Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
File: Qb-tl6WMtQy_yE7IZa89ccixha8.mft (raw, json)
Hash identifier: 5LZc1lnsZGDVhNddaen9+plpGsWSHWpEX64WfBVvUYY=
Subject key identifier: F5:C1:29:69:57:90:79:5C:C0:A9:15:46:A5:E6:33:EB:99:40:74:8F
Authority key identifier: 41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
Certificate issuer: /CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Certificate serial: 01974DE9CF1FEA670D651248BEAF9A872EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
Manifest number: 1081
Signing time: Sun 08 Jun 2025 05:00:57 +0000
Manifest this update: Sun 08 Jun 2025 05:00:57 +0000
Manifest next update: Mon 09 Jun 2025 05:00:57 +0000
Files and hashes: 1: Qb-tl6WMtQy_yE7IZa89ccixha8.crl (hash: R58OPxMyaKaYmG0l/1b8JcIs5QUHA6lJ391Cf1ilhOo=)
2: TAMhyO_TxaxCZl8ndF5QQYJ7fSc.roa (hash: fwo98qFwUrEP75fKt0AHaKO4fww5cOw9kGra/QKoqNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:cf:1f:ea:67:0d:65:12:48:be:af:9a:87:2e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Validity
Not Before: Jun 8 05:00:57 2025 GMT
Not After : Jun 9 05:00:57 2025 GMT
Subject: CN=f5c129695790795cc0a91546a5e633eb9940748f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:17:2e:51:a1:a5:f9:2e:75:98:a6:f2:55:
d4:07:8c:c0:a2:5b:0b:d4:10:3a:4d:dc:fb:92:4f:
cf:ee:ae:8c:0e:fa:29:7c:ab:75:2b:33:98:6e:9f:
40:a1:e1:71:d6:a6:41:ac:ac:28:3e:85:46:c8:e5:
9a:cb:1b:65:92:5b:e7:d4:2a:2a:d0:1b:e9:e8:e0:
e6:09:86:0d:f9:51:8a:b3:17:2d:7d:05:38:26:77:
5b:6d:af:f7:6d:05:7b:e9:72:8e:a4:2e:21:a3:69:
11:cc:0a:52:21:88:36:02:49:e9:ac:f4:d0:ec:b6:
c8:4d:74:6f:1f:2e:ce:22:3d:4c:df:6c:34:7b:62:
be:2c:18:32:3b:fc:0a:73:7a:ee:22:19:ac:f0:f9:
44:9d:7e:8f:48:d7:f0:7b:b7:0f:f4:12:f1:c7:75:
c5:a5:50:97:8f:99:4c:eb:08:8a:99:5b:1e:34:6f:
c2:3f:2e:b5:34:05:50:63:49:7e:08:f2:20:51:46:
71:cc:98:2a:f3:f4:86:fc:e9:7d:c1:5f:13:6b:c1:
67:6b:ed:2e:61:dd:87:46:3d:df:c0:26:df:be:92:
f4:1a:21:96:72:1b:ab:29:53:83:b1:0b:30:8a:a3:
bc:33:17:ff:17:07:6c:a0:77:09:5a:df:9b:1a:6a:
2e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C1:29:69:57:90:79:5C:C0:A9:15:46:A5:E6:33:EB:99:40:74:8F
X509v3 Authority Key Identifier:
keyid:41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a4:f0:0c:57:32:60:af:fd:49:8a:eb:a7:f0:7e:d8:c9:15:
27:4a:62:1c:88:23:fa:29:16:32:09:13:30:8b:0b:2f:47:1b:
26:10:31:e2:7d:ae:04:da:d7:38:8a:c5:33:62:51:38:7b:df:
05:f2:fe:98:2f:ad:4f:77:22:9f:17:fb:77:e5:e7:0f:1d:07:
c3:d8:81:d3:97:02:de:3c:68:7f:96:48:4f:ea:20:81:62:9f:
0b:a5:b6:b7:7b:f2:70:92:fe:85:30:8e:b0:74:77:e7:f8:e9:
d9:d2:ea:12:6c:97:0f:db:f4:4b:e4:12:d3:5f:29:31:e5:15:
b3:cd:52:79:6f:5d:fa:34:ba:f8:85:b0:4c:69:9f:66:ad:a3:
33:5d:55:6b:a3:5e:13:66:30:9d:f2:39:f8:9e:8d:03:01:cd:
c6:cf:f4:8c:4d:9d:2a:e8:30:40:ec:07:d9:bf:f1:34:2e:c0:
0a:95:14:db:35:c6:13:71:b1:69:81:9d:b3:9d:56:72:fe:0c:
c3:35:3f:28:9e:d8:07:1d:00:ac:43:79:cc:00:08:64:e0:6e:
b6:eb:87:63:39:be:fa:22:30:be:d6:59:7a:2f:b5:96:c0:80:
d1:f8:6c:92:87:e0:e9:6e:f5:33:9e:ff:10:90:69:f4:2f:b7:
bb:2f:26:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:02:17 2025 by rpki-client