Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
File: rqruHwkj4UojcfJAVA_dIVSbFKY.mft (raw, json)
Hash identifier: 97B97bMahu4tXzeJm6LhR4XyYUMN/jry6pKqXrlCihs=
Subject key identifier: C0:A1:5C:F3:F3:C0:4F:03:15:DE:54:65:06:2F:86:42:5E:0C:88:02
Authority key identifier: AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
Certificate issuer: /CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Certificate serial: 019872986D9B0D4FA3E964AACECD25F5AC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
Manifest number: 1011
Signing time: Mon 04 Aug 2025 01:00:48 +0000
Manifest this update: Mon 04 Aug 2025 01:00:48 +0000
Manifest next update: Tue 05 Aug 2025 01:00:48 +0000
Files and hashes: 1: Prl9jiIf5yTV5DsYzdlJSoaKLUM.roa (hash: Z5P6WiB+sh7qt8RUQthul2w53RzYUIGwq58APY2ZYXU=)
2: rqruHwkj4UojcfJAVA_dIVSbFKY.crl (hash: DnK2xOBlWAiINPgGSCj2j61LE48x4vdcYNkk/FcyPNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:6d:9b:0d:4f:a3:e9:64:aa:ce:cd:25:f5:ac:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Validity
Not Before: Aug 4 01:00:48 2025 GMT
Not After : Aug 5 01:00:48 2025 GMT
Subject: CN=c0a15cf3f3c04f0315de5465062f86425e0c8802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:6c:49:92:59:2f:14:5d:06:e6:95:c0:97:
40:14:4a:8e:1e:0d:4e:29:27:54:24:48:9e:b1:e2:
48:ce:2b:fc:ba:1d:1f:97:a2:7a:cf:a0:c9:fb:52:
6d:56:90:da:ec:02:9d:20:0f:f8:db:2b:ee:fe:62:
97:70:bf:d4:e1:f7:9c:52:41:90:ea:a4:91:df:80:
3c:99:5c:b8:59:35:a2:e3:5d:ba:ef:1f:85:c9:09:
45:af:04:5a:d7:97:d6:28:ad:2d:1c:a2:cf:c9:3b:
a3:4d:06:f5:9a:82:61:bd:92:f9:80:38:fe:51:16:
12:5a:bc:28:81:03:6b:ea:2d:06:a3:15:37:59:31:
5b:5d:c1:4f:eb:d6:70:6e:f1:73:a1:91:ab:8e:e3:
3d:e5:90:54:17:23:5e:57:80:62:b1:a2:18:28:98:
af:d2:1d:f2:80:15:99:57:ae:a4:35:30:5e:d8:93:
98:7f:a2:32:c8:ae:2c:e0:0d:18:4f:be:9a:fa:df:
77:e3:9a:c2:d4:e4:31:f3:50:c6:4b:0f:e8:52:7f:
37:24:c3:09:86:74:35:8b:97:05:e5:ea:98:40:37:
4e:24:ba:a7:f1:e3:4f:1e:b3:5e:3f:50:49:07:7f:
ad:47:66:bb:7e:09:d3:d0:d3:60:64:c5:b2:55:d6:
ea:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A1:5C:F3:F3:C0:4F:03:15:DE:54:65:06:2F:86:42:5E:0C:88:02
X509v3 Authority Key Identifier:
keyid:AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:af:bc:41:88:cd:1f:ec:0d:05:f0:b8:9a:e7:1e:76:80:c0:
f6:c5:52:7b:45:65:e2:bd:65:39:1d:01:1c:40:2b:fd:db:d7:
de:ff:01:6e:e5:c3:eb:f7:2f:a9:ff:37:9e:70:79:52:00:64:
c3:32:70:df:26:1f:bc:2d:29:e1:46:f2:e1:f2:7b:4e:3f:eb:
23:b0:a5:84:3d:9d:72:2d:dd:1d:66:bd:7d:67:bf:45:c0:66:
13:f0:28:fe:77:7d:ce:22:a6:47:8e:88:c7:9b:d5:b7:94:7e:
a2:b8:24:f6:5b:ee:b8:26:f3:a5:24:9c:47:4b:76:bb:f6:65:
89:40:3f:4e:5a:3d:c3:01:ad:6f:05:11:ec:8d:e5:7a:9c:cc:
cf:4e:ab:c3:fc:1b:b6:a2:6c:2e:b4:a4:99:bf:94:83:f2:c7:
14:32:01:72:41:81:38:e8:29:8a:09:db:19:cf:a8:a3:35:cf:
0c:ec:85:ab:3f:f3:1b:9c:8a:68:6b:fe:35:23:f0:bb:4e:48:
55:db:5c:46:89:72:f3:a9:ea:17:03:a6:b7:de:96:a8:70:10:
a8:f2:1e:3b:05:58:ab:4d:08:ed:4e:35:7e:f6:f4:d9:c5:ed:
7a:ec:ac:1c:9b:c4:89:6a:93:03:ce:fe:e0:11:66:0e:45:f3:
7d:62:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:46 2025 by rpki-client