Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier: ywIKBBmUTGGNiiO6btU/lJKHjpkFLwXdvlRe8wh/7JM=
Subject key identifier: 7D:B2:50:8F:14:29:8F:C3:B1:DD:34:51:0B:2B:A4:79:5A:EB:87:B0
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 01974A0CA63BD46A529F4933FEA1374A50D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number: 0D0A
Signing time: Sat 07 Jun 2025 11:00:32 +0000
Manifest this update: Sat 07 Jun 2025 11:00:32 +0000
Manifest next update: Sun 08 Jun 2025 11:00:32 +0000
Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: oCpnAxTOOFqnjcWUx9UZEvx+UposFKAI0NbkGKphgNA=)
2: 2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa (hash: Ox67FMktxFvYuYpHVpuT5WkOs/dH1k6Q6zB500ivOTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:a6:3b:d4:6a:52:9f:49:33:fe:a1:37:4a:50:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Jun 7 11:00:32 2025 GMT
Not After : Jun 8 11:00:32 2025 GMT
Subject: CN=7db2508f14298fc3b1dd34510b2ba4795aeb87b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:b6:a3:5c:d9:af:14:b2:dc:10:d0:49:cd:
75:a8:42:aa:83:38:7a:23:98:b1:b2:d4:75:33:42:
69:70:fd:11:ed:38:8b:aa:14:78:5b:72:13:2c:d0:
1d:2b:9a:12:c9:cc:f5:db:15:12:c0:d9:81:e2:47:
7b:40:4f:1a:3f:80:80:a6:6a:32:bc:eb:92:88:49:
f6:06:1f:36:bd:1c:9e:0c:03:29:d0:de:f8:09:1e:
d0:81:3b:84:45:46:a9:ce:79:3e:83:65:58:d7:4d:
c9:36:9b:e3:1e:28:48:e7:2d:36:18:12:fe:1c:94:
46:41:41:b3:89:46:10:8f:72:e0:97:c6:4d:1e:11:
bb:5d:69:df:1d:8a:20:f3:0b:50:ba:f0:9d:f9:f8:
b6:b8:e1:73:b3:8a:59:f9:12:ef:a5:2a:36:4b:8c:
57:2c:0d:59:2d:b7:71:af:1b:ad:c4:e3:e6:72:b8:
8f:c8:e7:88:8a:cf:66:5e:b4:5f:a5:f2:b9:46:83:
ed:f8:38:cc:fc:62:4a:65:66:d1:56:65:c4:d5:81:
f9:c3:d6:d5:aa:2f:9c:fb:a9:af:73:af:28:b9:3f:
57:6b:11:e2:a7:74:18:2d:4f:36:10:af:87:f0:d0:
e0:8b:3e:f7:21:33:78:0e:c3:a4:9b:c0:5a:21:1d:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B2:50:8F:14:29:8F:C3:B1:DD:34:51:0B:2B:A4:79:5A:EB:87:B0
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:71:bb:59:a8:d8:9b:00:7a:0a:fd:44:5b:a6:69:77:21:58:
e5:78:10:ea:73:65:ee:da:f7:33:59:ab:de:96:1a:d1:b5:4d:
8f:de:f2:d0:38:bd:d3:16:9d:e5:07:3b:1b:d8:d6:09:5f:25:
ed:c9:3a:8f:c9:69:9b:c0:e2:da:50:1a:e2:a9:b6:61:ab:a4:
70:fc:28:8a:8e:ca:cf:cf:e0:27:5a:0c:77:e0:01:46:4c:53:
9a:1c:dd:08:8a:9c:ae:32:96:e0:31:dc:7a:c2:12:2a:ba:6b:
45:66:56:af:f4:fe:f7:78:59:c8:90:c3:6e:ec:d2:2e:1d:05:
0d:44:3a:9c:32:67:de:cc:0a:8a:ce:cb:51:1b:16:ce:b1:40:
4e:e4:3d:99:ae:7c:cf:0c:78:0d:14:80:e1:44:20:42:55:30:
a1:d6:40:46:2a:0d:d9:e2:1f:fb:0c:bf:01:d2:ee:15:be:dd:
9a:e5:82:90:18:a8:6f:eb:1b:4b:a2:99:1a:5a:a2:33:46:fb:
e9:15:e6:41:9e:c0:9b:eb:04:20:40:2a:a9:03:34:28:5b:de:
85:e2:5e:aa:2b:59:37:b5:49:39:cd:e0:31:ce:e2:44:fa:59:
95:f0:14:56:1d:f6:b4:f9:a8:6b:e5:50:49:ca:74:1d:c4:8c:
35:06:21:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:26:53 2025 by rpki-client