Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
File: q-CopGLQ3h9NMBLD455c2mA-j5E.mft (raw, json)
Hash identifier: eTOphyE4yUJ/QQdb7RXi/juOleDmlp18pxtH4gtCZIw=
Subject key identifier: 5C:21:C5:F9:92:BF:BA:13:AE:00:09:A9:0F:91:AB:8D:06:D0:04:BE
Authority key identifier: AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
Certificate issuer: /CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Certificate serial: 0197B6A1E670B873BDF5490A88459BF036B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
Manifest number: 1207
Signing time: Sat 28 Jun 2025 13:02:32 +0000
Manifest this update: Sat 28 Jun 2025 13:02:32 +0000
Manifest next update: Sun 29 Jun 2025 13:02:32 +0000
Files and hashes: 1: 1W5smHKXook3Cttl9rBFCphz4iU.roa (hash: pODFfCt0njdSi3l+0iabpv9dot/GnoaQcWWIJ30v1gM=)
2: q-CopGLQ3h9NMBLD455c2mA-j5E.crl (hash: 2eL6Idd8S8AlrOaT+TiTGQ//8WXLLIlJUXksUu5IyFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e6:70:b8:73:bd:f5:49:0a:88:45:9b:f0:36:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Validity
Not Before: Jun 28 13:02:32 2025 GMT
Not After : Jun 29 13:02:32 2025 GMT
Subject: CN=5c21c5f992bfba13ae0009a90f91ab8d06d004be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:7b:d2:f3:3d:1c:ef:d8:6c:b4:50:aa:ef:
d7:c9:85:52:ae:88:e5:36:45:8d:f2:e9:df:9b:87:
54:42:61:6c:c1:96:80:04:1b:01:b1:fa:96:ae:f9:
d2:65:d7:0a:22:7f:45:6e:42:d3:84:5f:d0:22:ca:
bc:0f:4c:37:9b:f3:2c:01:3a:89:c6:d7:33:98:33:
4f:d2:79:1d:bc:c0:51:85:69:9b:f0:1b:b4:ac:c2:
03:61:ab:26:06:88:ab:c0:7b:97:c5:e5:1a:4f:70:
30:16:25:d4:e9:75:55:d0:ed:3a:4d:b4:3e:62:fd:
1f:dd:ec:39:b5:5e:a5:33:6f:1e:c4:3c:50:0f:62:
02:64:5c:b7:59:87:17:e5:f7:90:5b:67:34:52:7d:
4f:47:b9:7d:76:28:ff:43:61:b0:d6:f0:72:4a:a9:
75:87:9b:0c:45:f1:8b:e5:b3:4d:39:5c:ee:30:1d:
40:11:1a:9a:a7:89:0a:be:fe:d7:95:ea:e4:3f:ad:
2b:9f:60:b4:55:f0:14:cb:03:16:24:2b:67:29:b8:
81:b5:da:70:1c:ca:37:7d:cf:0b:a8:be:fe:57:8d:
71:15:6a:29:90:ae:f8:68:cc:6c:a1:8c:11:64:34:
2d:97:5b:a7:13:61:a5:cd:a3:fd:d5:c5:06:9d:04:
4a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:21:C5:F9:92:BF:BA:13:AE:00:09:A9:0F:91:AB:8D:06:D0:04:BE
X509v3 Authority Key Identifier:
keyid:AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e3:34:09:dd:5f:bb:71:57:4b:66:b6:6a:73:ae:10:50:75:
74:d8:e4:9e:90:29:8f:ee:1a:1e:59:b9:1c:5a:a7:b7:13:be:
f7:24:e2:6d:09:da:13:7a:90:50:26:f8:82:37:ec:63:5e:e2:
d9:81:99:7e:c4:fd:e6:49:08:a2:aa:23:0b:e3:36:41:59:38:
f5:c2:61:58:69:bb:e6:6d:7e:9e:e2:12:49:15:28:a2:81:a3:
a4:ce:d1:36:fe:ff:cf:f8:eb:b4:dd:37:4d:d0:bb:aa:13:af:
54:f9:d0:7e:9f:0f:ec:d6:9e:1d:a0:77:50:5c:a7:64:95:76:
08:a6:47:6b:4f:48:0c:98:a1:b7:55:67:fb:5e:01:4a:87:78:
a6:15:51:6a:54:9e:9a:0a:d3:a2:5b:ce:49:b2:c0:70:7f:c8:
b2:cb:97:d4:64:0e:36:66:79:0f:c3:ec:19:86:d2:31:a1:de:
cf:e5:1b:7f:23:22:38:fa:10:c7:3e:e8:d2:f1:c2:0f:86:bb:
82:e6:84:74:19:7f:9e:30:d5:95:25:31:35:bf:81:d8:93:9a:
83:7b:91:3a:b8:9d:b2:52:9c:94:82:dc:eb:b5:9a:20:3b:76:
f1:e5:34:1c:11:93:af:59:aa:02:d6:23:d9:7c:9f:78:02:0b:
de:b6:d2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:18:24 2025 by rpki-client