Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: yOHPuSyT7jQ4Djim1iFaAYpavqm5g6SQGSeTAAXtsjM=
Subject key identifier: A7:75:71:7C:B7:27:3D:9C:9D:75:43:FB:8C:92:B9:6B:28:E1:6A:03
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 0197488CF321EE4524EDC492A49C0DEDCC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 04:01:26 +0000
Manifest this update: Sat 07 Jun 2025 04:01:26 +0000
Manifest next update: Sun 08 Jun 2025 04:01:26 +0000
Files and hashes: 1: N5E83UpLjMoi8mpIjadF8EBEZHc.roa (hash: cZc2s8T64g7zUGVGUfnt3YLhqIDpL+dicIuuj0vLjiE=)
2: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: kLEAQkMQahB7C+Z480mzQjPpcez/WY5iQwgvXxBBE68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:f3:21:ee:45:24:ed:c4:92:a4:9c:0d:ed:cc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: Jun 7 04:01:26 2025 GMT
Not After : Jun 8 04:01:26 2025 GMT
Subject: CN=a775717cb7273d9c9d7543fb8c92b96b28e16a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3d:4a:70:59:b9:50:15:fa:ae:82:c1:65:c5:
a3:48:22:c8:2a:b4:bd:be:f6:0f:97:dd:3b:a7:bf:
4d:f3:e1:de:0a:c3:7b:46:da:c2:14:36:81:42:a8:
9c:68:77:4e:b5:26:9c:0d:ee:8f:b2:00:7a:e3:8e:
43:e6:fd:bc:4a:8f:5b:88:10:84:22:b9:07:f7:a0:
9c:54:6b:3e:1b:9a:ae:24:be:14:f2:4e:99:da:65:
10:9f:84:27:b2:20:4d:f6:04:86:21:31:1b:6f:04:
9c:8a:8e:e3:d1:32:c4:a4:9a:b2:41:45:03:89:bc:
45:07:5b:c6:0d:be:d6:db:08:37:55:9d:9b:15:53:
c5:61:42:de:81:91:27:98:da:16:c7:af:70:bc:7f:
ba:1c:e5:e2:59:b1:d2:dc:5d:a9:eb:46:aa:90:60:
d0:6a:0c:77:0f:59:00:e7:d2:42:0e:58:8f:b1:92:
a7:65:91:63:da:f7:fb:6e:1b:f1:21:78:44:19:b1:
2b:89:9e:79:f4:27:0e:bb:5f:6b:eb:28:62:97:8a:
3d:35:23:7d:9f:86:a8:7d:5f:13:83:76:c6:43:9e:
6d:da:55:4d:23:f6:11:43:0a:be:a9:d3:e3:5f:1b:
52:f5:e3:0f:d5:00:92:b9:fd:4b:66:b5:b6:c4:92:
5b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:75:71:7C:B7:27:3D:9C:9D:75:43:FB:8C:92:B9:6B:28:E1:6A:03
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f2:05:66:55:c5:14:86:c3:a2:35:aa:98:97:89:69:f1:87:
3b:8c:1a:7a:3b:75:cc:13:6e:83:71:43:f4:75:23:a0:32:2e:
07:f8:02:8f:51:36:90:a3:88:ee:69:89:96:45:79:34:53:9c:
85:8a:1a:25:4b:40:f4:f6:c5:f7:d0:b4:19:ae:cf:a9:8b:e4:
cb:f1:8a:9b:61:ec:6a:d0:ff:e1:56:75:26:16:b1:6a:47:b6:
ce:e7:b1:8b:c9:7e:a4:1f:4d:60:7f:a3:d0:0e:5a:8f:73:70:
56:73:8c:f6:d4:b8:3d:bd:47:ff:c3:62:54:d3:4a:72:54:19:
ef:ff:66:27:51:10:3a:be:e8:fd:19:df:49:ec:df:fb:19:ea:
f2:89:9b:a2:2a:42:9d:5f:0f:3c:fd:83:29:de:7c:bf:a8:05:
c9:4c:ac:08:74:f5:a9:59:37:cb:4c:48:2d:99:e5:14:e5:f6:
ca:36:f1:e6:1e:52:83:ef:68:f6:dc:97:4f:01:5f:f4:72:4c:
c4:f3:94:96:37:4f:e8:a7:e4:d5:07:84:44:f6:b1:3f:ee:d9:
1b:d9:aa:5a:e8:0e:74:c3:20:e9:5b:2b:b7:c5:f6:d2:7a:81:
a7:16:59:03:ea:64:47:9a:72:cc:32:64:a2:94:3f:5e:77:54:
16:66:c7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:00 2025 by rpki-client