Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier: hEE55mWkEMmUxIW3Av3iCuozkzxyvUW0MVOCns2xzsU=
Subject key identifier: 08:05:D4:F8:12:D7:EC:01:37:DD:1E:9A:E0:A6:82:28:04:C2:4F:97
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 01974E8E19896BE9FCEE8E8D64BD7292D60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 08:00:24 +0000
Manifest this update: Sun 08 Jun 2025 08:00:24 +0000
Manifest next update: Mon 09 Jun 2025 08:00:24 +0000
Files and hashes: 1: _O5lI_NrxjYhfLVpiDzpC5pBpNo.roa (hash: kRyUBDk7DeOK1Op874QsCkY85Pkvq4XHwWApA0Uvb60=)
2: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: fQbK13XxIzwCrym3ZamKub2PMU0iXaHmO8r7fuoHRJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:19:89:6b:e9:fc:ee:8e:8d:64:bd:72:92:d6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: Jun 8 08:00:24 2025 GMT
Not After : Jun 9 08:00:24 2025 GMT
Subject: CN=0805d4f812d7ec0137dd1e9ae0a6822804c24f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:d5:56:8d:5e:e2:e9:26:86:a4:07:d5:ed:
e3:9c:e0:59:2c:b8:06:cc:43:38:4b:50:d2:67:50:
09:a0:8c:64:98:3a:84:83:c1:cc:58:36:9d:4a:54:
d2:15:a5:9c:87:4e:ec:3b:05:c5:7d:7b:ac:d0:07:
a3:ae:31:b3:ca:f2:f0:20:2e:05:0c:8f:0f:2c:eb:
80:c3:ed:8a:3c:b3:01:46:b4:ea:d7:f4:9e:4d:cb:
55:28:37:aa:69:12:8a:84:23:42:77:87:9f:46:9e:
c9:a7:f3:fc:9c:f3:d7:b7:b3:a8:34:29:1b:25:fd:
b1:29:ca:37:2f:36:bc:65:40:ab:4b:33:16:e1:f3:
49:1b:bf:8b:2c:d7:e4:de:e8:9b:6a:62:89:97:b3:
b6:6e:5a:1b:94:6b:e5:2a:bd:94:74:62:7b:6e:f5:
ea:f2:49:91:ac:90:d1:bd:6e:f3:6a:4e:25:45:3f:
fa:3e:75:1b:5d:11:92:c5:fe:82:3d:6b:2a:ac:ac:
67:d4:46:45:54:fe:ef:89:60:e2:6e:a2:55:03:5e:
98:85:c8:26:4d:49:1b:81:88:a2:fd:f3:85:17:4a:
1a:13:c0:ec:06:bb:f4:1a:cb:e9:72:45:0c:48:06:
0d:07:87:6d:15:fe:83:4d:41:86:3c:22:f0:3b:af:
eb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:05:D4:F8:12:D7:EC:01:37:DD:1E:9A:E0:A6:82:28:04:C2:4F:97
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:92:32:11:19:a3:9e:ac:48:d3:0f:a1:83:a4:b5:d4:40:28:
87:0e:be:6d:1e:f1:4a:08:33:92:44:d6:14:87:59:2a:c5:c1:
85:6f:d9:48:5b:d7:82:ed:5f:53:11:99:8a:86:23:55:3f:58:
cb:0c:c8:52:75:c7:9b:fe:42:c7:37:a6:3f:a0:9e:18:e6:eb:
14:1d:95:3c:66:56:40:66:af:58:30:3b:08:44:ed:bc:21:9f:
ae:9a:4b:48:3d:37:e2:7b:b4:17:a1:db:c5:cc:ec:56:6c:78:
a5:9d:4f:01:bd:80:6b:cc:92:88:0b:1a:25:83:14:bd:a4:c5:
08:f9:cf:0d:ac:9a:5a:b2:0d:44:af:0a:d2:8f:00:87:39:fb:
17:a6:1a:00:93:58:90:50:30:ef:fa:78:70:fc:1f:36:18:03:
dd:8d:ab:14:40:25:43:f3:eb:25:92:ce:96:92:89:c6:4b:da:
78:3c:7b:ef:8c:d4:50:0e:ce:90:a5:fc:94:eb:73:ce:c9:94:
01:9f:c9:9e:d3:25:2e:1f:8e:eb:e7:b1:fe:8a:df:b3:df:bb:
e2:8d:56:2b:ad:15:e6:c4:0e:f2:b5:b2:6f:67:a1:dc:88:ee:
0a:df:4c:ad:46:38:8a:fe:33:a7:38:e1:3c:be:e0:de:86:f9:
3b:5a:63:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:14:43 2025 by rpki-client