Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
File: qawfhZW61VgkDXQGgAChz3CLoaU.mft (raw, json)
Hash identifier: EOR6UJViSVJZmGSMcr6lOl0n86qNzABW6YC97lCI2Ss=
Subject key identifier: 72:F6:70:BA:A0:66:6A:BE:59:84:B7:2F:E1:AC:07:E6:29:53:00:62
Authority key identifier: A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
Certificate issuer: /CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Certificate serial: 019748FA1778C11D44104B479EAB6D165A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
Manifest number: 1577
Signing time: Sat 07 Jun 2025 06:00:38 +0000
Manifest this update: Sat 07 Jun 2025 06:00:38 +0000
Manifest next update: Sun 08 Jun 2025 06:00:38 +0000
Files and hashes: 1: BW_w5tNvIWO1-tVFP8df1MdaWTA.roa (hash: rExjPSaaFahRIKD/ZiQ7dk1JIKInqDzh+Jo+aqkHWCA=)
2: SHt83tHCOqEqNWz8C0rDKgPLSVk.roa (hash: 5uUYud3teEzP7h4GRY2ZjMn6NzU1+BqyXIl56/9+cO0=)
3: qawfhZW61VgkDXQGgAChz3CLoaU.crl (hash: AeCwSXaSik21LZjR8OjZy77CbUu3sYfIBggUl4kYWX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:17:78:c1:1d:44:10:4b:47:9e:ab:6d:16:5a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Validity
Not Before: Jun 7 06:00:38 2025 GMT
Not After : Jun 8 06:00:38 2025 GMT
Subject: CN=72f670baa0666abe5984b72fe1ac07e629530062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:ee:b4:21:e7:4a:d5:a9:f6:95:72:73:58:
44:fe:d6:e0:78:f9:de:e6:ab:0e:4e:85:6b:d1:ae:
43:f1:88:42:a3:a5:c3:c0:62:d6:e4:c7:d7:4d:06:
24:02:c8:c8:4b:ed:f3:66:70:a7:4d:6c:02:34:93:
7c:47:bf:f3:f1:41:1c:5f:73:84:4e:4a:86:e4:d9:
cd:e5:17:3f:ff:a3:b9:c3:75:87:ad:7c:0e:e8:61:
14:9b:71:15:e6:a1:2f:cb:9a:4e:06:a9:da:a2:33:
bf:b1:1f:25:e4:5f:59:c3:8c:00:c9:b4:81:09:a1:
36:b1:e8:73:01:c0:e7:1b:13:cb:44:98:25:5d:68:
59:34:9e:d8:a2:5f:67:8f:a3:ab:2e:fd:5b:eb:af:
38:0c:81:a9:87:c3:8f:8f:e3:bf:79:ac:1d:84:cd:
09:c2:40:5e:10:38:10:f4:57:62:0d:dc:c5:b1:bf:
b6:f9:51:84:14:34:98:b0:e3:10:ca:4b:6c:81:3b:
0d:c4:21:ad:ce:1e:67:59:6d:e6:04:a4:c8:eb:10:
d3:dd:4d:de:84:f0:e1:71:6f:db:20:dd:b7:b5:27:
90:ac:17:99:5c:a5:c5:ce:8d:d7:97:ad:d8:99:ef:
41:a5:d0:04:ba:5c:39:85:07:97:1a:ab:32:42:b6:
e9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F6:70:BA:A0:66:6A:BE:59:84:B7:2F:E1:AC:07:E6:29:53:00:62
X509v3 Authority Key Identifier:
keyid:A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:59:cd:c8:34:e9:cd:97:46:2a:c8:2d:f1:44:bc:ec:08:5a:
e1:76:6d:37:be:ad:45:54:55:29:cc:44:5d:21:04:b4:de:25:
95:2c:d3:0d:8e:a3:9b:74:ad:75:ff:28:c6:24:a8:ab:89:8c:
19:42:c6:84:69:d5:69:26:d4:51:1a:2c:18:90:75:68:9f:54:
2b:1f:19:ae:d5:08:04:b4:2b:3b:78:9d:42:70:d9:48:69:51:
d6:c9:4c:5e:61:48:db:c8:d1:a8:cc:0d:80:48:f7:6a:99:53:
21:42:25:b6:29:c3:04:d0:44:c7:09:bd:56:dd:d1:93:10:8d:
63:da:43:82:41:85:c9:4b:da:2f:6e:57:1c:b3:63:82:0c:00:
d4:81:f7:99:df:95:ef:f8:0c:41:71:87:1d:7f:6c:25:36:28:
38:d4:7f:31:a1:bb:27:81:a7:9b:bd:14:1e:51:b4:66:0b:b3:
6e:d1:68:66:76:f3:a7:e7:b7:38:44:ac:58:31:b4:97:ea:15:
7f:6a:ed:6c:60:60:fe:b1:ef:86:dd:b0:0c:95:00:1a:15:fa:
33:0f:76:16:ae:bf:99:47:a3:31:f6:40:d1:02:4b:e1:75:df:
b2:d3:67:71:df:60:f3:d1:e3:3b:bb:68:03:27:8c:99:a8:1f:
81:ff:1b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:15:00 2025 by rpki-client