Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
File: qR_iZyyPHBKyetoPzLqnwhLL1xw.mft (raw, json)
Hash identifier: iDU6Bm0vLxpbdEP8eoM7tlmQ9HVm5VyaRRxES+3dVPc=
Subject key identifier: D4:69:00:E9:9F:AD:82:10:20:A4:E4:AF:A3:2D:38:E5:65:B3:49:33
Authority key identifier: A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
Certificate issuer: /CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Certificate serial: 0197499F2A388A07D227E4A12A8EF5E796F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 09:00:57 +0000
Manifest this update: Sat 07 Jun 2025 09:00:57 +0000
Manifest next update: Sun 08 Jun 2025 09:00:57 +0000
Files and hashes: 1: 2Q0kx85pwBzfIMwLp9ldarIpih0.roa (hash: D6p/IFbJlNokn2XAUVSHhwdlOMDmGJADmbqv1d/nsjg=)
2: qR_iZyyPHBKyetoPzLqnwhLL1xw.crl (hash: ysHTujcpA3VcJkdBYiWwiNF1DMjq3kzdxFGRj5xNuHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:2a:38:8a:07:d2:27:e4:a1:2a:8e:f5:e7:96:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Validity
Not Before: Jun 7 09:00:57 2025 GMT
Not After : Jun 8 09:00:57 2025 GMT
Subject: CN=d46900e99fad821020a4e4afa32d38e565b34933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cb:25:01:b9:56:9e:29:dd:c3:e0:91:00:8a:
fd:f8:a7:ae:47:b9:c6:e6:47:04:91:34:43:a0:b6:
f0:99:8c:c2:6b:55:79:56:41:25:28:6f:f3:c8:29:
4a:b5:d1:b5:b4:a5:d9:65:ee:a1:ab:1a:e8:25:c2:
43:b7:e7:3c:a2:47:88:77:45:ad:41:47:e2:ca:f4:
79:89:66:30:93:3d:aa:88:8a:c3:50:cc:06:8e:6f:
3c:44:76:ba:53:4e:b1:9e:41:a8:20:6a:76:af:e0:
c9:10:f3:9b:2d:b7:66:bd:06:cf:aa:3d:0d:e5:79:
28:05:62:33:48:d9:ca:ec:7d:10:c1:9e:e9:cf:d2:
87:df:6a:65:85:6f:9e:6a:38:60:28:f3:2e:88:e5:
66:9a:f6:a7:49:dc:df:6e:31:61:18:4c:fb:f1:21:
c9:db:33:e8:1a:b7:40:5c:db:60:0c:70:a9:38:dc:
40:7b:86:94:2a:77:30:d4:12:9b:23:2f:0d:c5:01:
1d:f7:e2:eb:81:1d:09:3c:f8:5c:f5:9a:74:e4:c2:
d7:4e:15:2a:d3:7c:54:be:c7:49:b0:fb:2e:e2:42:
3e:c7:a6:81:fd:06:77:aa:65:0a:50:69:92:9c:6b:
df:6b:6a:8b:0d:d1:6f:c0:31:e6:64:e7:00:10:f1:
f8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:69:00:E9:9F:AD:82:10:20:A4:E4:AF:A3:2D:38:E5:65:B3:49:33
X509v3 Authority Key Identifier:
keyid:A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0d:1d:1c:f3:f1:d8:db:61:43:81:89:c9:14:c1:a0:ff:71:
79:78:51:44:39:88:7e:59:cd:54:e2:32:58:e5:ea:32:fe:02:
cc:c7:71:c0:90:1c:77:34:32:b9:69:e2:f4:54:78:01:ed:5d:
23:87:91:e3:68:36:70:f3:d7:ad:3c:fb:86:1a:ea:99:6a:27:
44:b6:8c:4d:4f:ba:c9:1a:1e:7f:2a:7a:10:83:f1:ca:d5:ac:
89:9e:84:e1:9e:66:f1:4b:81:3b:99:6b:c9:e9:42:64:1a:b3:
fa:ff:d7:26:b3:de:02:e5:b2:f5:8e:2b:d5:e6:ae:01:c6:b8:
11:24:20:1f:9c:0c:8e:61:e5:2d:2d:22:15:dc:58:40:ed:89:
7a:94:d0:4b:ec:6a:38:62:ad:87:db:d1:ad:85:4e:a7:b0:55:
cc:13:38:e4:0e:d3:b0:10:c7:50:22:84:c1:31:14:c1:eb:43:
f7:48:ac:a8:cf:12:e8:ef:d8:c6:31:d5:2b:03:9c:b4:08:8b:
c9:8a:c9:99:fc:1a:cd:b2:a0:20:dc:e6:e0:25:53:0f:86:cc:
8f:57:3a:b1:56:86:6c:84:96:f9:8b:8d:d3:dc:60:dc:4b:16:
ed:17:fd:8a:ca:d6:23:7b:e7:2f:a4:22:d3:7b:9c:14:fb:be:
1f:16:2f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:46:17 2025 by rpki-client