Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
File: q5ioJj4GO4p709cYDnpKpklTRBw.mft (raw, json)
Hash identifier: B/lu4xcuemvYowR2I2OIQIrHkz7QMn5CXZcgaPnrdgU=
Subject key identifier: 59:E3:33:F1:1D:D6:50:AB:13:7B:3C:E3:A6:25:AF:90:89:7B:DA:B7
Authority key identifier: AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
Certificate issuer: /CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Certificate serial: 0197624BDD62DE88D3D2A9505E6EBE6E0B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
Manifest number: 0455
Signing time: Thu 12 Jun 2025 04:00:28 +0000
Manifest this update: Thu 12 Jun 2025 04:00:28 +0000
Manifest next update: Fri 13 Jun 2025 04:00:28 +0000
Files and hashes: 1: 4fHNG3uqnKYRdS0KPogfVSeJ6Y4.roa (hash: EoqRZ5+OD3esILCMjil4nQygTYY9bzIijeRvhLDs9S8=)
2: kD0NYEJpgxaFFDcqPxx98oDLF4A.roa (hash: kEfgwntStfXPUtLxcdJZBEv9NrzPqg0tH8aS2VZkZpA=)
3: q5ioJj4GO4p709cYDnpKpklTRBw.crl (hash: nekcn3F44G7nrZ1DoVetv9oCoZEkmHK5B6iD84aCE+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:4b:dd:62:de:88:d3:d2:a9:50:5e:6e:be:6e:0b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Validity
Not Before: Jun 12 04:00:28 2025 GMT
Not After : Jun 13 04:00:28 2025 GMT
Subject: CN=59e333f11dd650ab137b3ce3a625af90897bdab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:ec:f6:43:6c:77:b6:0e:47:1b:14:43:e8:
1b:e9:f7:38:7b:5c:b2:a4:29:b6:ba:0e:0c:7d:b3:
5f:dc:9f:17:cd:d8:d5:49:18:22:60:f9:bf:55:47:
8e:78:b7:f1:7c:89:ca:0a:c7:6f:1e:ae:67:af:4f:
7f:08:3e:99:bc:39:bc:bc:2e:a8:2e:d5:15:9a:d6:
dc:d4:94:af:03:77:9e:a8:d4:c2:de:c3:76:7f:52:
64:2c:e9:a8:34:22:6c:b8:90:55:74:fb:f9:33:27:
86:a6:b1:ea:f8:63:16:a2:b2:c0:81:aa:ef:85:67:
21:37:ae:08:29:a3:cb:2e:b0:06:4d:9c:b5:40:39:
b7:e1:67:a7:d8:e7:9a:38:8a:0c:15:ac:67:dd:ce:
be:d6:59:26:cc:6c:d5:2b:e1:3f:35:cb:b3:d2:50:
c3:f4:12:30:6f:44:6f:6d:7a:dd:16:14:77:66:ec:
4b:a3:ed:96:af:84:4e:13:2b:e5:d3:e7:b8:a5:3a:
7d:11:50:72:16:31:6f:d6:a7:25:4b:e6:31:b5:e6:
2e:59:c7:1b:78:cf:62:dc:4c:c8:7d:2e:b8:a1:03:
ff:b6:92:52:b9:5a:12:2b:58:c3:d5:77:53:0a:92:
29:87:6f:27:fd:91:bd:6a:44:a5:64:5e:d9:70:11:
3d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E3:33:F1:1D:D6:50:AB:13:7B:3C:E3:A6:25:AF:90:89:7B:DA:B7
X509v3 Authority Key Identifier:
keyid:AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a3:29:04:8a:59:4b:52:0c:af:d5:a8:42:57:71:12:5e:6e:
9f:76:6b:cd:77:46:cb:c0:f6:06:93:92:26:53:24:32:2d:af:
ad:07:07:fc:df:80:8b:52:43:46:d6:38:f5:50:9b:db:93:49:
72:15:30:3a:de:ed:05:63:1d:e7:b9:ef:b4:75:33:c5:3f:5a:
0e:2f:87:54:0a:9d:f6:9c:60:b4:89:d6:42:8d:8a:2f:e8:41:
d4:be:aa:d1:21:76:ae:f5:3c:44:13:8c:11:8a:71:9b:d7:f2:
53:5d:a9:9f:df:ba:8c:19:97:34:2f:18:d7:ac:f4:18:b3:dd:
5a:f6:7a:db:bd:d7:4d:c6:62:00:4a:e4:9d:c3:16:80:19:14:
45:3d:79:ad:dd:02:cf:32:e0:73:5e:4e:e2:70:a1:35:2a:ea:
da:4f:5d:32:de:5d:8c:5a:71:1b:0e:66:be:0c:3b:6f:9c:fc:
ce:b8:29:df:b7:61:b4:d7:29:8f:a2:ae:2c:50:a1:bc:9d:03:
57:7f:39:5f:d7:da:db:82:0c:68:41:dd:b9:9c:68:82:2a:fe:
fc:72:d8:a3:e5:85:e6:9b:16:bb:33:f7:1b:1d:85:da:0a:80:
cc:62:16:37:c0:7a:7a:ab:46:c8:f8:15:50:4b:cd:a4:67:e2:
cc:6f:76:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:30:17 2025 by rpki-client