Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
File: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft (raw, json)
Hash identifier: eKP0/E6u4fhVPmg17Br4ZWa9yb6uVcCDVDsPI70SJwo=
Subject key identifier: 65:C4:5B:A2:81:5D:11:AD:A8:E2:6F:3C:10:39:09:3E:46:7F:94:45
Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Certificate issuer: /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Certificate serial: 0197488CAA8F307868A4DD4492F4B9C6CF6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 04:01:07 +0000
Manifest this update: Sat 07 Jun 2025 04:01:07 +0000
Manifest next update: Sun 08 Jun 2025 04:01:07 +0000
Files and hashes: 1: USQ6h1BmGX_5l6r9JsziO1Ui1Vw.roa (hash: W3xrS1zgc7QMM+ux8ilDAtn6lUWxhEYKoHwrzSB4Kb8=)
2: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl (hash: /WaDgv2Dzl43w9w1iEATbnt8KjTJEnMxyy3EDmysuuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:aa:8f:30:78:68:a4:dd:44:92:f4:b9:c6:cf:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Validity
Not Before: Jun 7 04:01:07 2025 GMT
Not After : Jun 8 04:01:07 2025 GMT
Subject: CN=65c45ba2815d11ada8e26f3c1039093e467f9445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:2e:21:68:b8:b8:1f:72:f0:c7:d2:de:4b:
56:61:0a:2e:fa:4c:11:42:17:50:eb:28:9e:0c:67:
9c:06:41:b3:b2:84:b1:32:82:5d:f9:8d:99:d5:e4:
cf:de:8b:79:cf:fc:46:b0:1a:b5:84:29:76:c3:d0:
e4:ba:2c:fd:52:32:90:c1:10:66:3f:7a:ee:fa:ff:
42:de:0a:17:3f:a7:33:39:8e:40:18:2a:65:b1:ec:
ff:4f:03:b1:62:fa:22:a1:57:1c:f5:b9:57:0d:aa:
f7:c8:76:8a:8e:aa:0b:79:f6:0c:a4:30:7d:7f:1e:
14:2d:b4:0e:f0:c2:ff:93:3b:74:8a:53:0e:7f:37:
ff:4d:af:57:d9:bc:d7:be:8b:45:3e:21:e5:e7:a3:
bb:c8:b3:c0:91:52:1b:7d:ba:95:4e:0e:4a:d8:59:
f7:09:ea:e0:e3:30:7b:b1:5a:8e:94:47:17:2b:35:
87:da:aa:a1:f9:10:2e:2c:4d:36:51:a6:07:31:13:
d5:80:df:a9:ae:35:28:a5:59:db:55:25:21:27:f5:
8b:d0:b8:43:34:38:30:66:87:84:df:6a:ce:47:55:
39:55:56:bf:d9:84:7b:c9:39:2c:4b:86:1b:82:f3:
0f:70:ce:70:38:ec:7e:ae:52:a6:e1:53:08:01:e5:
03:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C4:5B:A2:81:5D:11:AD:A8:E2:6F:3C:10:39:09:3E:46:7F:94:45
X509v3 Authority Key Identifier:
keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fb:7b:d6:5a:68:e2:7e:f8:6a:05:fb:c2:90:c0:b4:27:4b:
6d:9b:90:5f:31:fd:99:f3:ac:f8:45:e0:8e:04:e8:03:43:e3:
ef:97:7f:a2:0c:77:54:e6:f3:47:de:1f:b4:f1:1c:af:11:49:
40:ec:1b:77:5e:42:73:f1:c6:dd:a5:90:b9:d8:64:5d:c8:04:
f7:38:40:98:9c:ce:54:b8:d8:71:87:bb:56:fc:4b:60:0c:a2:
e1:d2:e7:d6:82:88:13:eb:f6:f4:9c:d0:7a:0e:94:5b:09:d3:
6c:81:fa:86:55:1f:73:a4:49:2f:3d:06:2c:63:bc:ee:50:3b:
2d:c8:ab:d7:83:62:1d:6b:d6:35:7f:f8:7a:4c:73:b3:19:7a:
59:35:bd:5b:3f:33:f9:01:2a:cd:f8:c4:d0:e7:cc:d7:a1:f3:
ed:d4:74:16:44:f7:7a:92:53:de:1e:08:24:4a:ca:5c:18:49:
94:b8:19:b1:8c:c7:91:62:ed:21:f6:24:19:32:79:f2:71:0b:
05:10:f7:b6:ef:6d:f2:c0:a9:6c:de:14:2a:28:17:40:df:0c:
0d:c7:d7:f7:5e:a2:54:6d:a1:63:8f:b3:03:6e:4b:8b:bf:3f:
db:31:77:a9:1c:76:a3:e6:a8:91:c7:59:0d:dd:3b:3a:ce:91:
11:8d:47:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:12:52 2025 by rpki-client