Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json)
Hash identifier: WoswLJa7nYKxyTuzA5uvOiinm+kUwrVejRkA0x2S8YY=
Subject key identifier: FA:60:8A:D6:74:EA:55:E9:C7:0A:9B:31:BD:00:6F:5C:9A:96:49:6B
Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Certificate serial: 01974A438B89B82CBD43A48A0EF3DD4DF1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 12:00:30 +0000
Manifest this update: Sat 07 Jun 2025 12:00:30 +0000
Manifest next update: Sun 08 Jun 2025 12:00:30 +0000
Files and hashes: 1: dCfTqcxg62Lir67qVkgBChTuqA4.roa (hash: UBu+ymeFM9aQ8J18E3tvVpuPsYqEYn9P+xx2d6+/UxI=)
2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: ix7b1WKwW/d0PgRioC5CZBNYSGnnzR5AWUF0VGx66Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:8b:89:b8:2c:bd:43:a4:8a:0e:f3:dd:4d:f1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Validity
Not Before: Jun 7 12:00:30 2025 GMT
Not After : Jun 8 12:00:30 2025 GMT
Subject: CN=fa608ad674ea55e9c70a9b31bd006f5c9a96496b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:c6:03:eb:61:2f:0a:1f:71:20:39:57:89:
d6:44:a6:b1:c3:1f:5f:13:a8:60:1c:01:8d:f8:90:
08:89:af:1e:03:1e:43:b1:68:8d:10:c6:69:30:9f:
e0:48:80:96:5c:c9:e6:84:cc:08:bd:ae:ee:4c:fc:
f3:11:db:6c:20:32:99:cf:b9:55:3c:c9:66:36:b8:
42:47:24:2d:a5:dc:c4:17:e4:b9:3a:6b:a1:d1:89:
92:82:70:92:cb:74:9c:83:1f:d1:28:92:1e:54:ed:
2e:6d:aa:43:08:84:5f:bb:66:00:11:f9:6d:fe:58:
e9:13:17:4b:1f:c2:7a:7c:8d:77:ef:62:fa:1e:e3:
55:b1:b9:73:52:85:91:98:f9:02:63:d3:3f:82:04:
26:bc:91:2a:4f:10:7e:6b:e0:37:1e:b6:ed:13:af:
ee:99:b5:9c:41:f0:6a:2b:c2:e8:8e:d9:76:c8:1c:
73:cf:b6:e0:be:7c:67:6b:4a:17:c8:da:1f:5f:5c:
4d:c7:96:27:1e:72:2a:c8:de:5e:ec:f6:ef:0e:94:
72:e2:7f:7d:0f:f6:fd:a0:04:17:97:c9:81:37:5f:
f6:58:43:f4:58:59:29:10:97:1b:3a:5a:e3:9d:fd:
87:38:71:cb:c0:e4:3d:c5:09:b5:50:87:bc:10:bb:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:60:8A:D6:74:EA:55:E9:C7:0A:9B:31:BD:00:6F:5C:9A:96:49:6B
X509v3 Authority Key Identifier:
keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c3:3d:ea:cd:a3:87:8a:b7:06:8d:63:57:b0:f1:cc:68:e4:
fc:cd:85:59:26:05:92:7e:fb:32:ba:80:3c:aa:46:43:f2:a0:
c8:6b:4e:c0:0b:e2:03:d1:80:9e:32:ec:bb:81:0e:8a:4b:47:
cc:f0:e5:29:58:ac:fa:4a:e7:e8:9a:85:ed:54:78:e0:7d:cc:
8a:50:ac:47:61:0b:b6:72:c0:97:b8:60:c6:50:0f:93:63:15:
23:3c:3f:4a:5f:a2:33:38:7b:22:be:3e:8d:75:9f:12:5f:79:
96:d5:eb:e8:85:7b:82:10:c1:b1:92:21:71:a1:33:98:28:cf:
7e:93:cf:40:02:f0:a9:75:d9:2f:e0:c8:c0:e5:88:26:45:6b:
c4:6f:f8:3c:d2:2e:c9:fc:e0:e3:51:3c:2d:6a:3c:2c:ba:a0:
cb:96:df:a8:4b:a5:a4:11:38:6e:54:87:a6:ee:90:15:0e:5e:
1e:99:e3:72:7e:93:39:9d:cf:3a:8e:24:12:91:8c:1e:06:79:
0e:d1:05:a5:19:3a:ab:33:96:cf:82:88:3d:62:ff:df:a6:e9:
40:cd:76:18:74:c9:6d:cd:6d:69:dc:dd:c6:4c:e9:94:bb:30:
a3:6c:93:c9:28:12:a4:da:5a:07:b4:04:52:b1:b3:bb:23:8f:
4d:7f:2b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:05:02 2025 by rpki-client