Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
File: Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json)
Hash identifier: DUebcETQblhLXMgNFufcXcitRyKTlL95wsSodpYHdEs=
Subject key identifier: BE:0F:6A:3E:A4:D2:92:41:22:2E:FF:B5:E5:E0:6D:F3:CE:3F:99:CC
Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Certificate issuer: /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Certificate serial: 019748557E8068767DF9FFE51C5292CD1C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 03:00:51 +0000
Manifest this update: Sat 07 Jun 2025 03:00:51 +0000
Manifest next update: Sun 08 Jun 2025 03:00:51 +0000
Files and hashes: 1: MCPNj8vuGzZknoWdqGIIivLkJGU.roa (hash: 4hhwQet2SGHC4RmJ2ByvcZIanR2/yV/AqfOhLRjbUPM=)
2: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: +jxfqYOnkszUkdAYGUcikAjqD7/75NI+D1EhIFrv0w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:7e:80:68:76:7d:f9:ff:e5:1c:52:92:cd:1c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Validity
Not Before: Jun 7 03:00:51 2025 GMT
Not After : Jun 8 03:00:51 2025 GMT
Subject: CN=be0f6a3ea4d29241222effb5e5e06df3ce3f99cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:53:96:6c:d6:7e:d4:4a:1e:04:40:b6:15:
79:44:bc:55:de:5c:0b:e9:02:8b:88:f7:09:91:8f:
8a:0c:d2:b9:fe:ad:e7:67:39:85:7e:33:3b:66:6f:
64:fa:bc:98:1f:3f:58:cd:1c:be:70:de:70:98:f4:
e3:ea:54:1d:4d:38:28:6c:61:6d:e4:c8:69:77:64:
44:5b:5e:99:27:82:fa:f3:f5:4e:44:f4:08:91:44:
92:3c:92:a6:fd:c6:7c:89:2e:9e:21:3a:8e:e1:c7:
9a:f9:cc:69:8c:63:ae:cd:e8:b2:78:bb:a7:c1:f8:
df:86:5f:66:e8:83:aa:57:4c:4f:a5:0e:17:93:d0:
65:13:ac:be:61:07:01:60:2c:17:84:61:f5:bb:9d:
77:bc:63:46:0d:e1:e6:28:54:ef:87:33:0d:43:5c:
b4:bc:86:c0:14:26:bc:74:c3:1b:41:e5:6f:f4:ec:
38:fc:db:c4:d6:f9:44:73:bd:49:55:b1:ed:fd:61:
52:83:a0:b3:4f:57:d7:03:f2:84:ab:b7:ec:d4:7b:
30:04:a8:5a:46:0e:e3:70:27:70:76:18:fe:07:f0:
2f:01:f3:5d:19:e7:cf:3a:e9:fc:1f:5a:b3:8d:18:
54:be:24:e7:d6:35:84:5e:ca:71:00:d5:81:1b:e4:
7a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0F:6A:3E:A4:D2:92:41:22:2E:FF:B5:E5:E0:6D:F3:CE:3F:99:CC
X509v3 Authority Key Identifier:
keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1b:5a:24:38:12:07:54:14:cd:e5:68:f0:28:aa:aa:e7:2d:
09:0e:d3:3d:51:dc:27:d4:fd:a0:5a:98:16:b7:00:8b:b0:36:
d9:39:d3:0a:cf:3b:64:d9:41:2a:5f:f8:2d:fa:c2:3a:70:4f:
70:80:30:f7:1d:49:83:dd:22:75:2b:76:1e:e3:fe:5c:bc:9a:
8c:8a:d9:76:0d:a9:b9:3d:11:d4:c2:23:20:a1:c3:0b:c6:4f:
85:7e:77:c2:fc:60:52:ce:39:2f:8d:ad:2e:cd:02:23:05:4a:
85:b0:24:40:8e:58:59:49:33:8c:c8:56:39:b4:42:97:d6:12:
07:3a:fb:40:27:b9:fd:5b:74:02:91:a4:71:31:5a:f8:67:72:
cf:ef:37:f9:d5:43:fc:eb:59:82:83:48:c1:19:da:b9:db:22:
9f:f9:10:b6:40:68:9a:59:dd:4e:88:ce:de:40:07:08:0d:ec:
aa:4c:4b:0a:a4:4b:38:fa:1c:dc:33:d1:4d:e0:89:7d:e2:ce:
69:3e:0d:34:55:d0:31:98:9b:dc:53:8f:d2:0a:22:2d:1b:a5:
24:2f:70:ed:5a:27:df:65:21:20:3b:fe:27:be:40:d2:42:7e:
a6:f4:ca:dd:14:bb:3c:7b:6f:f5:6c:70:1c:9c:58:50:da:2c:
f0:c6:82:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:15 2025 by rpki-client