Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File: qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier: JDdliuvxmSSDd/27+gvT9U60wCYydJlUp2NMIHjiK0g=
Subject key identifier: 17:75:98:31:10:90:D2:1E:DB:30:48:33:C4:66:5B:DB:4E:D2:83:22
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial: 01974AE8ECE711797DF0E8E3381E72B6BB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number: 125C
Signing time: Sat 07 Jun 2025 15:01:08 +0000
Manifest this update: Sat 07 Jun 2025 15:01:08 +0000
Manifest next update: Sun 08 Jun 2025 15:01:08 +0000
Files and hashes: 1: 3uOrqvmP8Ja1Ais3wLBFc-Yv8js.roa (hash: exOhjbpn5m/SyHb+kmTmnk1GW2qg2u8lsLmmerL5o9w=)
2: IzP3cDAX9aykSDzKdoH0u3AyA2M.roa (hash: NC8YDjUxW5EM3pV7QmdgO/vAJ9HwNpXuNP3EpqENObk=)
3: f2dJVu8muGYFnZFPcMivMl98KP8.roa (hash: rWmOSQ2QhYKl4L1IyTfTDLKWAGfQI+Kz8vdUqnsATxs=)
4: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: cszHnsKYew5alP8Xy539X4B4V9zRFi1Ww4vDBEHqGbU=)
5: svOlfPLlFDJ0sGLcz6b_IG_H3W0.roa (hash: zsvLBGGbQT+oIT4diXH9qGrVZIYbNUKP7yL6prMLg/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:ec:e7:11:79:7d:f0:e8:e3:38:1e:72:b6:bb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Validity
Not Before: Jun 7 15:01:08 2025 GMT
Not After : Jun 8 15:01:08 2025 GMT
Subject: CN=177598311090d21edb304833c4665bdb4ed28322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:97:c1:fe:a1:09:7c:75:be:99:d9:66:6c:0d:
8d:2a:8a:a3:d6:82:06:62:4c:7e:10:82:20:43:14:
98:db:ad:a6:0f:9e:72:50:e1:82:61:12:c8:d3:45:
2a:82:3e:b9:a5:1d:16:b8:c6:c4:0d:3f:27:8e:10:
52:3e:a9:f6:d9:df:6e:44:22:9d:98:5d:0a:c0:ea:
80:b8:66:57:28:e9:6b:9f:31:c8:79:a3:60:11:97:
94:4d:b1:da:a3:6b:85:a4:2c:94:d6:8f:9f:b0:03:
43:1c:ff:d2:e4:57:c4:71:6f:8a:78:b5:5f:77:ec:
2f:d0:c5:1b:e4:f0:29:ae:9f:65:a6:ce:ed:f5:88:
65:99:e5:15:cd:3e:96:77:f9:69:3b:96:60:77:91:
7f:21:65:1a:bd:d5:ac:c5:91:99:91:3e:73:92:cb:
fd:f2:ca:27:13:75:a5:86:fa:0d:fc:4e:db:ba:f7:
22:3b:3f:07:ac:f3:ae:83:8f:34:ea:4a:4f:3a:58:
9a:b0:d0:8d:3d:6e:51:71:23:1a:cd:99:c6:6a:8d:
28:f2:e3:39:c4:5b:c4:87:6c:b4:e6:1d:cd:bd:23:
84:a7:4a:7f:7a:d0:fc:b4:59:d6:ed:ff:90:3a:c3:
7d:4e:23:cd:89:b8:54:1c:60:b3:7c:6c:66:35:83:
18:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:75:98:31:10:90:D2:1E:DB:30:48:33:C4:66:5B:DB:4E:D2:83:22
X509v3 Authority Key Identifier:
keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e5:fb:83:1c:20:b2:ea:ad:1f:ec:e4:86:3c:9a:94:08:87:
32:68:e9:12:a5:ff:0c:ff:53:7f:78:fd:c9:58:ab:03:d0:36:
67:cc:87:fe:5d:2f:ce:a6:8e:a6:61:d4:cc:7a:b4:aa:09:aa:
82:8c:a3:03:4d:a3:93:9d:a1:c4:21:6d:52:e4:68:04:31:90:
13:ac:27:60:ee:e5:94:20:09:03:66:5d:02:78:92:47:22:8e:
bd:85:f3:b3:79:54:9d:32:13:fe:06:1b:34:df:0c:86:df:ee:
45:eb:1b:06:fb:08:b1:fa:bc:45:09:b2:3f:5e:b5:42:5d:bb:
53:90:e0:81:17:8f:27:19:4a:b6:87:db:fd:ed:65:5d:17:19:
b0:d4:ce:6a:fa:99:d3:2b:06:61:a4:61:66:ef:bd:b1:ab:de:
74:ef:67:7b:60:64:73:f2:4a:54:9a:cc:7e:6d:2e:30:9a:fc:
aa:6d:d9:f4:1b:1c:bc:9a:20:da:ad:11:6a:33:9a:08:15:02:
74:12:2a:27:40:bb:92:b2:03:62:62:0b:43:4d:16:2c:40:f8:
2d:c8:ad:6c:24:d7:59:90:94:44:f7:35:75:c8:d4:94:aa:cb:
43:a4:a4:05:36:65:af:38:bd:72:62:e4:69:a4:0a:c0:5a:5c:
6e:b8:80:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:05:58 2025 by rpki-client