Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
File: 00QDowsxN1mvliav2NPSOAX8yA4.mft (raw, json)
Hash identifier: l1Wl1fXFqsHZOSfYO3ldY3fwAiFX56CukTlCoGcdwDk=
Subject key identifier: A4:29:2B:C7:F3:08:0E:A6:76:D7:67:AC:8D:DC:D1:41:2C:86:E2:87
Authority key identifier: D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
Certificate issuer: /CN=d34403a30b313759af9626afd8d3d23805fcc80e
Certificate serial: 019750462C81E601219FAAD1810FB27EE50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
Manifest number: 13E0
Signing time: Sun 08 Jun 2025 16:01:05 +0000
Manifest this update: Sun 08 Jun 2025 16:01:05 +0000
Manifest next update: Mon 09 Jun 2025 16:01:05 +0000
Files and hashes: 1: 00QDowsxN1mvliav2NPSOAX8yA4.crl (hash: vIm1nsgomOjIgfOCjGjuoortr5UHy07tyFj8wMYXiEc=)
2: cVpmuHdAZzlijHGAjGSKkGw9RjA.roa (hash: qNHNU4vOIkFIe1aGqstJlXjPN0jdP5RduNW12cDiCyg=)
3: yay3nN2FWSrpjXKo77YZUaENbjA.roa (hash: 3dd/DLtrx7aUgl5CmfhFn/D7OtLGGdM5Nn2M37wMGvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:2c:81:e6:01:21:9f:aa:d1:81:0f:b2:7e:e5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34403a30b313759af9626afd8d3d23805fcc80e
Validity
Not Before: Jun 8 16:01:05 2025 GMT
Not After : Jun 9 16:01:05 2025 GMT
Subject: CN=a4292bc7f3080ea676d767ac8ddcd1412c86e287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:6c:e7:13:47:af:c5:e3:36:b3:34:5d:3b:
2b:b6:d1:f5:d8:50:63:0d:3b:44:92:99:c4:95:de:
ce:0c:e0:0c:2b:e3:10:33:29:57:0a:98:3b:10:3c:
5a:18:2e:32:b4:2b:64:f8:a9:fb:f2:36:4e:df:ff:
ba:51:b6:fe:a5:0d:f8:e7:3b:7b:c8:9a:9c:83:46:
67:de:23:ed:2d:bd:02:b2:6c:7c:b0:91:9e:8f:4c:
07:46:5a:9e:ad:81:34:b5:76:e4:61:11:14:e7:88:
ff:7c:00:48:f7:7e:0d:16:7e:6f:3b:54:3f:71:5a:
7b:a0:75:09:16:42:ce:82:3a:ba:5d:84:da:95:79:
fd:c8:47:80:03:09:28:a2:51:75:0f:27:26:a3:af:
ec:65:b3:a1:ae:19:c9:2b:21:75:bf:bc:d5:b8:32:
1d:cd:f2:0d:03:8e:5e:12:91:88:fc:2c:f4:06:6e:
29:01:1d:f2:9a:5d:20:c6:63:77:a1:73:21:21:d0:
19:09:f4:a9:3f:68:27:30:6d:a5:f7:0d:39:21:d5:
04:17:ae:0b:99:b5:82:bc:40:77:62:60:a8:ff:f8:
d4:f9:61:f9:9f:00:15:46:59:d6:dc:ba:8a:21:bd:
5f:1a:6b:21:8b:76:09:35:8f:d8:2a:a2:7f:c3:be:
fb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:29:2B:C7:F3:08:0E:A6:76:D7:67:AC:8D:DC:D1:41:2C:86:E2:87
X509v3 Authority Key Identifier:
keyid:D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5f:c1:47:07:7a:ea:e0:8a:7f:02:58:6a:91:f1:65:94:ad:
d7:ad:47:a1:98:b7:fc:df:18:f5:79:88:97:aa:13:a2:87:83:
87:45:43:4f:cf:f9:0f:73:02:3e:7f:7b:44:c4:c7:56:7c:8d:
5f:da:a5:fc:d0:8e:83:6e:96:27:c9:d5:9c:ad:fd:68:34:f1:
53:83:05:61:78:fc:a5:92:b7:a8:c6:3c:3b:26:97:29:24:19:
5d:34:24:ea:24:6a:2e:2a:7a:51:ea:51:4c:06:a5:b3:48:5b:
b3:90:da:5d:d4:af:96:30:8c:1b:69:4f:9a:cd:cc:f6:0b:f6:
58:9c:87:34:a0:1e:6d:87:2d:fb:68:69:c3:7c:b1:a8:d3:39:
90:7b:c1:a0:32:bd:86:74:36:30:ae:6d:64:a8:16:97:3c:16:
31:8f:44:92:16:64:ee:6a:24:a1:bd:3c:a9:38:4b:ab:f9:fa:
af:d9:9c:0b:2a:18:b2:5b:29:28:fb:59:37:0d:33:14:4d:1c:
68:f9:7c:63:4b:98:2c:ee:8a:69:eb:3a:4f:25:e5:c5:b3:c8:
06:d1:a8:4f:79:5e:6d:68:1c:1d:c5:72:3c:9f:6f:cd:ee:f2:
d5:61:9e:1e:cd:b1:d9:df:17:f8:58:68:6e:b8:bb:80:26:08:
43:c2:e5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:19:28 2025 by rpki-client