Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
File: q5ioJj4GO4p709cYDnpKpklTRBw.mft (raw, json)
Hash identifier: e9Mh+5QDtzxGFYgX/MqkQoSw1xbFyhf0+J2XkiiIAsg=
Subject key identifier: 66:DC:76:06:9B:0B:BC:71:CA:17:E7:23:5A:AF:EF:CB:7F:6A:08:2B
Authority key identifier: AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
Certificate issuer: /CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Certificate serial: 0197B74583614CF0BF4DD1A133FFC40D0CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
Manifest number: 0481
Signing time: Sat 28 Jun 2025 16:01:15 +0000
Manifest this update: Sat 28 Jun 2025 16:01:15 +0000
Manifest next update: Sun 29 Jun 2025 16:01:15 +0000
Files and hashes: 1: 4fHNG3uqnKYRdS0KPogfVSeJ6Y4.roa (hash: EoqRZ5+OD3esILCMjil4nQygTYY9bzIijeRvhLDs9S8=)
2: kD0NYEJpgxaFFDcqPxx98oDLF4A.roa (hash: kEfgwntStfXPUtLxcdJZBEv9NrzPqg0tH8aS2VZkZpA=)
3: q5ioJj4GO4p709cYDnpKpklTRBw.crl (hash: k7Ic4HwWLvvgKakIQtaGIb/nSc/RZ+bZ6/0L1oZC4Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:83:61:4c:f0:bf:4d:d1:a1:33:ff:c4:0d:0c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Validity
Not Before: Jun 28 16:01:15 2025 GMT
Not After : Jun 29 16:01:15 2025 GMT
Subject: CN=66dc76069b0bbc71ca17e7235aafefcb7f6a082b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:f2:ff:c7:5a:79:2b:27:e4:7d:9c:38:8d:
da:2f:ee:eb:60:93:35:f1:46:0c:53:1d:cc:90:a7:
29:93:30:b9:be:83:c7:f5:44:b3:a4:14:28:a0:33:
58:c4:c3:37:b8:98:0c:42:ea:ee:e2:d7:56:0b:35:
32:7e:45:3b:8a:b9:fa:1a:2d:03:e0:5e:2e:68:c2:
90:d6:38:a0:f0:d9:fe:65:eb:aa:13:5b:f0:59:62:
20:3a:90:32:e3:12:00:d5:8a:24:4f:07:06:2c:64:
51:c6:ab:e5:99:0f:d5:9c:42:17:76:ef:50:b3:e4:
2e:61:73:d1:3b:00:65:98:4d:11:53:2d:ce:ea:2b:
bc:c8:a3:42:8d:04:e1:8b:d7:37:de:dd:d5:6e:9f:
6f:e1:74:82:ef:c0:c0:fd:9d:13:f8:95:d1:76:26:
0d:68:ef:ea:c7:89:de:4f:eb:eb:73:4b:cc:71:14:
3f:85:9f:f4:20:50:c1:c3:5f:a9:18:24:b8:b7:93:
05:41:15:65:7a:4d:9b:8b:4b:98:51:2d:7c:37:ab:
e0:26:06:4b:f9:52:be:64:31:b1:55:0f:45:6b:9d:
88:0c:8d:95:1b:a9:30:ee:ac:05:ae:6e:64:21:72:
5f:43:f1:d0:a7:f7:cf:28:78:ee:53:d9:28:16:d7:
f9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DC:76:06:9B:0B:BC:71:CA:17:E7:23:5A:AF:EF:CB:7F:6A:08:2B
X509v3 Authority Key Identifier:
keyid:AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e1:34:2a:f6:c1:83:db:59:94:09:16:f0:14:5f:70:48:35:
b5:28:46:ad:66:e0:01:14:fa:69:c2:c7:9a:7c:25:f4:fa:10:
b6:6d:f8:02:23:c8:07:5b:52:c1:bb:2e:06:9d:d1:0d:b7:17:
89:64:40:ed:87:fb:fe:c0:5b:0e:3c:82:64:40:c9:8c:31:f6:
80:18:56:66:32:23:52:0b:ed:d6:91:e3:53:6a:86:9a:8c:38:
98:05:3f:fd:00:78:e6:33:39:3b:a7:45:fc:17:fb:c9:ab:47:
a1:d5:98:1c:b1:af:cb:a1:9d:a6:bd:93:8b:69:9b:bb:de:ff:
7f:c8:35:cf:6e:5e:fb:db:d2:9f:f6:fe:79:b1:7e:14:a4:7d:
c5:8a:26:10:72:05:56:45:f4:2f:7f:1a:2d:6c:03:d0:fc:db:
9d:14:57:c3:b5:a7:53:7d:f3:17:73:bf:80:27:a9:1f:1c:00:
55:a0:bd:fb:0e:c5:bd:ad:69:db:fa:ce:cb:8d:c9:e8:64:05:
bf:ef:e4:46:5e:f5:03:ad:29:de:7d:ef:a5:df:62:20:65:6a:
2e:74:dc:52:c1:d8:20:08:ed:9d:04:ee:4e:a7:50:8b:0f:b8:
35:7c:80:48:01:1e:eb:76:0e:c4:e1:93:41:e2:54:eb:24:88:
39:b4:11:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:42 2025 by rpki-client