Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
File: q08Em20XYCv3tI0QTQja8BQx28I.mft (raw, json)
Hash identifier: h8Sd+JFs3RBGOJXiafWK+ZjdSIWyvSsGCJKBLHxOESw=
Subject key identifier: 83:0F:F2:89:C6:04:D5:B5:48:94:AD:01:99:C3:39:9B:31:52:4B:8F
Authority key identifier: AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
Certificate issuer: /CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Certificate serial: 01974D7BABD68B4065837685D734FFA917E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 03:00:39 +0000
Manifest this update: Sun 08 Jun 2025 03:00:39 +0000
Manifest next update: Mon 09 Jun 2025 03:00:39 +0000
Files and hashes: 1: kWd4hi-OyYBjozDmbmhqQmpA6Pw.roa (hash: ZCQPM7gY7pbLQQubJYcs97+7fXVoiPmIY9e2vsVxbNM=)
2: q08Em20XYCv3tI0QTQja8BQx28I.crl (hash: z66aGX9imJGknzt/EJlgFc5YNvQID0+MlMLZSfF8rAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:ab:d6:8b:40:65:83:76:85:d7:34:ff:a9:17:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Validity
Not Before: Jun 8 03:00:39 2025 GMT
Not After : Jun 9 03:00:39 2025 GMT
Subject: CN=830ff289c604d5b54894ad0199c3399b31524b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e1:9b:5d:67:46:db:1b:26:98:7f:38:35:83:
09:0d:f7:ce:71:c2:d4:61:0a:48:f5:f5:c5:05:43:
4e:40:a1:da:16:89:e9:20:2a:eb:7f:05:4a:91:ab:
51:4f:f2:ea:23:a2:51:2a:90:ef:46:98:00:7b:68:
ef:8d:ee:48:b8:cd:00:02:a4:41:76:cd:f1:f0:8d:
b4:fb:b7:6a:94:f2:93:b7:44:3d:32:a6:24:5f:f8:
1a:a4:53:de:8e:87:9e:91:fc:d9:85:af:e9:7c:1a:
60:ed:a5:28:0a:7b:9c:6f:2e:c7:e8:ad:75:dd:c4:
64:0e:49:bc:9b:8f:17:44:dd:52:78:7b:25:6a:ce:
d8:72:5f:a6:f5:2b:a6:d8:95:9a:23:92:9c:66:af:
02:51:9e:fd:10:64:54:23:a3:77:ff:60:18:31:c5:
d9:b6:a8:54:81:6d:4e:7a:0e:47:c1:ab:eb:77:ff:
52:a1:9c:55:b0:d3:55:94:87:ba:05:6f:de:ff:91:
76:0f:52:ee:c2:c4:a0:44:6c:04:72:05:87:5a:6e:
a2:14:19:cd:c2:c5:7e:e5:23:6b:69:c4:2e:45:04:
39:b0:42:47:26:cd:27:d5:c1:a2:66:5c:22:2a:95:
98:d9:b6:df:b0:5d:c4:9d:0b:19:6f:18:40:f0:fc:
f9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0F:F2:89:C6:04:D5:B5:48:94:AD:01:99:C3:39:9B:31:52:4B:8F
X509v3 Authority Key Identifier:
keyid:AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ff:c8:30:ed:73:97:b1:ba:78:e5:04:ae:48:c9:54:cb:0b:
1a:d7:3d:3f:04:a8:95:58:9b:e8:ad:08:8b:c6:26:b0:a6:44:
73:b2:16:0e:e0:b0:aa:71:17:e0:2c:f0:77:f8:3b:13:b9:ce:
c4:99:e5:63:f3:a2:ad:9f:fb:43:93:5a:2a:58:7b:e9:6e:69:
83:54:db:b0:5f:59:aa:94:bf:4e:63:94:02:3f:1a:cb:4d:b5:
c5:fd:d6:4a:d5:a7:bf:05:6f:58:9b:e5:99:8f:a5:a1:7c:cb:
51:a8:62:c4:36:9f:18:a5:f6:6e:cc:64:5b:43:0c:6d:bf:5a:
9a:cb:38:22:e3:ed:36:f8:df:ee:bf:b8:49:1e:76:8b:53:7f:
70:8c:25:ca:39:10:4a:95:4b:a1:a2:38:6f:f2:0e:ad:a9:71:
ec:3c:d3:73:b8:8c:c3:97:39:3b:8c:a9:89:a0:ac:98:68:30:
b3:64:a8:9e:43:d6:77:03:33:84:22:24:71:54:60:09:3c:00:
a0:db:80:49:21:52:20:26:c3:fd:34:d4:2f:35:51:f2:6c:b2:
97:7a:80:3c:ee:4c:50:f5:b1:44:87:e5:c2:78:f9:5b:7c:e6:
af:63:78:9f:f6:b7:d4:f9:26:c9:3d:68:a5:27:eb:d4:6d:8a:
28:c5:60:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:13:08 2025 by rpki-client