Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json)
Hash identifier: yDLJNQcsWbBAZzTP+BlG94zn1MqT8xxBvj6/3Oje5bA=
Subject key identifier: 68:82:0A:10:C3:A7:6A:70:F4:2E:8B:16:09:17:29:C7:D7:B0:2F:46
Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742
Certificate serial: 01974AE8F4CDF0D9AC9A4E6DD487366D5B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
Manifest number: 0120
Signing time: Sat 07 Jun 2025 15:01:10 +0000
Manifest this update: Sat 07 Jun 2025 15:01:10 +0000
Manifest next update: Sun 08 Jun 2025 15:01:10 +0000
Files and hashes: 1: 0TAMfzKO6y7wTDVfhrp7A0vqejU.roa (hash: 3Yzu9IXvscc/7fQLVXNg8nKXbm7Wf5jZKKVCSByaB5U=)
2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: rvuzagfe53tRI8+dgV8b8kTGHmy+BqQRCSNHa4Hrbpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:f4:cd:f0:d9:ac:9a:4e:6d:d4:87:36:6d:5b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742
Validity
Not Before: Jun 7 15:01:10 2025 GMT
Not After : Jun 8 15:01:10 2025 GMT
Subject: CN=68820a10c3a76a70f42e8b16091729c7d7b02f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:f3:59:e6:47:f8:a2:10:2f:68:4e:1b:51:
69:62:e7:77:f9:35:50:c9:63:42:8c:0c:1f:d7:c9:
e2:fd:38:00:ba:65:f7:f8:cf:43:6e:98:58:fb:70:
12:40:93:dc:a5:7c:71:07:e1:c9:0e:64:b1:99:4a:
1f:b5:48:d8:db:fa:d0:82:d5:ad:44:58:86:93:e5:
f6:bb:94:84:92:f9:42:13:bc:41:f0:1d:ac:8f:b7:
61:42:6b:90:cb:05:c1:55:87:2f:ca:33:fd:62:95:
9b:4a:83:1a:66:86:fe:ae:22:76:c3:e3:c1:74:6a:
ef:09:0a:9f:e4:7a:46:3d:7f:d5:20:ed:0a:5b:b4:
08:ce:50:0a:31:69:63:ac:e9:bc:8f:f7:3f:64:d0:
c4:80:db:2b:04:b2:74:69:9a:83:f8:35:7e:d8:bd:
75:33:f4:78:96:ff:dc:e5:ff:a6:68:62:b9:13:71:
ca:27:ec:9e:ff:9d:5a:70:1a:69:fb:a3:94:82:c9:
1d:a6:9d:4d:77:1d:db:5a:7b:1a:53:5b:d3:a0:c9:
3b:2b:42:09:77:aa:fb:6f:a1:ea:b0:e2:56:0b:73:
ab:12:88:24:55:d0:84:93:02:ad:5d:b6:8e:f4:23:
74:23:de:0b:2a:c7:4b:14:bd:3b:29:70:f5:3d:89:
88:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:82:0A:10:C3:A7:6A:70:F4:2E:8B:16:09:17:29:C7:D7:B0:2F:46
X509v3 Authority Key Identifier:
keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e7:6b:f2:83:5b:5b:54:f8:49:19:7a:54:c1:e4:8d:19:e8:
43:47:b4:88:43:96:63:91:27:92:6e:eb:79:e5:62:aa:d0:0d:
9a:84:82:71:84:13:e2:61:c0:12:7b:e3:08:54:b4:01:a6:f4:
ab:f6:0e:f9:b0:d4:41:e8:be:a6:5f:4f:86:8e:86:7d:34:8c:
69:48:65:d9:3c:89:e6:fc:3c:b4:ee:7c:e0:49:60:0f:bf:5f:
ce:61:97:54:a9:ce:96:b1:3a:4d:35:c4:1b:a8:2e:07:3c:30:
cf:18:2a:fb:f1:cd:cf:95:86:01:8c:ee:36:3a:0a:18:43:67:
d6:5a:26:e7:72:ed:f6:72:d5:ee:56:4b:c2:a2:cb:c1:0e:12:
7f:ea:c9:ac:b9:22:c9:73:d9:e7:f4:c8:37:9b:bc:ea:f7:5d:
5b:a8:d1:d4:bf:b5:3b:3c:12:5a:85:75:90:49:0c:d6:37:f7:
0d:e3:91:71:75:0b:91:85:3d:8c:60:9b:a8:8c:86:6e:46:b5:
a9:b0:83:63:de:93:c3:ae:4c:3d:ff:38:d0:c7:60:14:16:a9:
87:72:20:65:a4:4f:9b:fc:43:95:51:b2:a7:33:0c:84:d2:93:
dc:c7:ba:f5:c8:e2:7c:d9:2a:47:a5:7e:0c:9f:4e:ec:2f:a7:
e0:3c:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:44:00 2025 by rpki-client