Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
File: qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft (raw, json)
Hash identifier: EwaRJ2F1njGFOI/mJrX7O1FW3wNxl2UFf5SczVWmGaI=
Subject key identifier: 1C:58:8B:E9:60:99:D0:15:81:20:8B:BE:70:47:45:D6:E7:E4:5D:29
Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Certificate serial: 01976E873DF794544A20179356FC5F9E9CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
Manifest number: 1530
Signing time: Sat 14 Jun 2025 13:00:46 +0000
Manifest this update: Sat 14 Jun 2025 13:00:46 +0000
Manifest next update: Sun 15 Jun 2025 13:00:46 +0000
Files and hashes: 1: F-LIYuBdyXdsWgfHqfWysJKiWXU.roa (hash: VqoafOC7jzXc0AkcNCpssMEPfK7J5Kse2STPQ5Iw9TU=)
2: RHzpUiuiNY0XEXcS875xUQAmg2o.roa (hash: 6vPYA2Rs4cYHy6RhBB/Rp48XNVrguqaU80TWpEOz0XU=)
3: qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl (hash: gK8vG4AVDv95lwO2PmNHQ1WuaSwD7MaaoErnSE2lMGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:3d:f7:94:54:4a:20:17:93:56:fc:5f:9e:9c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Validity
Not Before: Jun 14 13:00:46 2025 GMT
Not After : Jun 15 13:00:46 2025 GMT
Subject: CN=1c588be96099d01581208bbe704745d6e7e45d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:da:02:e4:17:15:30:e0:de:ca:ea:d3:a4:9f:
c4:3b:90:55:d7:b2:09:e5:fc:d8:24:24:1f:b4:9a:
63:4b:20:34:9a:e5:e7:de:bc:59:44:c9:c4:a9:fc:
b9:98:8b:79:1a:b6:c3:7d:00:54:d2:11:29:f6:06:
9a:85:db:61:b1:7c:ce:ed:2b:a3:56:4d:43:21:9d:
ca:0e:eb:ee:50:05:8a:19:b2:ce:12:93:6a:77:37:
74:ff:41:c5:85:71:04:01:61:a1:56:a3:60:22:8d:
af:aa:c9:d9:20:6b:73:36:0b:de:8b:4d:15:5f:04:
51:6f:a7:58:e3:9f:3e:39:e2:b7:f4:aa:54:48:28:
be:74:d1:a5:4e:91:be:68:e1:f3:a6:99:cf:e2:b9:
9e:97:c5:dd:af:61:87:ee:40:16:ca:5f:88:2e:44:
ba:30:a6:f8:24:c1:d1:13:37:cc:d0:6d:6a:cf:6c:
b4:84:93:f2:3c:fc:9a:29:d7:be:6b:7a:c9:9f:28:
5e:f3:1d:32:99:93:72:5f:c0:05:48:80:3b:02:b7:
81:70:da:72:d0:c3:39:da:5e:d4:11:7f:f2:5e:67:
fa:02:f7:72:98:69:06:26:cb:05:25:02:4e:64:5c:
7b:15:6d:5b:58:73:f7:9d:df:91:23:95:12:66:0f:
6e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:58:8B:E9:60:99:D0:15:81:20:8B:BE:70:47:45:D6:E7:E4:5D:29
X509v3 Authority Key Identifier:
keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9b:03:13:be:d0:d4:4b:6c:e5:31:1a:36:21:25:3c:0e:88:
c7:2f:4a:71:d1:80:5a:0d:91:c8:b8:e8:cf:c3:58:e0:76:fe:
4b:f1:54:f8:da:96:e4:cb:54:af:91:96:d0:a9:5e:75:5c:92:
6a:1d:4f:14:2f:8e:a1:86:42:b0:c8:10:a2:dc:f5:ae:87:66:
91:71:fe:d6:ce:84:16:4f:51:14:87:f8:5e:8b:13:78:1d:11:
38:0f:b0:cd:90:87:a3:bb:4c:ce:5f:5b:d1:e3:44:b2:6e:02:
25:af:14:7d:dd:ba:47:75:3e:21:1f:a8:80:88:e8:87:80:bb:
71:b7:9c:18:d5:ce:27:0c:ae:67:c4:65:64:0c:3d:3b:52:ca:
7c:3d:b7:ea:36:d1:6a:8a:25:c0:ca:40:ba:70:9e:3b:eb:e4:
b8:43:9d:4a:ac:87:5e:03:4a:32:eb:ec:42:b1:0f:33:2e:30:
3c:9d:9b:17:e9:35:ec:c2:77:97:ef:08:ed:75:5c:45:00:a8:
15:f1:dc:5f:7d:76:09:ed:61:7e:7a:ee:48:68:bb:55:ae:e3:
f4:14:17:36:23:a5:e9:af:85:b6:99:6d:86:26:53:7b:43:bb:
8b:04:17:75:08:90:ab:64:13:ea:da:af:c2:49:d1:45:22:c8:
ca:f1:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:33:26 2025 by rpki-client