Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File: qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier: tLrerGHhrUKur+DK6DNF5hgEpNhioBUoLVdGF1QHA4Q=
Subject key identifier: D0:1D:B8:F4:32:CE:53:AB:30:46:5E:90:97:06:68:D6:A0:58:B3:A4
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial: 0197632779B245DBE1756079EE034F51D755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number: 1588
Signing time: Thu 12 Jun 2025 08:00:20 +0000
Manifest this update: Thu 12 Jun 2025 08:00:20 +0000
Manifest next update: Fri 13 Jun 2025 08:00:20 +0000
Files and hashes: 1: 1-498Z7vh8fq99O9xScVcy6k-waA.roa (hash: 5X65ydohKF6qHxzYtE3Ac9naZbToLy0QuSQ9mwUuJtg=)
2: YCaC2D8L5OtL6F6domigXArqF2c.roa (hash: 3VcxChRnU4HThrx+KUbxRb/2EVyI8+silVMvgGd2Xn0=)
3: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: efLDWwaxoG5cp/6UBdksOQJ+AgsAPycGUwjw+YWOF4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:27:79:b2:45:db:e1:75:60:79:ee:03:4f:51:d7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
Validity
Not Before: Jun 12 08:00:20 2025 GMT
Not After : Jun 13 08:00:20 2025 GMT
Subject: CN=d01db8f432ce53ab30465e90970668d6a058b3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c3:a7:ea:3f:d1:dd:d1:2b:22:dd:ad:9c:a7:
b0:47:12:7b:b7:d7:24:b7:22:95:00:33:e3:45:25:
20:1d:65:7a:02:2a:e4:5c:46:b4:09:c3:14:a1:02:
5c:83:94:3b:a1:09:c9:45:73:a2:b9:9b:fa:dc:4c:
84:43:c7:b9:bc:63:6e:a8:07:ed:b4:ed:09:e9:89:
a0:86:41:a4:66:0a:6d:21:f9:d2:f7:e1:39:74:5e:
2d:60:c1:68:2d:68:58:1b:3d:87:cb:d6:aa:6b:40:
d2:78:b2:51:df:3d:db:3c:40:98:78:cc:0d:6e:cf:
cd:e1:29:34:04:e8:9f:5a:0b:3a:dd:71:d4:a7:8a:
39:10:9b:21:92:dd:ec:e0:5f:9c:fd:ce:6a:ad:e6:
85:42:ec:1d:70:9b:6d:64:cd:d0:6b:a6:d4:09:94:
5c:6b:89:e1:67:23:dd:50:c8:0c:d4:2c:f4:f4:0a:
35:1c:7f:51:4a:64:07:04:16:bb:ff:9f:44:d6:c8:
5c:d1:02:53:5b:5d:be:a5:33:b7:d6:ca:58:32:03:
78:0c:83:cc:99:39:e8:09:e4:58:90:ae:0c:d0:64:
cd:b3:c8:3f:11:66:c7:16:8e:4b:87:2c:62:cf:e7:
93:03:80:be:30:2b:0e:5c:a2:03:7e:dc:4c:11:e5:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1D:B8:F4:32:CE:53:AB:30:46:5E:90:97:06:68:D6:A0:58:B3:A4
X509v3 Authority Key Identifier:
keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:20:32:4c:c3:e6:0b:b3:60:e9:a2:74:c4:ea:02:8c:28:d2:
d0:d7:ad:04:cf:e3:0a:ec:0f:1d:a5:b4:fa:7b:8f:b9:1f:59:
95:19:62:c1:cb:a7:0d:5a:88:28:2a:2a:ac:77:ce:84:fd:2b:
27:4d:cb:b7:7a:bc:51:46:e9:f3:66:a0:be:f6:3c:c5:9f:b3:
7a:32:e0:61:08:32:2e:fd:93:1a:63:68:ce:b0:a9:ea:f7:b2:
88:aa:eb:69:63:14:8e:25:2f:ba:f1:85:33:7b:e6:56:56:e5:
95:5e:1a:73:90:88:81:54:d7:73:6c:58:af:94:9d:df:0a:d1:
a1:7b:df:be:6c:9f:3f:24:38:33:4c:03:56:75:18:f8:2b:e9:
cc:15:a5:43:f6:b8:80:8b:fe:9b:10:9a:c3:46:c1:a4:bc:dd:
e0:20:6b:4c:a8:df:3c:5f:af:a6:a4:ea:dc:5f:72:d5:5a:1f:
42:eb:3a:f9:17:f5:98:29:cf:15:fa:71:8f:81:c4:c2:9b:42:
a3:24:f0:85:ce:09:57:26:42:be:69:59:a0:92:b5:f5:75:af:
c7:90:f8:84:d1:36:50:5e:c4:0a:84:55:9b:f4:a8:b5:6e:4d:
3b:70:3f:c8:49:2b:3f:ce:ce:99:17:01:77:c7:6f:a7:50:6b:
30:fa:a7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:58:25 2025 by rpki-client