Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
File: q3dzqhxxoCJlFGujNszC5Y3q24g.mft (raw, json)
Hash identifier: KcgrgLwxN3QCJXozQFdLQnPItfndoMzU7SzHG3O+Cvo=
Subject key identifier: EE:C1:4E:4F:56:07:7A:3C:27:19:CA:BB:FB:F5:87:1E:BB:B2:56:7B
Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Certificate serial: 01974FA16E0FD53376510F86881C8E74BAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 13:01:08 +0000
Manifest this update: Sun 08 Jun 2025 13:01:08 +0000
Manifest next update: Mon 09 Jun 2025 13:01:08 +0000
Files and hashes: 1: cyFUaiualt3wMiC5gtz5aMOvlGc.roa (hash: RoAUS0DbrFV1sDA69agJ/hjEE06MIOfXgztHL0bgXao=)
2: q3dzqhxxoCJlFGujNszC5Y3q24g.crl (hash: 2sHEGt56Wn+a1Fb6qk9j9QYxiMnStXMWAxj0TQtn1mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:6e:0f:d5:33:76:51:0f:86:88:1c:8e:74:ba:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Validity
Not Before: Jun 8 13:01:08 2025 GMT
Not After : Jun 9 13:01:08 2025 GMT
Subject: CN=eec14e4f56077a3c2719cabbfbf5871ebbb2567b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3f:40:1f:2b:5f:a3:9f:9a:60:e2:71:db:a9:
6f:12:1a:39:ab:c1:18:4d:18:18:0f:45:82:8d:22:
e9:db:9a:fb:c3:9c:c6:e7:e6:3a:87:50:b3:b1:d2:
3c:62:1a:6f:80:44:ca:cc:b6:1e:bb:8e:e5:58:07:
d4:6f:be:c5:1c:69:bb:e2:4d:60:0b:71:ea:4e:ad:
5b:d4:09:c5:de:b9:7c:ac:c2:76:9a:83:87:ab:71:
a2:ea:cf:e8:6d:77:81:cb:39:67:d4:d0:18:a3:b8:
3d:f7:e2:6c:20:36:ae:01:04:d3:1a:c4:ae:c4:25:
e2:96:8a:60:2c:ae:96:4c:1a:89:6f:69:6b:4a:7e:
0b:86:82:58:ef:fa:6d:73:7d:0d:3c:0f:ef:46:5e:
6d:59:bd:71:1d:be:79:0e:24:10:c1:a5:db:89:15:
b9:ea:27:e1:6d:dd:63:b4:bc:ef:70:2e:1a:4c:4d:
a5:b8:51:f1:8d:f5:32:c5:b3:52:07:1f:6c:4e:85:
ef:88:ac:04:89:b8:f0:80:85:44:5c:3c:73:ea:a5:
52:b7:ab:1a:0c:02:f1:22:28:b3:9b:c9:a1:b1:b3:
5b:4f:fa:ab:25:b6:39:c2:21:ab:b4:08:f0:66:05:
35:b1:8d:12:e6:d1:e7:3a:84:e2:9a:bf:eb:bc:73:
0e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C1:4E:4F:56:07:7A:3C:27:19:CA:BB:FB:F5:87:1E:BB:B2:56:7B
X509v3 Authority Key Identifier:
keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:23:35:18:59:e5:63:96:37:e3:ba:ee:55:4b:f1:f3:a4:e9:
09:3f:6f:f3:a7:d8:a7:69:df:fb:36:f8:fa:06:d8:91:85:75:
95:c2:12:b4:49:e3:53:72:c3:27:43:1b:d3:25:b1:cc:17:76:
87:63:a2:f1:0c:de:8d:29:2d:3d:cf:ec:7e:60:9b:4b:81:a1:
4d:4d:e6:47:f4:82:41:76:72:8a:8a:ae:7a:25:5d:b1:92:5e:
d9:69:64:bd:ee:8e:5c:1c:34:67:79:2c:3b:05:44:e6:35:d3:
3e:9f:00:b0:8a:19:23:d7:50:11:54:80:dc:70:ce:ae:a8:0d:
92:40:ad:0c:a9:92:65:4a:cd:51:10:5d:4b:53:a9:f9:08:d0:
b1:d5:de:91:17:f2:60:c3:02:52:89:e5:24:6b:f0:1d:80:1b:
e1:bf:ae:20:1c:75:93:95:d6:85:a5:60:58:48:17:fb:80:c2:
8d:da:c0:ae:ed:4e:50:8c:3c:78:99:e6:d0:0c:1f:7f:2a:15:
b9:fa:24:e3:f1:8b:19:74:1a:aa:69:c0:4b:55:58:0d:d1:d5:
e9:1d:1c:cd:e3:39:9e:a4:39:74:b5:fb:56:3b:4d:60:78:96:
3a:d1:4f:86:1f:16:bd:f5:d6:15:e6:fe:ac:b7:4f:5a:5b:3f:
e1:4b:10:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:10:49 2025 by rpki-client