Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: mhO5Za9FhXHghEsSjewN1pKmyt0f1/M31vngi6F2nF4=
Subject key identifier: CE:AE:75:19:3A:E5:FA:04:9F:0B:0E:0E:A2:A8:62:6A:C8:3C:2E:87
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 01984965692BBC0504EF7FDFD7D9026C8F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 01:00:39 +0000
Manifest this update: Sun 27 Jul 2025 01:00:39 +0000
Manifest next update: Mon 28 Jul 2025 01:00:39 +0000
Files and hashes: 1: CLFvtBlCszPljVNHlNiA9R-sl_c.roa (hash: /Tu6jIruJ01g/a0I0NJoIAi1setevOJy2+jMKtPuHbo=)
2: QDogk9LeixWbk7Okb-SPGo3DZsc.roa (hash: UXsKXqumkYzMjQANzxQvweH31V1wu92CHEL8JuHdFNw=)
3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: MBEDahG14BdJNyR5mTkkoM8rI6QTjIFDBKCezYpMTCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:69:2b:bc:05:04:ef:7f:df:d7:d9:02:6c:8f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Jul 27 01:00:39 2025 GMT
Not After : Jul 28 01:00:39 2025 GMT
Subject: CN=ceae75193ae5fa049f0b0e0ea2a8626ac83c2e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:a9:f6:ce:07:8e:30:f7:32:45:cc:d2:d5:
51:95:84:fe:5e:e6:8c:e2:6e:1d:8e:fc:fb:e5:a9:
42:a8:ec:05:10:3e:a1:bd:bc:fb:66:17:ed:b1:0d:
27:3f:81:ea:f0:31:fc:6a:df:83:46:49:ec:80:cc:
d7:42:38:1f:23:71:49:56:3f:e2:f4:6d:a2:70:32:
d0:bd:27:03:96:1e:9d:7b:55:38:6a:e7:a2:36:ea:
74:4e:ca:ff:dc:1a:05:db:69:fe:ba:04:33:a8:e1:
d0:ae:29:dc:de:5c:c4:dd:07:d5:b5:32:74:fc:60:
89:f7:37:6e:8b:a8:06:df:40:9d:7a:ac:51:71:c6:
b7:bc:0d:e7:5c:63:9d:79:6e:47:81:e7:25:f9:0d:
ba:a6:1c:97:f2:54:b9:fe:8e:a0:85:56:e9:e7:7a:
1d:4d:cb:89:84:4c:4d:6f:36:52:06:27:f8:12:92:
d6:4e:04:f6:9b:17:89:30:25:1e:ea:c8:5c:5d:f1:
7d:01:f6:a5:e8:60:da:8c:bd:02:71:51:31:4f:2c:
f5:d6:d9:3c:6d:66:04:8c:58:f5:35:6b:e1:fa:8b:
33:eb:d7:c9:0a:1b:02:b5:c2:37:b4:d5:82:b4:02:
50:83:ee:80:ae:3c:c7:2a:ee:cc:7e:38:89:c1:96:
14:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AE:75:19:3A:E5:FA:04:9F:0B:0E:0E:A2:A8:62:6A:C8:3C:2E:87
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:71:30:03:a5:6a:9c:e1:60:54:f9:22:f5:19:9b:60:90:49:
d8:31:85:57:0f:0d:ff:0a:e1:2c:16:65:f3:de:ed:d5:28:f2:
c8:7b:bb:60:74:79:12:65:3e:37:79:29:be:aa:73:9f:16:4b:
24:59:7d:0d:2f:28:4c:b6:90:8b:96:f7:bd:6d:28:89:a4:db:
37:0d:80:86:ad:95:7c:c4:fd:b7:17:d4:16:54:87:37:18:c8:
ab:9c:1e:2d:bb:2e:c8:20:ea:1d:76:59:df:80:d8:9e:23:b6:
21:b8:13:45:66:5d:6f:85:ab:78:6f:72:ab:de:64:4c:40:4a:
1e:89:3d:7e:f6:c7:0a:ca:b8:71:f8:57:cc:a5:13:aa:dc:d9:
57:e3:5f:04:39:af:43:52:e8:f5:49:f9:44:89:35:40:62:fe:
4a:4b:31:e6:46:ea:6f:54:57:31:ed:79:2c:66:5c:f7:21:83:
85:11:3b:13:49:15:83:3c:aa:63:3a:2e:2b:78:f4:8c:ba:dd:
66:91:80:ec:75:e2:c2:62:c9:07:bb:c8:a1:53:ad:02:07:45:
dc:3a:fa:fb:16:69:1a:db:a9:3a:c4:b5:56:e1:8d:0d:23:bf:
f0:ed:2a:d1:85:50:0a:c1:d4:ea:89:0a:6e:cd:51:0e:e4:8d:
12:d7:3d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:21:57 2025 by rpki-client