Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
File: qIXNvd_X0TFoRb609zmPPOZPrNA.mft (raw, json)
Hash identifier: JVYQNqXFMl75dCi2SFkd+2w3rp2nMGJsn2VurEBBu0c=
Subject key identifier: D1:E9:CC:64:FC:DC:29:BF:AC:C1:48:01:A6:3F:6C:CF:41:B8:4D:96
Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
Certificate issuer: /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Certificate serial: 01974FA11F05B5D7AEDE17D329692C520B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
Manifest number: 12C2
Signing time: Sun 08 Jun 2025 13:00:48 +0000
Manifest this update: Sun 08 Jun 2025 13:00:48 +0000
Manifest next update: Mon 09 Jun 2025 13:00:48 +0000
Files and hashes: 1: qIXNvd_X0TFoRb609zmPPOZPrNA.crl (hash: QWU98n8B2pqTyunzuSsZCUDpaSx3yG/sDP3ihdSbm1Q=)
2: xtTCfWlyctb3-ZIARtvZc7gD2_c.roa (hash: DoO5FfFnFM++vEGajImQDDKEPB+yqs7BrAr2CdTgfGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:1f:05:b5:d7:ae:de:17:d3:29:69:2c:52:0b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Validity
Not Before: Jun 8 13:00:48 2025 GMT
Not After : Jun 9 13:00:48 2025 GMT
Subject: CN=d1e9cc64fcdc29bfacc14801a63f6ccf41b84d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:62:9b:5f:b4:3c:18:d7:ee:ec:e3:0f:0e:
24:3e:5c:6c:e1:18:61:6d:4a:79:42:5b:c6:c4:b7:
a9:12:64:9a:fd:a4:1b:48:8b:01:17:d3:19:43:f7:
50:a8:1f:7c:36:29:81:a2:85:b1:d1:d5:07:e0:5d:
15:c1:0a:61:80:a1:a0:48:12:03:21:c5:8f:73:a3:
6d:69:c1:d3:28:08:f9:3c:db:65:12:18:48:38:77:
a2:2f:2f:e1:f4:bb:7d:fb:17:ac:a9:8c:ac:38:40:
c2:cd:74:2d:bf:d9:69:0d:2d:64:5a:ba:7a:1e:ae:
0f:8c:f3:be:6e:68:6d:d1:c5:fe:15:f4:d6:60:11:
3b:94:8d:1b:6e:a6:4b:92:62:bc:0f:ea:9e:81:a2:
69:f2:e6:89:97:3f:9d:b6:a8:39:fe:f1:d4:3b:ce:
49:3b:dd:91:f4:b9:8d:f2:42:73:7a:4c:33:ad:9f:
3b:21:ff:1d:6b:63:05:af:b9:c2:c6:81:84:0a:1d:
54:b1:c2:36:a1:96:70:5e:b0:5f:37:6e:05:48:3b:
80:15:d2:ce:d4:a9:ab:64:9b:f0:95:51:f1:21:ef:
86:f7:ee:d5:74:f0:48:ff:2f:b2:32:d9:29:2a:cf:
e9:30:a3:94:c8:ce:a3:12:fa:c9:de:e4:11:ee:46:
59:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E9:CC:64:FC:DC:29:BF:AC:C1:48:01:A6:3F:6C:CF:41:B8:4D:96
X509v3 Authority Key Identifier:
keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0d:ff:f3:fe:a2:53:dd:b3:f8:a8:db:43:c6:cf:c5:5f:a8:
0e:a0:00:d5:ef:81:51:4d:6b:39:65:81:84:22:18:f1:23:ab:
7d:bd:df:b5:3f:ab:cd:e5:14:9c:00:3c:08:6d:66:d4:b2:a1:
02:92:58:18:f1:cc:83:72:ff:91:c5:ba:6e:20:9d:a2:56:c6:
74:6c:94:be:8a:9c:ba:af:52:a1:1f:67:2c:e1:2f:2c:70:f6:
51:b0:03:27:85:70:43:86:ee:10:82:0b:6e:1d:c0:86:2b:42:
68:ba:c0:e5:6f:36:4c:71:af:df:a7:85:c9:8d:71:3c:b8:39:
89:e7:d3:6e:c1:48:9d:de:01:03:f9:a0:df:cf:d5:47:35:6b:
ca:e1:bf:5e:e6:39:b6:31:8d:31:74:2b:44:78:85:54:75:a4:
93:59:a3:0d:14:41:a1:76:38:07:dd:01:22:0c:28:e1:a4:b3:
86:fb:48:1e:2d:35:1b:01:8d:91:4f:dc:66:5e:ea:11:58:c1:
ad:a3:e5:eb:ee:3e:bf:c3:77:4b:ae:a7:88:95:4e:98:11:b2:
09:79:14:f0:7b:a3:f9:fa:be:73:c4:65:69:4c:cf:3e:5b:a6:
a5:c5:fa:ee:be:b7:dd:4c:36:41:bc:14:bc:76:31:af:ec:6e:
0c:77:ad:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:48:21 2025 by rpki-client