Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
File: qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json)
Hash identifier: gITUVPzFVuAM02iI/MC48cC/y8aQvIox+xLcwIlb/uM=
Subject key identifier: DA:D7:41:5B:30:CC:8B:25:19:D6:5B:D8:B9:B5:E6:5D:DA:EF:FA:40
Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
Certificate issuer: /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Certificate serial: 01974C692BF864C31E31F5F229021E913E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
Manifest number: 1210
Signing time: Sat 07 Jun 2025 22:00:50 +0000
Manifest this update: Sat 07 Jun 2025 22:00:50 +0000
Manifest next update: Sun 08 Jun 2025 22:00:50 +0000
Files and hashes: 1: AHkD8Aaan3pABbcPGhXEHYTBg8Y.roa (hash: hXef/ttEb+W4FSVe0XdSIGoItwURMRnjh0hA4tDFc64=)
2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: C9rguWfvSZo30YjZePn0hm5kPvs6jXDw8P0MEYZQ6+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:2b:f8:64:c3:1e:31:f5:f2:29:02:1e:91:3e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Validity
Not Before: Jun 7 22:00:50 2025 GMT
Not After : Jun 8 22:00:50 2025 GMT
Subject: CN=dad7415b30cc8b2519d65bd8b9b5e65ddaeffa40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:c5:96:ad:7e:ec:cf:12:a0:d6:33:5c:11:
16:29:79:21:8f:6f:ba:2d:b7:d8:59:61:57:13:05:
43:dd:e1:82:cc:e3:e1:d2:8d:78:e1:ae:45:98:ef:
60:57:33:60:80:24:c0:75:c5:fc:68:42:48:6b:0c:
1b:02:ed:4f:50:b8:2f:2f:55:59:00:9c:c1:06:b0:
35:36:34:d1:46:22:bf:87:0c:1c:65:cc:36:02:df:
d8:6c:63:c9:fa:33:b9:d1:c6:d2:17:a6:ff:3f:32:
46:57:bb:ee:18:f5:9c:01:7c:ab:c1:3b:41:e9:82:
de:74:6e:6b:a8:bd:aa:46:6b:9f:58:ef:c4:5d:06:
a7:a6:80:9a:74:66:99:5c:0e:25:3c:0f:f1:a4:74:
b3:62:f3:f0:7b:b7:31:09:27:db:2f:44:e9:63:d9:
88:8c:5e:fe:9c:d5:1d:73:cb:d6:ec:b1:ba:7c:bd:
0c:fc:14:24:5c:2a:a2:dd:82:73:5e:44:8f:ec:49:
15:0e:a5:3a:83:7e:fb:b8:e8:eb:1d:db:03:fa:38:
52:10:5c:23:7c:38:9a:79:50:27:32:cd:ef:dd:d2:
30:02:ac:f8:62:9e:00:ea:e7:bb:df:3c:2f:ba:0e:
e8:4b:8f:bc:89:43:0a:46:1f:a8:7c:39:86:a9:79:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D7:41:5B:30:CC:8B:25:19:D6:5B:D8:B9:B5:E6:5D:DA:EF:FA:40
X509v3 Authority Key Identifier:
keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:03:f5:92:5a:8f:8c:eb:2f:1b:76:77:e8:8d:32:06:90:ba:
1d:14:5b:6e:ea:1f:1a:79:67:13:86:bc:01:74:01:71:8b:67:
68:2c:5e:43:e4:e3:ff:d1:3f:5d:22:dc:73:25:b6:e6:97:17:
9d:5d:9c:5a:b6:0e:b5:9f:a0:57:ad:67:10:73:45:9e:dc:68:
05:1e:21:58:09:24:c9:34:fe:5c:ac:b0:9e:9c:00:75:e1:75:
40:e5:c2:8e:53:24:64:2f:fa:af:96:57:7b:41:15:dd:0e:67:
a5:b5:9e:42:fe:86:2d:6d:bd:77:fb:42:e5:7d:4f:96:a5:be:
73:4d:a3:3b:f8:34:a1:2e:34:3b:47:20:39:47:d4:db:52:b2:
61:32:9f:dd:e0:13:05:b4:45:91:d0:ce:87:78:15:cb:dc:f1:
74:70:29:2a:e6:d4:f1:82:c2:61:c5:b4:6a:6a:15:c7:d7:36:
79:27:6d:a9:33:0c:bd:ad:b3:52:cc:f8:ec:ab:c8:13:d7:89:
55:cc:cd:8d:19:ac:e2:48:02:ac:49:d9:bf:49:7f:28:e8:eb:
fb:96:90:c6:8a:fc:94:b6:df:bb:6e:87:9f:28:47:58:dc:f6:
ee:fe:89:c2:4a:43:d8:67:ab:00:81:dc:89:0c:1b:15:82:2f:
d8:dd:98:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:19:05 2025 by rpki-client