Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
File: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft (raw, json)
Hash identifier: JEF8G/kbF7jDLbthEMLfduqNaUnqYSnUWg5MV3l6/AY=
Subject key identifier: 2C:4C:B2:3A:36:08:73:AF:39:85:E3:34:AA:80:88:1A:D8:C9:8D:BC
Authority key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
Certificate issuer: /CN=abb060166d64cead0e295797e8d27c55d8898bc2
Certificate serial: 01974C6905BFD1EC04A57C528D5317F5AB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 22:00:40 +0000
Manifest this update: Sat 07 Jun 2025 22:00:40 +0000
Manifest next update: Sun 08 Jun 2025 22:00:40 +0000
Files and hashes: 1: ZVdKIHMCZIgZmO29HfZuK9KianY.roa (hash: 2kGDIO6FKG2t3hXhHnF2iU2nfmaxGFRQZKaQHnUSkxM=)
2: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl (hash: cXt/Ej0L2NTHFoFeA3DW8YF0TinYVOoO2WqpOF6MfqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:05:bf:d1:ec:04:a5:7c:52:8d:53:17:f5:ab:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb060166d64cead0e295797e8d27c55d8898bc2
Validity
Not Before: Jun 7 22:00:40 2025 GMT
Not After : Jun 8 22:00:40 2025 GMT
Subject: CN=2c4cb23a360873af3985e334aa80881ad8c98dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f9:e1:99:6b:d4:cb:45:6c:53:ad:a7:e4:cc:
cd:ff:65:11:93:91:f4:48:2f:4a:20:ee:44:8e:c7:
8c:19:c7:69:02:56:91:10:90:cb:f7:59:e0:96:6a:
7a:f1:9d:45:cc:42:36:11:c0:63:45:ba:ba:e4:10:
04:ec:73:e6:29:39:13:24:b0:bd:7b:69:e2:88:d2:
df:34:df:ac:98:8e:8e:4c:ae:f7:7a:09:1e:8c:ed:
41:53:d3:23:8a:ee:21:9e:67:19:ee:11:49:a7:1b:
52:16:fd:7f:cc:d3:ef:d7:81:0c:fd:7e:e4:3e:9c:
83:1e:1a:3c:13:32:51:45:10:b2:7a:0b:dc:9e:94:
29:ea:65:85:9e:7c:2d:c2:63:77:ff:e2:9f:a0:f3:
04:9e:9f:bc:13:04:25:d2:9c:8d:42:65:05:0b:8c:
0a:6a:c5:62:06:91:33:1f:eb:8d:40:26:e6:da:96:
0f:57:ad:b0:57:38:a3:43:1a:10:bd:82:a5:af:94:
4c:63:a2:f9:2a:e3:5f:15:47:d5:c4:45:d0:2d:f6:
76:e3:d6:79:19:d2:ac:8d:fb:23:b1:83:d7:d1:a5:
c7:e2:71:fd:bc:37:57:44:00:ed:7a:31:29:65:6b:
5e:c5:ef:a9:4b:d8:8a:b2:24:e1:e8:b1:d7:00:64:
fc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4C:B2:3A:36:08:73:AF:39:85:E3:34:AA:80:88:1A:D8:C9:8D:BC
X509v3 Authority Key Identifier:
keyid:AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1d:59:7a:ce:15:c8:f5:3e:21:60:a2:5a:f6:87:a9:34:0a:
47:fe:62:28:81:94:61:92:95:bc:1c:cf:57:db:40:f6:d1:20:
e9:37:fe:06:6e:8f:7c:b9:43:60:e7:9a:73:54:b9:e9:0e:8b:
dc:91:ec:ba:89:e7:0f:5e:c0:35:7b:63:70:d5:61:b1:15:5b:
36:86:3a:75:ca:76:43:d5:0c:0c:97:3f:88:84:b8:ef:c5:f5:
a4:03:e2:b6:87:09:e2:38:90:92:30:83:0c:f7:6b:af:50:2f:
76:74:4b:80:da:34:a1:bf:f3:ee:22:8f:cd:9d:52:8a:d5:92:
fd:4a:2b:86:ec:06:79:4b:6b:c5:70:16:a7:64:88:0c:19:22:
eb:e5:62:7b:ad:ad:d9:a7:45:fb:03:1c:1e:a4:10:ab:c2:83:
52:ed:f1:f4:ed:56:c7:e8:09:73:c8:be:a6:33:aa:1d:b9:83:
36:cc:3e:72:a7:fb:af:9d:55:26:12:7e:4c:9f:a0:35:d6:c3:
d3:37:3c:9b:2c:4a:7a:8c:47:d7:c8:17:e0:89:b8:7f:cd:e8:
96:2e:4b:d9:9c:63:7b:d8:81:a4:6e:73:4f:eb:71:6e:f1:bf:
4d:31:af:41:fd:14:7e:3f:07:f5:f0:50:9a:f3:11:0a:f8:0a:
6c:66:2c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:15:59 2025 by rpki-client