a0:44:04:
c6:83:3e:ac:53:75:38:d4:7a:00:21:09:3c:3c:b2:
83:e9:d8:6c:e6:10:ee:ba:9d:c5:03:32:f9:9d:5e:
72:56:5a:f2:f4:73:57:1e:4e:56:7f:b7:18:a0:2b:
fc:5a:bc:67:b0:91:ad:88:ea:a9:ca:2e:4b:48:13:
1e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7F:E3:07:EC:3B:04:8A:1E:2B:4F:DB:A6:60:B8:28:8D:AC:7D:6D
X509v3 Authority Key Identifier:
keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d2:b2:85:07:40:8f:c6:03:fa:21:72:e6:14:86:0a:5a:a6:
b5:0f:24:2c:e1:27:10:91:7e:ec:aa:d0:e5:73:dc:a1:60:30:
97:b1:d1:ef:75:96:b6:90:95:a2:e4:51:0f:d5:76:1c:68:ec:
59:e5:ec:16:55:21:23:1c:69:bd:34:3f:5b:f5:30:ad:3d:5f:
af:74:a6:78:ac:06:a3:43:79:dd:29:9c:ff:08:98:63:14:53:
47:1d:e5:9c:c5:15:b4:88:b2:e5:5b:4e:b6:53:87:d7:53:78:
e5:6b:35:3b:82:dd:7e:af:a5:e1:3a:c1:8b:07:8e:46:6a:11:
40:ab:2d:95:7a:b1:25:9d:97:a0:50:19:3d:e1:f0:73:18:90:
39:87:a1:fa:c2:f1:d8:61:f4:31:00:d5:f9:37:75:51:d9:53:
b2:eb:fb:54:0c:45:28:a9:9b:f4:4c:42:b6:b4:40:bd:63:d0:
59:ee:48:6b:22:e2:5e:2d:17:c1:08:ba:1c:44:ed:c8:98:03:
44:46:39:59:6f:5f:b7:ee:45:52:60:b0:10:cf:42:c7:92:5a:
c5:60:8d:da:ea:dc:ea:36:6f:33:0b:bc:49:88:54:df:5d:6c:
95:98:2b:8d:de:c4:fc:a8:b4:d2:08:1e:39:ee:0a:ea:e1:f1:
a6:c6:41:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:09:41 2025 by rpki-client