Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File: qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier: ONrI9rdGeDAFuFacNd1vac8p1wrXr3JV6N2cgkxgZuU=
Subject key identifier: 6D:95:76:7F:9C:61:89:CD:DB:95:8E:2D:3A:E6:32:20:74:19:90:F1
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 01974C69F8D2CCCA768F9602AA849E5DBAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 22:01:42 +0000
Manifest this update: Sat 07 Jun 2025 22:01:42 +0000
Manifest next update: Sun 08 Jun 2025 22:01:42 +0000
Files and hashes: 1: DxU6Tj_sH9i6nYuhG62Zr3rykbI.roa (hash: m10v06RZq7QrBohirh1LPManMxgfja3ZfQ1j9hj5ZLI=)
2: kZG65yjYhzWbyjVxS5nDngYTn7o.roa (hash: NxEcj6vOgWy2wxB1Tg6EXlBHbNa6oBK7xEqZZsDpfQk=)
3: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: pTbfY1Lmb/SIY0up3xqPz1L+3NVMrDGlUtTXko8mZss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:f8:d2:cc:ca:76:8f:96:02:aa:84:9e:5d:ba:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: Jun 7 22:01:42 2025 GMT
Not After : Jun 8 22:01:42 2025 GMT
Subject: CN=6d95767f9c6189cddb958e2d3ae63220741990f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:39:25:6a:2e:c8:6b:ff:cb:66:35:7b:22:
e7:a3:f0:2d:fe:3b:b8:a2:1c:9c:bb:54:54:04:03:
b7:47:c2:bf:ad:e0:26:40:95:07:e7:0a:a9:2e:ad:
c8:79:63:13:b0:6d:51:e7:ea:32:4a:c1:e1:28:3a:
26:a1:9e:78:1a:08:98:f8:90:f7:3a:52:fc:39:5c:
b5:e2:c8:e5:6a:2c:81:25:8f:65:ca:78:28:a8:ea:
54:68:6b:de:ac:2e:a8:e4:f7:81:ca:c7:78:47:6f:
91:3b:b8:4b:3e:f3:f1:69:7b:b9:6e:49:9c:7f:2f:
ce:d4:5c:1f:b4:ca:34:43:4c:5f:61:7f:6c:7c:e5:
20:95:ac:fc:bf:83:da:75:a3:8c:86:76:12:87:64:
93:62:47:ec:06:69:4b:42:e8:6a:70:89:cb:9c:cf:
bc:5c:0a:ff:d8:ba:44:e1:80:56:d0:8f:5d:0d:59:
7b:ca:f9:39:e3:9e:1f:9f:1a:4e:2f:4c:5a:00:b7:
1a:61:c8:46:66:2c:9b:99:1c:12:8d:77:3f:f1:21:
89:c0:b4:66:bf:a5:21:f7:65:bd:cb:7f:1a:af:ed:
ab:ee:7a:e9:8e:b3:5c:4c:00:87:e6:31:2d:77:7e:
ff:99:ab:3b:e4:ec:2e:d2:6d:3d:73:f3:51:e0:14:
a9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:95:76:7F:9C:61:89:CD:DB:95:8E:2D:3A:E6:32:20:74:19:90:F1
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b0:9e:2a:80:8a:c0:01:97:17:0b:37:83:e2:1d:55:99:a2:
6a:0e:4a:12:03:3b:59:3c:15:8b:24:7d:45:0c:e6:9a:49:25:
7e:74:1b:64:54:6a:05:bd:05:56:0e:cd:16:bc:c5:7a:fe:dd:
1f:e8:61:17:8a:83:49:1b:b7:1f:15:25:c5:56:e5:a3:3f:50:
67:46:95:e3:b5:52:2f:53:c4:44:eb:aa:19:09:4e:45:85:4b:
4d:dd:a9:8a:5b:9b:79:74:a5:8e:59:79:0a:d8:34:31:78:45:
5c:36:f1:25:e0:ea:a1:29:89:e1:e9:e9:3e:c4:ec:64:1c:ef:
5b:02:b4:e3:9c:bd:87:ae:fa:20:44:ab:90:79:a2:a9:1a:bd:
89:07:48:b2:70:5c:2f:b9:48:85:52:7e:fb:83:e5:47:30:dd:
60:9c:9a:9d:03:4d:c1:67:fb:89:15:d4:c8:8c:7c:22:24:ef:
5f:cc:4c:80:17:04:93:ce:c6:7d:5a:c6:86:fb:0a:df:02:6c:
ba:1d:d2:dc:0f:d4:36:29:ce:c5:ac:a0:6f:3d:ce:8c:21:6e:
04:91:14:a4:11:0d:af:60:e0:41:a4:cb:88:9a:64:74:e9:10:
0d:65:f8:33:9a:7b:c5:2c:65:48:c3:2f:0e:42:f7:02:7b:3c:
61:e2:b3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:13:50 2025 by rpki-client