Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
File: q2TJrlviZApf1pRYanBMo0wgh78.mft (raw, json)
Hash identifier: tFyJbm+coDfFw5Zi3TEWU0n0UFWTqgOhE2id2FGt7SQ=
Subject key identifier: 89:0A:5D:BC:A5:37:9C:D2:74:EF:6E:91:57:B0:75:9D:B5:57:17:11
Authority key identifier: AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
Certificate issuer: /CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Certificate serial: 01975045DBE6B1BD159C211744A9C9735196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 16:00:44 +0000
Manifest this update: Sun 08 Jun 2025 16:00:44 +0000
Manifest next update: Mon 09 Jun 2025 16:00:44 +0000
Files and hashes: 1: JLsWf4ypDqy3C3Vznf4c_jhkWzQ.roa (hash: W+Y7OMJT6eANPHdTBze3RK40F6OnPRrXmssah9nRki0=)
2: q2TJrlviZApf1pRYanBMo0wgh78.crl (hash: D9VPTnSgve6Wh5R/QaWYzOqKANvZpokiu9bN/1/RLE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:db:e6:b1:bd:15:9c:21:17:44:a9:c9:73:51:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Validity
Not Before: Jun 8 16:00:44 2025 GMT
Not After : Jun 9 16:00:44 2025 GMT
Subject: CN=890a5dbca5379cd274ef6e9157b0759db5571711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:47:c2:b1:2f:3b:57:b7:69:17:2d:1b:26:
b3:f9:27:7e:ec:db:ff:fa:d1:d7:ee:b5:bb:91:24:
33:df:2d:35:6a:32:fd:ed:e0:11:7a:26:6d:2b:68:
b3:0b:7a:18:99:79:0b:90:c7:b9:94:c8:34:df:aa:
41:3a:8e:ce:2c:ea:1b:a8:a9:1c:48:ed:d0:6e:41:
75:fc:6e:5d:06:8a:99:d1:f8:53:9a:c6:c6:4d:17:
49:a5:f6:c5:b2:1a:76:f6:02:91:bf:fa:89:e2:29:
0a:44:28:5b:42:84:2b:b1:4f:5b:31:06:8f:49:d5:
9e:85:41:2b:1d:f7:7a:bb:ae:e4:a8:07:3b:7a:26:
73:ab:5a:03:c1:e3:b5:ea:e7:ee:ec:c3:d4:c3:0b:
fa:da:7e:21:66:4a:89:6f:60:f9:36:69:0a:e1:a0:
fb:51:43:c5:ce:e4:e7:07:84:f4:50:27:47:d5:ef:
f8:fb:67:0e:5f:bc:42:94:48:50:42:16:1a:88:8a:
3e:71:76:92:d2:8e:19:2c:05:1b:cf:e1:8d:26:a8:
09:69:3f:f2:56:7a:11:d8:41:82:f2:29:60:0d:25:
83:14:33:91:15:92:83:f9:2c:01:ed:83:84:81:f5:
82:7a:5c:f1:fa:23:7d:d4:8d:bd:8d:8b:cd:2c:5e:
a6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0A:5D:BC:A5:37:9C:D2:74:EF:6E:91:57:B0:75:9D:B5:57:17:11
X509v3 Authority Key Identifier:
keyid:AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:80:7b:cb:8f:9e:ae:2f:75:cf:b3:b7:45:36:af:3b:ec:72:
c3:7b:fe:40:d6:2e:3c:a9:a0:55:88:0b:ba:b0:5c:46:ef:00:
b7:30:4a:1b:7b:75:9e:dc:7f:f0:06:a4:60:55:af:fd:b3:af:
63:37:6b:4b:5c:da:48:a7:21:98:30:13:0d:d9:3b:f9:46:e3:
bd:f9:ed:85:e1:54:e6:f2:18:34:ae:6b:64:d2:3d:fd:d3:f5:
d2:fb:4a:eb:e2:73:f9:5e:59:bc:4a:69:b1:cf:92:42:d3:31:
1f:ee:2c:3b:fd:61:f5:dc:2e:6d:bd:2c:4e:c9:7f:4e:32:ad:
5b:ff:61:fe:17:da:0c:3f:1e:ac:34:01:fe:21:51:33:8b:fe:
13:d8:63:e4:fc:3a:5e:eb:cc:ae:38:1e:7f:aa:be:a4:d1:f3:
84:cc:8d:9e:d3:b3:66:f8:c3:76:b8:6d:b2:62:00:96:b9:a6:
ec:0e:98:00:89:0c:60:33:c7:b8:54:9c:8e:ef:8b:79:32:24:
6b:a9:9a:15:37:b6:11:66:83:14:63:24:33:aa:46:b8:40:ea:
4a:86:b9:6f:0a:11:c1:fb:b6:85:9c:54:83:f8:46:82:33:ad:
d5:b6:f2:76:83:25:22:db:cb:50:10:96:7a:e2:a5:2d:92:45:
98:94:4a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:33:38 2025 by rpki-client