Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier: VZIdquRAZTGwvVbgCf5N09T+tR72qQkTxGX/vBZumDQ=
Subject key identifier: A2:DD:EC:89:9B:23:B3:16:7A:B0:19:14:5B:F6:D0:F2:86:4D:15:D7
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 01974AB14790C6F6BA34C9249CEF681C4CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 14:00:21 +0000
Manifest this update: Sat 07 Jun 2025 14:00:21 +0000
Manifest next update: Sun 08 Jun 2025 14:00:21 +0000
Files and hashes: 1: lxBXnG-4rYAQUCGbktacJsJcscU.roa (hash: d11nQxBRc+xMvxpKWxAVqfhsk9tCL6Ja3DwWQ6WsmPo=)
2: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: fKQJ+kV/jfKh/5ZnaaSC9BX+NXkvLmD8rRy/5A6uq1U=)
3: u2p9YZ_LXa4YZ8T6-whJAsnzXuE.roa (hash: HvG5oZRfAf2DkODgozvYS7e+xqSp2NYm+qp3YwzyYdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:47:90:c6:f6:ba:34:c9:24:9c:ef:68:1c:4c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Jun 7 14:00:21 2025 GMT
Not After : Jun 8 14:00:21 2025 GMT
Subject: CN=a2ddec899b23b3167ab019145bf6d0f2864d15d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:69:95:2e:1e:e2:21:2d:8f:c6:f0:17:af:
c2:a3:50:48:87:ec:e7:cd:4d:a6:83:be:76:9a:6d:
c8:cc:42:a1:4a:33:9a:ce:93:b0:b6:c8:f7:3f:27:
aa:ad:04:c1:dd:d1:06:b3:7c:61:e7:8e:5d:60:e0:
56:22:cc:49:70:2b:22:0b:1f:85:6f:93:f7:51:85:
79:38:37:66:c0:7c:6e:1d:c0:bb:af:55:be:e1:61:
fd:c3:e8:61:25:28:7e:15:fd:bd:f9:d9:85:6b:ae:
49:32:f1:5e:cc:0b:69:31:6a:d8:a9:b4:d1:da:af:
89:01:31:bd:8c:e9:47:dd:a5:79:2b:b4:eb:1f:93:
80:89:02:5d:54:dc:e1:74:7a:ad:d2:d6:58:4a:c8:
9c:0a:35:57:24:cd:aa:29:e8:a5:72:b5:b7:a1:f8:
20:fe:13:94:81:2a:70:87:7d:c1:2c:0c:90:3d:54:
73:f6:52:b5:79:a4:85:05:67:f0:a8:eb:d0:f3:36:
72:2c:7a:14:c9:e7:8f:00:26:65:c5:32:04:c4:4d:
29:cc:fd:9c:3d:d8:a9:eb:a0:26:71:7d:94:c8:2a:
4c:3c:d5:09:92:28:20:12:d1:68:59:3d:12:f6:75:
b2:50:55:70:50:bc:63:0f:9a:5c:c8:b9:a2:30:d7:
4d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DD:EC:89:9B:23:B3:16:7A:B0:19:14:5B:F6:D0:F2:86:4D:15:D7
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a2:72:35:c0:d1:b3:b0:d0:76:4a:93:15:f8:97:a3:b9:98:
76:37:17:ef:29:3d:28:f3:4f:36:c6:fb:06:28:ac:f1:f1:a3:
c9:ea:49:eb:9f:dd:81:d5:3c:0b:dd:23:fa:2c:62:81:d0:bc:
1f:06:4d:57:17:04:64:48:8b:e9:3c:d3:fe:11:fc:7f:b9:0e:
91:4a:26:f7:17:d7:02:8d:5d:1b:7c:ee:59:82:f4:e6:b4:ce:
3c:e8:bc:88:52:08:37:67:59:86:73:d0:a7:cb:f2:2c:f1:bf:
13:9d:08:ad:a8:12:32:ea:9d:31:3f:d9:21:82:41:ae:cc:3d:
ba:f2:20:0e:64:d2:82:2f:04:ac:6e:4b:38:18:45:bf:04:bb:
86:89:fe:ab:e7:e4:bc:05:06:64:3f:8e:fd:6e:87:e7:9d:d8:
ea:04:e1:d7:c2:a4:fd:cd:07:a1:c7:80:0b:ec:d2:fb:f1:cf:
f7:e7:b8:40:46:23:be:65:ed:5d:63:31:3a:10:f3:00:21:7c:
33:1c:d1:0c:f8:07:58:d1:9c:bd:06:85:eb:4f:7a:b3:c6:e0:
d2:93:37:b0:8e:a6:70:93:e5:1b:a1:71:15:5d:c4:b2:c6:03:
5e:7a:28:d7:52:9e:a8:e7:26:8b:41:ad:30:7b:3b:d0:0e:3e:
9c:ac:3a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:32:39 2025 by rpki-client