Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
File: qwbI8iR9IgQcguVVZniB5Q-RVKs.mft (raw, json)
Hash identifier: miU25/az1C9ej7sYs1i/60M8khyLoorFdaTaDLG7YKY=
Subject key identifier: FA:22:C0:B5:CC:3B:77:A6:61:3E:A4:30:A9:ED:9F:6D:31:CF:14:2F
Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
Certificate issuer: /CN=ab06c8f2247d22041c82e555667881e50f9154ab
Certificate serial: 0197499F027843284D365ED8716CE719C214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 09:00:46 +0000
Manifest this update: Sat 07 Jun 2025 09:00:46 +0000
Manifest next update: Sun 08 Jun 2025 09:00:46 +0000
Files and hashes: 1: BvjHm2eLgQsE-EhNaMGys6XuvSA.roa (hash: 3dR8rduC7LW0RozAGEED/FwSFwjDp9QTVfVqQtjf3mI=)
2: kD9wFsIkyemJmyZR5NsOicAOk6Q.roa (hash: 5lwx2dujcX+QPN65pRSgkqXQZ6JloT7CVxLAGTDZ7oM=)
3: qwbI8iR9IgQcguVVZniB5Q-RVKs.crl (hash: mzWgrhkr9+9/kdUa8fymws0J5xY2/6tlkv4baBZsAU8=)
4: y-vKKwMZ-Jm1IyyKOX5h3UFOkJs.roa (hash: TREazVziiS/zSuZ98yUE1lCBdvTaOvsRUmgllHq3JrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:02:78:43:28:4d:36:5e:d8:71:6c:e7:19:c2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab
Validity
Not Before: Jun 7 09:00:46 2025 GMT
Not After : Jun 8 09:00:46 2025 GMT
Subject: CN=fa22c0b5cc3b77a6613ea430a9ed9f6d31cf142f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0b:2c:bb:17:c2:9f:3b:6b:c1:ba:3c:fc:b1:
45:81:e6:73:87:c1:ed:12:2b:e7:97:da:6f:62:98:
7d:96:c0:6c:31:cf:7a:f1:f5:f2:20:b2:b8:6f:22:
78:a0:73:89:96:df:4a:f6:fc:4d:29:15:d5:c1:f1:
de:21:99:f7:4d:34:a4:22:60:85:f0:88:24:9c:85:
74:69:24:16:7a:e6:f7:0b:46:cb:70:77:6e:8c:f4:
80:a1:d7:a6:0a:7d:6a:20:c6:26:d2:cc:d8:da:de:
b7:0f:5e:f2:68:dc:2c:4f:1d:55:d7:3b:40:ca:d5:
3e:10:fb:cb:d4:fe:79:ed:af:44:7e:d8:d2:ac:d5:
6c:d0:7e:ca:88:fa:37:f0:6e:f3:b4:2b:fd:f5:94:
7d:5e:b1:97:77:e8:35:75:66:99:82:ea:6c:c5:b1:
dd:df:f4:e0:c0:60:24:7c:6d:69:84:1a:ba:fb:94:
98:3a:75:4a:79:8a:77:0e:8e:04:e3:b8:e8:22:dd:
f3:74:44:25:d3:f8:59:73:b7:ec:f7:ba:09:8a:76:
0a:e1:b4:17:29:aa:fd:f2:83:44:7c:e0:47:60:69:
18:80:7e:69:cf:e6:fb:f3:f2:89:5a:e4:90:ed:1c:
83:20:4b:c9:62:42:00:f7:50:3d:6a:ca:00:61:c0:
57:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:22:C0:B5:CC:3B:77:A6:61:3E:A4:30:A9:ED:9F:6D:31:CF:14:2F
X509v3 Authority Key Identifier:
keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:11:a9:e9:8d:3e:cc:21:ed:4d:1d:b8:c1:f8:3b:e8:df:e7:
33:26:6a:22:82:f1:f8:e9:ae:f2:f8:b6:e2:84:09:05:45:20:
34:e4:18:a4:8e:96:36:19:c0:2d:81:be:02:98:09:52:1b:0b:
3c:1e:92:c6:ee:21:af:46:39:31:fa:97:40:9c:31:f8:f0:77:
57:1d:c8:1b:c6:d8:08:c3:19:22:0b:e7:cd:d3:4c:66:b5:2b:
d7:fe:30:af:8e:62:43:3e:6c:a3:b6:5a:5e:48:36:75:34:29:
73:6a:be:83:bb:5c:02:12:32:a7:81:dc:06:37:b2:ab:9b:f1:
b6:d2:c6:27:1f:90:93:a5:b3:bd:28:69:42:1b:05:70:18:ff:
93:d6:6f:2c:c0:a3:2b:29:07:e7:03:a4:aa:80:b7:c4:bf:8f:
ef:1a:dc:ef:42:5c:25:77:fb:dd:bc:f1:72:40:db:c6:2e:d9:
f2:a4:b4:82:0b:a0:7f:67:6c:fc:d2:2a:17:5c:d8:aa:e9:5c:
20:ad:11:eb:87:c6:64:b7:5c:40:00:50:85:db:7b:45:54:85:
6e:05:76:50:6a:fe:39:35:60:c6:7a:02:a3:27:dc:aa:47:8b:
e3:67:44:70:9c:83:e9:7a:15:e6:97:ee:a6:6c:f3:98:e4:12:
b6:1d:42:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:23 2025 by rpki-client