Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier: Obe8AQXXpJA25p1JGQScxf/KnCacLNcK2OE23icIxxk=
Subject key identifier: D0:BD:EB:9B:F2:E2:F6:3B:24:A0:9B:BC:CF:5C:D6:A7:4C:FF:6E:E1
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer: /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial: 019749D649DCC3F016841908463CF91E078E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number: 105A
Signing time: Sat 07 Jun 2025 10:01:09 +0000
Manifest this update: Sat 07 Jun 2025 10:01:09 +0000
Manifest next update: Sun 08 Jun 2025 10:01:09 +0000
Files and hashes: 1: dvh6dEQn3L0Lue4PHisFZ5z30t4.roa (hash: YZ3UChYkMOxFSMlqaHDcH6csBlA5vkgT+POe5BlyoUo=)
2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: MVOzSqmBaitYh4c6cxRAbIB/hJLVez7ivD/iv7hWtfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:49:dc:c3:f0:16:84:19:08:46:3c:f9:1e:07:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Validity
Not Before: Jun 7 10:01:09 2025 GMT
Not After : Jun 8 10:01:09 2025 GMT
Subject: CN=d0bdeb9bf2e2f63b24a09bbccf5cd6a74cff6ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ab:5c:22:b8:34:ee:82:fb:80:6e:02:06:33:
8d:6c:3a:2c:72:8f:db:fc:44:7f:c1:96:c4:d3:cb:
e4:50:9d:38:20:4f:68:b9:44:c4:2c:20:dc:ff:8e:
70:36:47:3e:6f:86:7e:49:8c:e8:4d:6a:ef:42:21:
72:77:6b:9f:cc:a2:6a:dc:6f:ce:d5:bd:8b:0f:cd:
5b:ec:da:65:ad:58:2a:d4:8d:41:0f:2b:26:37:73:
27:79:c5:42:f6:9e:16:dc:3d:b0:a9:37:79:c2:4c:
a8:68:f5:eb:40:67:24:c9:ba:b8:d0:41:a8:85:3e:
98:27:25:69:0b:2e:24:43:7d:80:de:e0:ca:86:07:
17:aa:c9:36:82:fb:62:4f:5b:1a:56:65:0f:a7:66:
d4:54:d4:04:04:0b:73:79:f3:b6:ea:2e:3b:6f:74:
24:26:fa:ea:a5:36:ee:28:56:83:17:9a:cc:14:5c:
b0:fc:4f:33:b2:af:0c:ac:3b:3a:cb:ac:ef:69:7c:
79:d0:7f:58:bd:b2:31:b1:bb:2c:ab:75:4a:5c:61:
a5:1e:9a:54:34:20:41:b7:63:e5:2a:2f:d7:a9:c1:
84:09:46:7d:89:20:a9:6c:95:fc:8b:77:49:69:4d:
66:5b:f1:28:e6:b8:d5:47:89:48:4c:ff:8f:6e:5a:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BD:EB:9B:F2:E2:F6:3B:24:A0:9B:BC:CF:5C:D6:A7:4C:FF:6E:E1
X509v3 Authority Key Identifier:
keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:45:1f:5a:8e:1c:e9:98:92:6e:25:c4:7b:94:de:e7:b7:77:
6e:c0:f5:4d:01:71:67:e1:04:a9:45:cd:09:d4:a2:d1:1a:f2:
0b:85:47:63:e9:e6:1f:59:bd:21:95:82:d1:c5:21:53:55:6e:
6f:c9:f5:45:f6:f5:81:b8:d9:ee:08:0c:42:7d:34:46:c1:b9:
13:c5:96:cc:e1:c4:08:0c:3b:dd:33:6b:46:10:83:56:53:0b:
55:da:d2:87:82:1d:a0:a3:da:3f:e4:51:17:c6:dc:66:55:6e:
6b:b2:ee:63:b2:3a:d6:63:72:4d:c9:cc:b6:09:71:79:56:e6:
44:83:8e:7f:f7:91:01:1c:12:5d:1d:c9:49:9e:5c:41:3d:88:
87:9b:93:dc:5a:49:5c:ae:42:55:c0:9f:b0:2a:d7:69:c4:c7:
df:5f:30:46:3f:7b:14:56:3c:a9:08:5c:71:76:88:61:b5:7e:
10:15:0b:ba:bb:ee:e0:7a:f9:43:80:c2:e1:19:9f:f3:d1:72:
57:c2:a4:d7:ea:e9:5f:4b:4d:5a:a0:fd:c4:69:a5:25:6a:0a:
35:e8:dc:3b:e1:0a:62:45:a7:44:c5:56:ce:02:ae:4d:46:a6:
e3:85:8a:49:1f:a7:86:ee:bd:2b:d7:19:74:b0:1e:fd:bb:da:
97:63:7d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:02 2025 by rpki-client