Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: ua5MpF5uc7aGP6+UEzW9NpWflIJxSPNSxFcgugBH3NE=
Subject key identifier: 2F:60:CC:2C:06:C3:1C:8C:58:0B:97:C8:E2:BA:0D:8F:C2:12:09:DB
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 01987DC115194F62A244C95684EF212DC635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 05:01:02 +0000
Manifest this update: Wed 06 Aug 2025 05:01:02 +0000
Manifest next update: Thu 07 Aug 2025 05:01:02 +0000
Files and hashes: 1: 3rk6DTXzfhXnDvH7YjIIV0HcXhY.roa (hash: 8yMBicvXGg6+UMP8iKzu3+exUVvDmdmba1/S47z8Uyk=)
2: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: UG6CUHxpomIun1OcS6XtWE7Xs2p0FgjIRr3TFwP+PEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:15:19:4f:62:a2:44:c9:56:84:ef:21:2d:c6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Aug 6 05:01:02 2025 GMT
Not After : Aug 7 05:01:02 2025 GMT
Subject: CN=2f60cc2c06c31c8c580b97c8e2ba0d8fc21209db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:94:e1:49:39:07:39:38:e9:e1:a6:f9:f7:
a1:a8:ab:a6:f2:35:0f:88:fc:73:b1:77:fa:ad:a5:
24:ae:66:ee:5e:8d:e9:82:64:3f:ce:c4:78:47:ca:
10:99:c6:d5:cb:9e:8b:8d:16:71:c4:fc:61:4b:a9:
d6:c2:c5:42:6e:a7:b1:bf:37:13:0f:b7:1b:67:d0:
51:87:1f:86:4f:1e:80:b2:36:ad:cf:15:95:9f:b5:
4b:44:8e:35:3d:de:2a:fb:a2:28:ef:63:db:11:2f:
c0:54:24:0c:f1:5c:64:2b:64:ce:ee:5d:dc:94:8a:
0c:dd:11:cf:91:20:42:bd:21:c4:52:5b:07:cb:d1:
46:7b:c5:bb:01:b9:85:7b:f8:66:80:f4:0d:8c:af:
6a:85:09:bc:76:70:42:53:ef:0c:31:4f:b1:8a:19:
c9:83:24:b5:1d:4b:6b:0f:2e:fb:a6:9a:ef:5f:2f:
50:a1:fd:b6:bc:b7:a1:4f:da:d8:f1:b9:a6:84:77:
5b:bd:0d:a2:c4:9b:4c:bb:61:2c:37:ea:33:e5:43:
11:2e:6f:36:8e:63:1e:f9:b6:82:d3:98:c6:b0:7f:
c7:be:51:fd:a1:89:4f:57:fd:7a:93:2f:38:f6:e7:
70:1c:0c:a6:dd:47:6b:03:ac:c7:a6:55:8f:8f:55:
49:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:60:CC:2C:06:C3:1C:8C:58:0B:97:C8:E2:BA:0D:8F:C2:12:09:DB
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1b:53:2c:88:3f:cb:53:3c:97:e8:37:4f:a9:a4:55:7f:14:
c7:13:e1:a7:03:b3:e8:6b:46:1d:90:33:97:c7:ce:59:8e:4a:
5b:22:21:1d:00:ea:8b:d8:1d:44:be:f8:7a:3e:77:e9:67:25:
0b:a5:43:91:42:36:62:6b:4c:7a:a4:4d:cd:87:be:41:54:13:
9e:f3:91:00:1f:e4:ad:9b:2d:78:76:2a:07:4e:e5:7c:50:1b:
f1:ca:b3:0d:b9:ae:98:2b:c4:cc:b6:8a:73:85:61:e6:5c:bd:
5c:e7:ea:af:05:da:10:9c:8a:d5:3d:a2:84:9e:b1:56:4c:c0:
c4:59:31:50:36:bf:24:ee:b1:62:da:c4:6d:a8:34:32:0f:4a:
ed:f8:af:ba:67:2d:17:d5:4a:ab:2d:f6:ea:04:df:68:ab:30:
6b:c6:a8:2f:ea:ab:3a:36:ea:05:43:c5:22:81:65:48:e0:33:
6e:ef:7d:e3:e1:f4:67:af:a6:b5:5a:1d:55:80:13:b9:27:7f:
6f:74:0a:cf:86:09:1c:95:93:33:52:d3:cc:ea:34:aa:3d:73:
e6:f0:bf:b4:22:9e:46:f9:50:0e:4a:9b:e9:90:fe:79:8d:69:
93:0f:e1:ae:cf:bc:0c:5d:82:bc:25:47:5f:10:cd:de:ba:69:
b9:55:4d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:38:54 2025 by rpki-client