Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json)
Hash identifier: 68p8nvCMFJRpaIR2gWhFTavzheDad1xNs2eprXGyYzI=
Subject key identifier: 61:C0:E7:2E:87:D4:B5:0C:E4:9F:D4:B4:2F:67:20:E9:86:ED:44:0B
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 0197703EC3DAF458438093819E4D4B25B1DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
Manifest number: 1596
Signing time: Sat 14 Jun 2025 21:00:50 +0000
Manifest this update: Sat 14 Jun 2025 21:00:50 +0000
Manifest next update: Sun 15 Jun 2025 21:00:50 +0000
Files and hashes: 1: CTedhf-UDhDCo0gKWN1eFB95iME.roa (hash: Vr6y6sdI8B/BSyNE6gcBQftZW1dE4fIdtomKsz3LLNE=)
2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: chAf9u7DrcqQwYh3yvEyT/a38AiV34xd1ghmuxHUqEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:c3:da:f4:58:43:80:93:81:9e:4d:4b:25:b1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Jun 14 21:00:50 2025 GMT
Not After : Jun 15 21:00:50 2025 GMT
Subject: CN=61c0e72e87d4b50ce49fd4b42f6720e986ed440b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:81:21:4c:46:a0:78:fc:fd:f2:06:d2:43:
5e:cc:ed:a6:43:8b:fe:13:ae:63:98:af:54:56:a7:
bf:93:e7:0c:d6:f8:6f:af:0b:b5:79:ed:5b:c9:9d:
8c:0a:9b:3c:75:70:38:87:a2:0a:a8:8d:cd:2e:f7:
73:d4:4d:0d:5a:fe:76:75:71:fa:42:59:d4:04:68:
85:05:c3:01:9d:36:70:2d:11:6b:9a:d8:3c:36:1b:
cd:44:b8:e6:b5:84:a6:c3:ba:ae:20:21:dc:f1:a1:
f2:35:e5:88:e2:31:4c:06:1f:36:74:0b:39:a2:fc:
00:35:c9:2d:8c:7b:18:80:73:aa:63:1e:af:a9:fb:
37:6e:11:24:bd:14:8a:a4:77:db:1c:3d:f6:3e:b2:
92:39:ea:ca:85:c2:4f:64:a6:39:27:e7:4a:56:1e:
7f:57:3f:5f:ba:fd:d8:63:be:a9:d9:e0:08:19:62:
ed:47:7c:66:c4:86:20:ef:81:6a:07:8e:e0:6c:7c:
02:c9:c6:57:fb:9a:1a:d3:21:b7:32:00:1c:c6:dc:
99:73:e5:6c:64:01:70:8b:b3:73:9d:dc:0e:6c:9c:
ad:d7:cb:dd:69:db:15:0a:23:9a:52:98:3e:c6:ca:
6e:6d:42:00:5c:25:d3:d4:65:9f:37:8d:2c:2b:c5:
4b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C0:E7:2E:87:D4:B5:0C:E4:9F:D4:B4:2F:67:20:E9:86:ED:44:0B
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d3:a0:9c:ca:7a:70:0f:ab:77:54:79:7e:2d:37:21:b0:05:
ef:dd:8c:f7:33:75:44:82:7e:5b:cd:1d:36:5c:9e:d3:f2:72:
90:b0:f4:24:52:ed:3e:4f:df:ea:b8:0d:90:4d:cb:c6:95:0e:
82:ed:e7:ab:14:27:11:b6:d0:a0:05:c9:d7:8e:4b:9d:20:f0:
66:6e:b4:89:b2:82:d2:aa:73:0c:a8:cb:ab:c7:6e:8e:6a:8a:
74:e0:be:50:1f:7d:fa:b5:6a:25:ce:23:ff:65:cc:9b:da:bb:
27:ba:07:ac:f4:2d:48:7a:e2:e4:66:94:86:c0:02:72:19:ab:
20:83:63:50:6b:61:72:8c:75:93:fa:ec:76:e8:62:0a:88:0d:
4f:1d:ca:30:f7:a9:60:08:e5:69:8f:a7:1f:6c:38:f0:88:7b:
9b:df:21:5e:87:5d:19:96:a0:17:7e:e3:a3:f1:87:73:60:28:
61:a7:ff:53:68:70:99:01:56:fd:e9:26:9a:26:78:14:62:10:
b0:d2:6c:d9:90:08:b1:54:eb:98:2a:29:c1:9d:df:c7:6b:c5:
11:80:93:19:ac:5d:5e:4d:54:92:fe:8c:b3:19:f0:13:05:59:
65:52:c6:16:1b:ce:13:f3:79:26:97:44:a9:f6:b2:79:5b:50:
57:0a:41:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:29:06 2025 by rpki-client