Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
File: qiK__S1aBw4uyKP8RueRGvlv6q0.mft (raw, json)
Hash identifier: rv4xF6WD5b4vekdXk29tgDDJe+l3ZB94pO3w+rS+478=
Subject key identifier: 5B:C5:AE:FE:FB:4E:DC:87:B2:7A:8F:96:D8:BC:3F:10:62:31:5C:8E
Authority key identifier: AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
Certificate issuer: /CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Certificate serial: 0197499F0D65BE1F96943D4FFFFAD0D00E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 09:00:49 +0000
Manifest this update: Sat 07 Jun 2025 09:00:49 +0000
Manifest next update: Sun 08 Jun 2025 09:00:49 +0000
Files and hashes: 1: eo9SLFo6ECy5DSd_dzNUwxtWG90.roa (hash: rwEptqLCRKuvmeB6qGhTimOttQv2kDracTxXGRGGlyc=)
2: qiK__S1aBw4uyKP8RueRGvlv6q0.crl (hash: gG8rpO992F5cjDez6fw/7/i+hf6AxCXzCMKWymjYBHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:0d:65:be:1f:96:94:3d:4f:ff:fa:d0:d0:0e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Validity
Not Before: Jun 7 09:00:49 2025 GMT
Not After : Jun 8 09:00:49 2025 GMT
Subject: CN=5bc5aefefb4edc87b27a8f96d8bc3f1062315c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d0:58:00:1d:81:f2:59:9a:a8:3f:dc:24:5e:
d4:2e:15:45:5e:26:de:8f:15:e5:3f:98:09:cf:54:
e8:a0:41:60:95:10:49:e4:95:5b:15:1a:ec:7e:fe:
1e:6a:c3:cd:1f:57:aa:53:93:1e:2d:82:82:c4:8e:
5e:94:97:fd:d3:60:4b:d8:c9:c7:54:c0:03:1e:39:
41:ec:f0:f5:a5:cd:da:4a:33:69:56:7b:63:54:3c:
ae:50:b3:7d:c5:cd:b0:ac:0a:00:b2:88:3f:b5:8f:
e5:62:f0:7f:d8:32:8c:76:d4:29:06:2c:00:e0:13:
52:a8:ab:c7:21:df:f2:3e:a4:19:9b:f3:89:52:b4:
30:9a:b0:75:95:d8:f3:ca:a9:83:61:6e:19:d5:10:
61:9f:ec:27:1c:f3:df:d1:0b:c8:34:51:23:86:f2:
99:d7:92:66:04:72:a5:db:67:9f:d4:61:2e:93:38:
0c:3a:cc:39:77:ae:5b:a9:eb:27:0b:3d:22:9e:ba:
5e:5b:ed:a6:e9:68:9a:55:00:9d:95:de:7b:cb:8f:
3c:0e:11:4e:ec:e6:57:12:8b:87:0f:d2:b0:fc:67:
54:6f:73:62:de:f6:18:7c:ea:f8:d9:ad:82:f8:3a:
fa:ed:c5:65:5e:57:20:b4:cc:b9:a4:87:86:5f:b1:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C5:AE:FE:FB:4E:DC:87:B2:7A:8F:96:D8:BC:3F:10:62:31:5C:8E
X509v3 Authority Key Identifier:
keyid:AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:62:f0:24:bf:13:93:70:cc:b5:a9:98:d6:cd:c2:39:53:ca:
32:3b:6e:6d:55:43:94:3f:01:57:9e:b9:c2:d9:0b:71:11:2f:
0b:75:f7:f1:d5:d3:06:b5:7b:41:94:17:0a:d8:d6:ed:1b:04:
4d:ec:27:d8:27:7d:36:7a:1a:0d:3f:5f:8a:41:ae:1c:15:c6:
b6:f9:6a:e1:7a:97:3a:64:44:b7:47:09:4a:92:8e:a8:7d:48:
86:90:0c:7b:e8:7a:9b:a2:c6:36:81:75:c4:42:fb:e9:37:4a:
b9:ff:1a:ae:08:3c:8b:18:a0:76:c9:e3:dd:b3:23:06:d6:3b:
56:a0:b0:57:4d:7d:de:80:30:c6:68:d7:d6:c6:4c:f6:08:e9:
e5:d5:d0:0d:41:b5:70:11:4f:e8:8c:bf:4d:3c:ea:8d:14:a6:
20:f4:e1:69:f2:1b:ba:12:e7:58:df:e5:91:7b:5a:9c:3d:fa:
ae:1d:69:d5:24:b8:4d:34:cd:76:f7:a6:32:87:ee:db:e0:19:
77:12:da:61:72:c5:b5:de:05:e9:75:1f:6a:27:86:d3:e9:21:
a1:0e:01:f3:09:8e:84:80:7f:f7:aa:a8:0d:42:ee:3b:3e:6d:
06:ea:24:6c:05:94:f1:a1:b5:72:5f:2b:d2:07:99:04:99:2a:
9f:dc:45:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:51:56 2025 by rpki-client