Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: tYm/TouQ4PT3Ue0OpuZEo7k+9p1mm7U4uQa0qTM2oDA=
Subject key identifier: 87:0A:A9:DC:05:71:58:51:63:00:91:8E:4D:BB:F9:1E:61:38:F1:1B
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 01977008129127121CBEB5322C8468303B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 20:01:06 +0000
Manifest this update: Sat 14 Jun 2025 20:01:06 +0000
Manifest next update: Sun 15 Jun 2025 20:01:06 +0000
Files and hashes: 1: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: 5GlMy2B0Mk8Gux8+16lYkp7iINxHsPLtOvQ5rXYfh+M=)
2: raYuD2-oWYFkHeIeR6LIUYgtbtM.roa (hash: JU+hidsjRHQowQdjLtlmSpodi1Pd90fMaRJU/QLsDsg=)
3: zY-mc8ottsO0mlX2DbncV_JVaGI.roa (hash: IXtxsfxn422nBKB3kQxte4GM01lfDRPi2WPTNL4v8HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:08:12:91:27:12:1c:be:b5:32:2c:84:68:30:3b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Jun 14 20:01:06 2025 GMT
Not After : Jun 15 20:01:06 2025 GMT
Subject: CN=870aa9dc057158516300918e4dbbf91e6138f11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cd:44:96:36:26:fd:e6:c6:9a:4b:5c:cb:e1:
50:a6:9d:28:24:fc:b9:2a:9a:bc:2b:be:54:84:fc:
b1:49:33:16:88:46:e2:49:65:6a:e7:dd:d4:0a:a1:
b6:d2:de:60:b6:74:05:02:00:ec:e1:c8:0a:ca:3f:
7b:e6:71:ab:10:a1:56:59:a4:11:43:20:40:d5:96:
76:a2:07:93:57:98:30:bb:d5:36:c5:51:8d:c6:44:
48:04:e7:86:bd:1e:6e:82:1d:74:01:bd:29:ab:08:
ad:89:07:ac:13:eb:b3:65:2c:77:f8:5b:91:2e:f0:
be:85:10:0e:b2:4f:9a:dc:96:2d:60:96:7e:53:60:
42:10:0b:25:c2:da:84:a2:58:92:1f:25:b2:ad:2b:
12:64:47:6b:43:1e:0a:d6:b0:cc:26:ce:e0:90:8a:
88:13:62:5f:0b:93:6f:3e:f3:a2:88:66:f3:25:2c:
bf:c0:d5:e5:e6:06:33:83:5d:d9:4a:f9:74:f2:49:
8b:f0:57:f4:57:e9:33:c1:2e:0a:77:5c:9a:fe:bf:
3c:25:a8:81:29:dc:3e:41:7a:dc:86:59:21:18:80:
74:f4:c9:b0:7a:3e:41:d6:13:d6:00:a2:95:b8:ef:
bb:b9:f8:37:d2:be:69:ce:8c:3e:c8:36:9d:36:96:
b5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0A:A9:DC:05:71:58:51:63:00:91:8E:4D:BB:F9:1E:61:38:F1:1B
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:11:e5:75:b8:cc:21:6d:16:c4:c5:0c:62:5a:96:03:46:7b:
76:5b:30:c7:11:3a:df:a3:bc:aa:a7:c0:ac:fd:1e:1b:f4:90:
82:16:5e:6b:36:98:bb:6b:23:c4:b9:d4:a8:2c:0e:f4:8d:29:
3f:01:0e:6b:03:f5:8b:78:f5:d4:ae:40:e1:5c:cf:6b:e1:3b:
dd:38:4b:8e:0f:b6:0a:2b:18:03:bd:e3:c3:aa:dc:76:9f:a1:
99:99:8a:58:63:e7:2e:9f:20:28:64:d8:64:f7:e4:86:07:7e:
0a:82:b8:7b:d1:d1:0c:4d:45:35:3d:13:f8:48:97:e1:77:4c:
cb:68:fc:17:99:14:e1:65:96:98:05:ef:10:03:43:03:d5:a3:
a0:ec:bb:fc:20:50:92:94:c5:12:53:ea:36:8a:e4:03:fe:67:
51:34:54:a3:3a:1c:53:16:11:ee:be:5e:2e:c2:80:d9:f1:f8:
d4:35:17:a7:f8:cb:6b:56:07:a5:97:c7:91:61:d1:27:e7:63:
36:51:28:b7:f5:7f:25:b6:37:28:06:d1:20:3a:ff:65:53:e8:
c4:e7:15:c9:7b:1e:9b:25:2f:06:4b:8d:b6:84:e5:83:e5:b6:
de:95:fc:7b:c5:60:cd:99:76:b5:d6:ee:1f:a0:1a:79:2a:74:
77:c4:59:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:02:37 2025 by rpki-client