Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
File: quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json)
Hash identifier: NO7g1Yhfuu/6wY3pUzqBshWWi0OrycI3bv7Aw3cdvDg=
Subject key identifier: BD:C1:2A:08:9B:F6:37:2D:2F:21:19:51:7E:FE:5A:E6:F7:75:AF:C5
Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Certificate serial: 01974967D90157D356B8F45BE6448600F1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 08:00:31 +0000
Manifest this update: Sat 07 Jun 2025 08:00:31 +0000
Manifest next update: Sun 08 Jun 2025 08:00:31 +0000
Files and hashes: 1: Se8jY-LoM2MVsZ37wmyygWUdZqw.roa (hash: 460xRSiSARjue5TmuazrIkrxiYolcj28Woj0bWcIVJo=)
2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: 8LMB0Nuhwc9Up9qUtXE2cK9i14kCmeg/LqVBACLSiHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:d9:01:57:d3:56:b8:f4:5b:e6:44:86:00:f1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Validity
Not Before: Jun 7 08:00:31 2025 GMT
Not After : Jun 8 08:00:31 2025 GMT
Subject: CN=bdc12a089bf6372d2f2119517efe5ae6f775afc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1e:7b:cd:5f:8a:ca:cf:70:76:10:1c:a5:d1:
c0:2f:1b:19:98:02:ab:b3:c7:9f:4c:7e:74:14:9d:
13:7a:c2:4d:b1:bc:3c:53:88:cc:8b:b9:88:db:c5:
3c:de:bc:56:36:e8:6d:5c:2c:a7:a6:0e:76:4f:6b:
7e:3f:2a:8e:d7:1d:85:6a:78:3c:f8:8e:4b:8d:44:
bb:e6:24:98:0f:78:38:ac:78:6b:4b:c9:63:12:f0:
b8:5c:08:a1:f6:b8:fd:0b:de:6f:f7:ed:bd:d0:1c:
86:16:99:2b:11:b4:df:b5:0f:04:af:72:c8:34:67:
54:02:af:07:12:76:94:e8:14:a9:64:cc:4b:43:21:
1f:87:8c:74:60:71:fd:ad:eb:7b:b3:c8:05:a8:77:
41:b0:88:e9:9a:e3:9a:01:da:a6:1b:a1:fc:f3:a7:
0c:f8:4a:c3:1c:1f:dd:15:9e:89:a4:a9:88:fb:13:
cb:0b:42:7a:a1:ca:db:eb:d8:50:0a:0a:8c:99:4b:
95:cd:e3:86:68:52:90:86:7d:44:47:05:16:14:0c:
a9:7e:1b:2a:d8:d9:de:29:e8:9f:50:97:7d:7e:76:
d5:5b:75:bd:6b:20:fb:5d:3e:11:32:0c:0f:ff:cb:
94:35:8c:28:67:e4:f4:47:13:9a:8f:cf:e2:bb:71:
b7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C1:2A:08:9B:F6:37:2D:2F:21:19:51:7E:FE:5A:E6:F7:75:AF:C5
X509v3 Authority Key Identifier:
keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:d3:70:01:dd:d0:c9:cf:06:2c:ed:b5:cd:51:64:e6:7a:34:
eb:70:db:64:dc:41:c8:8f:bf:a1:22:ba:c9:5b:b3:82:63:18:
69:09:68:1d:aa:13:7f:8f:74:8a:cc:75:de:c3:90:63:37:00:
46:5c:ec:52:de:78:cc:dd:c5:68:63:7d:aa:f2:07:38:97:df:
51:9c:3d:a2:61:da:af:15:e1:f6:f9:65:3d:b1:0e:f3:dc:e5:
d8:a8:20:58:e3:29:72:62:4d:ac:03:4f:72:0f:a9:47:5e:45:
63:fe:b8:e3:82:d3:57:c1:a0:6b:55:f6:a8:1f:78:b4:00:80:
a3:c6:16:d9:a9:90:25:cf:d4:0e:27:33:a2:5d:c4:08:9f:20:
52:74:f6:28:c4:b7:27:f3:d5:13:97:ba:cc:74:72:95:1b:ef:
84:4d:34:00:27:58:86:1f:5a:12:c5:c2:3e:28:e8:b0:a7:4e:
e3:93:e3:7a:53:e0:7b:b7:e8:d4:96:f6:48:44:69:f0:05:25:
b1:bb:57:a6:5a:61:ba:6d:76:3c:60:ff:40:45:eb:7d:ab:4b:
18:65:94:7d:6c:cc:3a:9e:6c:07:66:c4:16:1d:49:2d:93:0a:
2d:c5:e7:a1:91:23:fa:88:2e:2a:d3:15:31:3d:4e:4b:44:36:
54:0d:d1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:00 2025 by rpki-client