Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: N+afH5Y03zQTRTglm3yJ53CfwU5q6CCm3Ib7qvo46oo=
Subject key identifier: 25:88:58:A2:95:7B:31:4D:3C:F9:C6:24:9E:2F:A7:92:F9:4A:02:DA
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 01976D3D7CA21B56ACC4E43D238689B19E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 064C
Signing time: Sat 14 Jun 2025 07:00:35 +0000
Manifest this update: Sat 14 Jun 2025 07:00:35 +0000
Manifest next update: Sun 15 Jun 2025 07:00:35 +0000
Files and hashes: 1: jnSve3XmFe0Ms43uzQn1WmoreJ0.roa (hash: JpZLimfc7+7aqyHJzwRKIdaJc+FFYashS7WERx4Vf3Q=)
2: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: DWDu2nV7oIkd72ptZ3G5C2BnlNp2MaqeF+v8gVP7DSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:7c:a2:1b:56:ac:c4:e4:3d:23:86:89:b1:9e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Jun 14 07:00:35 2025 GMT
Not After : Jun 15 07:00:35 2025 GMT
Subject: CN=258858a2957b314d3cf9c6249e2fa792f94a02da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:dc:f9:e3:0c:54:8d:de:d2:62:1c:c5:30:
6a:8d:7b:4b:fb:bb:aa:17:02:04:4d:46:9a:9b:d3:
23:a2:13:7a:33:69:33:d7:f8:5a:59:50:5c:90:47:
a2:f4:ce:45:68:22:f6:9c:9f:18:79:70:83:f4:b4:
90:0b:83:ac:d3:03:6d:8e:e1:00:b8:08:bc:18:88:
83:50:34:8b:47:7c:b8:d2:ee:c5:34:5c:0d:31:80:
d8:96:8e:84:07:2c:c1:d0:ec:2a:f7:90:a2:52:dd:
3d:ae:ee:f5:32:13:7c:62:fa:69:71:83:3c:33:b3:
c9:0d:30:1a:aa:cc:25:41:a3:a5:48:25:3c:ae:df:
bf:a7:ed:08:37:2f:8d:f1:89:92:86:d1:c0:87:8a:
78:79:ae:ff:ab:e6:8f:11:e1:c6:2c:b0:d4:0c:53:
09:fb:ea:07:7c:d9:0a:91:a0:1e:17:e1:e6:0a:90:
08:7c:bd:b3:52:05:91:d9:0b:fb:6e:21:ff:6c:65:
c2:5e:b7:c1:cd:49:f2:fa:17:df:94:18:03:41:7c:
cb:6a:39:d6:5a:23:ab:32:16:07:11:a6:5e:6d:51:
c5:40:60:75:99:52:f0:7f:bb:e4:ce:90:eb:22:49:
32:21:f6:35:c8:c9:bd:c3:03:19:b7:9a:93:3d:f1:
cb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:88:58:A2:95:7B:31:4D:3C:F9:C6:24:9E:2F:A7:92:F9:4A:02:DA
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e4:28:00:2a:fb:ab:f1:a8:f9:a2:2c:19:b2:de:58:db:40:
8b:47:4e:fc:25:68:20:b3:3e:0c:f9:4e:6b:47:bb:ed:9c:82:
ee:c3:c6:76:71:16:3f:5c:01:37:40:31:6e:1a:6b:70:b8:29:
9d:de:bf:54:f1:67:d3:3e:c1:40:de:91:7d:34:a1:73:60:0e:
cb:f4:ce:91:86:a2:35:8b:7c:4c:fd:a6:ac:92:05:32:a3:5c:
86:5a:89:9c:b2:7a:5e:19:1c:74:16:92:a2:f0:05:8d:d7:cf:
3c:95:88:ba:92:78:ff:d8:ea:d1:71:a3:15:bc:71:e6:e7:b3:
5c:8d:f4:0f:96:5f:88:57:87:0c:6d:af:4f:d1:b6:aa:e9:55:
ea:e7:a3:12:cf:18:37:2e:1f:d1:21:f5:a5:ce:1b:c5:47:2b:
7f:4f:7c:e1:b2:1e:53:6d:e6:15:b8:de:5e:d0:d0:6d:14:95:
2e:9f:ce:2a:61:24:c6:60:33:03:2b:88:68:83:a6:c4:dd:90:
23:d6:4d:2c:b3:80:de:3e:54:d0:1c:03:83:65:05:a9:d4:81:
5f:fd:bd:dd:5b:aa:0b:8e:9d:1b:0e:7b:4b:67:18:59:d2:2b:
f9:9d:61:c9:6a:24:b4:db:19:da:5b:bd:c5:34:06:5a:88:85:
cc:ee:d1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:55:00 2025 by rpki-client