Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File: Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier: Q5EBSX2oTJ2mR1u81wTJI6f88Zr2gHz8LbSNicL3Mss=
Subject key identifier: B0:05:B3:4E:03:63:90:87:04:83:CC:31:16:BE:F2:DC:DB:37:1D:FF
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 01976885058F621B5942F3B9FC116FDC7195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 09:00:37 +0000
Manifest this update: Fri 13 Jun 2025 09:00:37 +0000
Manifest next update: Sat 14 Jun 2025 09:00:37 +0000
Files and hashes: 1: 52v68hN6UT4PPJjjqq1uuE_KUSs.roa (hash: /ZapQrg7UEXSt0NcWwZ+kj+0zgSiaiRBd7g+qhPDHBg=)
2: 8S9ibO6esCTeLY2sD14WhmMZOvI.roa (hash: bmTNDF41Sq+c7Se/EWf8YA8iGIHNg20TI2zfC/lGrO0=)
3: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: pvQwJCcjahcH39PNrAIcnZOFsa+tNy3vD8J4liTrhn8=)
4: WvCj9VbsFj7fqJOx6tk2wit_WpE.roa (hash: /cLe2CDT0v+6sDR4E14KbBpNPCZZWPI/9CgtItdZn+0=)
5: a5Civ4TQY8vU2rue9PuRjdGc5Mc.roa (hash: QP4yk7Jx/AL7wrs9Y5ybfTghTEkjk/U3Nsn5OFbBsqk=)
6: gqvKWohVcj0Z7jlOtSMQwdCwp3g.roa (hash: hvyUYeos7vf6+TZ2NgvLPFstgzyNO3xqXZO7/gB/Dow=)
7: i6WUIDE1FurqyNNZ1EYEHsIVqvc.roa (hash: n8PwD1+DrWnTVld/M9MqGCrSY8HTEouEds18pHnIKJc=)
8: ih3tlDmlbrDwbuabWdJCxXWHffo.roa (hash: 80OP5bzoyzQkUOxJ3u7VzQr4QzoK9uZZaNU7fzcue8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:05:8f:62:1b:59:42:f3:b9:fc:11:6f:dc:71:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Jun 13 09:00:37 2025 GMT
Not After : Jun 14 09:00:37 2025 GMT
Subject: CN=b005b34e036390870483cc3116bef2dcdb371dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1c:10:48:3c:fa:a0:3e:e7:7f:a1:e2:5e:2b:
a4:1a:63:c1:d6:cb:b3:55:e0:a4:ec:b9:62:ef:26:
b9:34:a9:b1:c9:d9:c3:2e:50:9c:9b:11:a2:ec:27:
26:98:61:16:82:c3:26:b6:3f:2d:b1:db:1c:d8:ef:
e0:b8:6b:41:5e:91:6e:25:69:92:c5:b7:1c:46:6f:
a8:8f:81:54:f6:f6:91:20:74:47:66:c2:f5:0a:6f:
c9:bb:96:e4:51:ef:9a:b9:98:e6:cd:5f:c3:79:0b:
73:0d:70:a3:7e:7e:01:6b:97:bd:d3:d0:49:dd:03:
de:4c:09:89:26:00:b1:1d:12:d2:75:04:0a:b0:c0:
cb:68:c4:64:ea:e3:53:3b:19:4e:1e:f1:2c:bb:42:
c7:08:52:e0:aa:f1:f2:5d:be:a9:aa:c9:79:3d:9b:
27:6f:55:32:7f:a8:e9:16:6a:9b:9c:d0:9c:8d:f5:
87:8e:23:4b:2c:e2:df:c6:00:1b:e2:ea:dd:70:b8:
7a:c1:dd:45:cc:d3:a8:86:ca:03:8d:eb:27:2e:47:
39:99:c7:37:be:79:7e:98:70:3f:8c:48:2b:d3:ba:
30:ba:69:af:65:1e:53:a9:e7:a0:a1:cd:ce:30:05:
bf:c5:1f:45:86:76:ae:f1:ed:e4:15:3d:29:8e:52:
d5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:05:B3:4E:03:63:90:87:04:83:CC:31:16:BE:F2:DC:DB:37:1D:FF
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:af:cb:75:60:45:57:de:72:47:94:a2:7a:3a:f3:a6:d8:bc:
50:9e:20:33:63:07:e9:87:02:d3:0e:c0:77:a8:83:4a:e0:5a:
b6:99:52:90:cd:79:ec:53:46:f6:53:29:8a:52:72:13:13:a1:
79:68:72:a3:a2:3d:2b:b0:46:08:7d:7e:92:14:b6:22:58:96:
4d:18:77:9f:04:91:15:8d:df:bc:87:8d:67:42:cb:f4:41:46:
14:09:01:65:98:64:35:7d:bc:ae:de:fe:25:23:e5:f8:13:99:
a4:60:56:ba:bc:93:8c:6a:95:f4:93:02:a1:51:67:a5:47:af:
0f:44:62:c2:6b:86:be:d6:31:00:7d:52:9c:c2:e6:24:b8:7e:
88:7c:66:9a:83:25:fd:ef:7a:e2:dd:d7:54:8c:e2:d0:be:fd:
30:39:03:4d:2a:98:f9:9f:f3:dd:43:6d:8b:c9:5a:42:e7:3c:
53:81:e2:af:96:5c:f9:27:33:25:71:d2:ad:d6:e9:53:ac:28:
65:da:93:5e:35:0e:e1:c5:33:71:13:8c:43:65:83:d2:ab:3e:
74:ad:e3:94:be:c3:70:81:e0:28:13:02:20:7c:e3:4c:cd:ac:
4e:25:0d:a9:f2:5a:9a:b3:b2:bc:d3:78:02:ec:c3:43:a4:12:
96:42:c9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:25 2025 by rpki-client