Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
File: qnp9oeIjsYMKC5G11hyDrSYMERs.mft (raw, json)
Hash identifier: B2b27WowPnsfZLXpqIrg12WVbg25fDKjSgE0AXVJafs=
Subject key identifier: 33:E3:BD:E0:FB:C0:1D:4A:7E:FB:A0:F8:4D:42:44:67:B6:C8:0C:FC
Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
Certificate issuer: /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Certificate serial: 01974CA0143850153F9E9BA06BC90B427ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
Manifest number: 1147
Signing time: Sat 07 Jun 2025 23:00:48 +0000
Manifest this update: Sat 07 Jun 2025 23:00:48 +0000
Manifest next update: Sun 08 Jun 2025 23:00:48 +0000
Files and hashes: 1: B2uv5t_GiMUr8rM-r5uKbUdnEoQ.roa (hash: YpVmIqGmMDZopEuL6KgYwvjCxwixGKfs5u+qFRIV/jw=)
2: qnp9oeIjsYMKC5G11hyDrSYMERs.crl (hash: AbkWrq6Yy2YdwYBYltA+KuX2qmffiYVJ6/Vgt2/d9mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:14:38:50:15:3f:9e:9b:a0:6b:c9:0b:42:7a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Validity
Not Before: Jun 7 23:00:48 2025 GMT
Not After : Jun 8 23:00:48 2025 GMT
Subject: CN=33e3bde0fbc01d4a7efba0f84d424467b6c80cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e8:a8:6d:7a:63:03:f7:ad:c6:b6:74:d1:4c:
09:19:25:9d:8e:f3:7b:cc:5d:74:24:f4:5e:8b:6d:
10:2b:4b:7e:fc:b8:fc:1e:42:b6:90:fe:a7:81:98:
00:e0:3f:02:d2:65:63:c6:6c:cb:7b:26:35:d0:8f:
2e:5e:8c:ad:40:95:4e:de:4a:52:44:de:8c:82:c3:
4b:e0:9f:d8:28:68:15:ae:23:88:7b:3f:87:2f:df:
7b:43:75:f0:ba:33:73:3a:c1:16:18:38:e9:78:52:
ee:59:ac:ab:e1:bc:f6:bd:a9:09:e6:38:f0:2a:95:
70:ec:6c:31:08:d0:69:70:15:1c:66:b1:87:49:55:
98:8a:a6:07:b0:53:8a:b5:0b:42:78:1f:a3:93:67:
44:48:1c:88:df:64:ea:f8:62:e3:3d:34:ef:c3:bc:
00:4c:26:54:2e:2f:ec:ef:38:21:07:47:55:4c:c0:
cf:01:0a:05:b4:64:6f:22:30:2e:b5:6e:d5:3c:63:
57:f8:5c:a0:d6:5c:fb:3e:50:3d:88:fd:3e:6b:8a:
2b:17:8f:27:ae:cd:53:ec:44:38:de:0f:9f:f2:94:
81:c3:98:15:81:e6:36:cc:de:fd:16:91:04:6e:7e:
b2:21:c3:78:3a:f4:42:f6:83:58:69:bf:f8:bd:f7:
a7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E3:BD:E0:FB:C0:1D:4A:7E:FB:A0:F8:4D:42:44:67:B6:C8:0C:FC
X509v3 Authority Key Identifier:
keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:61:97:ed:a8:b1:3a:42:c3:0b:da:47:d0:81:ba:bf:94:3e:
aa:51:91:71:62:82:01:77:38:c7:26:b1:f6:97:3f:2f:8a:79:
af:9e:94:fb:d1:a4:f3:43:c5:04:01:f4:60:8e:06:84:4f:3d:
66:1c:5e:d6:a6:de:13:b0:63:75:c0:0d:4f:96:bd:60:e7:1b:
3d:f8:5d:0e:3a:a5:16:74:02:ed:7c:ec:1a:e8:dc:cc:e0:9b:
0c:30:5c:3e:76:5f:e5:19:f9:d3:d2:da:53:ee:2d:01:ab:ff:
69:50:45:ea:c9:07:26:c7:ca:39:4a:e2:93:cd:de:32:4c:1b:
2b:8b:2c:cc:3f:d0:3e:f9:b5:7f:b6:98:d7:e3:93:9d:42:d0:
ee:1a:f7:ac:44:1d:97:e2:45:89:e5:b7:eb:1e:83:71:81:be:
8c:13:67:15:05:bf:4c:4a:3b:b9:a6:ad:9e:5c:67:4d:a9:7a:
23:80:24:fe:ba:d9:0e:80:5d:a0:7a:80:82:e2:86:b9:6f:a8:
9a:07:68:b4:e4:1c:98:16:91:46:79:06:51:48:d5:a1:3d:02:
63:0f:29:d9:6a:92:04:3d:a3:9e:59:81:f0:ba:ef:f3:f4:67:
02:af:5e:4c:8f:ec:ee:6b:9d:e5:43:93:0e:4c:16:0a:32:92:
0f:29:73:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:20:11 2025 by rpki-client