Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
File: _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json)
Hash identifier: NKSqVPK0eO2gBXVZCyjd5rzAsnbhXXNuV+ebxpHER9E=
Subject key identifier: 6A:33:4D:16:BC:40:DE:15:EB:67:B8:45:F5:30:76:18:E7:70:2C:12
Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
Certificate issuer: /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Certificate serial: 0197B6A0DE69E5DD3225D120601CC79B09E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
Manifest number: 1037
Signing time: Sat 28 Jun 2025 13:01:25 +0000
Manifest this update: Sat 28 Jun 2025 13:01:25 +0000
Manifest next update: Sun 29 Jun 2025 13:01:25 +0000
Files and hashes: 1: 8Ua36sQPiROOdvji9D_u-a0zjio.roa (hash: D8ltqCdiAwJv/weW61AlTvYiDIAQY9oit7+M2ExP4Bs=)
2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: JVUtra9VdSKjIqptH8xc3b3O09Y+fDK+Un2SjDdEm50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:de:69:e5:dd:32:25:d1:20:60:1c:c7:9b:09:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Validity
Not Before: Jun 28 13:01:25 2025 GMT
Not After : Jun 29 13:01:25 2025 GMT
Subject: CN=6a334d16bc40de15eb67b845f5307618e7702c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:76:80:51:02:54:2b:27:f9:fd:47:a5:a4:
77:a7:ad:d2:d2:d9:3e:cb:c2:0e:b6:50:33:e3:b9:
73:cb:7b:ca:51:60:7a:01:d8:4d:c4:77:53:91:61:
32:ec:83:1e:11:9f:88:7f:54:a5:0e:fd:8e:71:27:
58:24:54:aa:3f:b4:54:0f:4e:c1:fe:b2:43:2c:1c:
32:c2:85:be:78:33:68:80:da:f6:26:70:b2:09:97:
77:b7:05:e8:0c:3d:ae:f8:df:ff:8a:d6:f0:4d:1f:
82:e4:68:a9:27:2b:5b:19:83:4e:2c:45:51:0e:7f:
bc:f9:e1:32:5b:78:28:89:e7:3a:3d:3a:b3:e5:17:
36:31:07:43:b1:a7:d2:f2:d3:3d:2d:f8:ec:50:38:
5a:15:b0:ce:86:26:f0:72:a8:88:56:39:ae:d2:1b:
bd:bb:ea:a5:f9:b0:92:66:57:db:0b:1b:29:9e:af:
df:db:6f:a8:c8:18:c0:1d:20:8a:ee:27:f9:a1:c2:
a2:7d:fc:fc:38:47:b1:25:06:49:1e:eb:e7:0f:05:
c5:7c:e4:91:fb:e7:a8:3c:6b:d2:0e:6f:27:00:c5:
9f:9b:ea:5d:90:f2:da:9f:98:02:c9:2f:11:5b:b9:
5a:ab:fa:f5:f4:3f:6e:36:fb:56:cc:1c:52:1c:a5:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:33:4D:16:BC:40:DE:15:EB:67:B8:45:F5:30:76:18:E7:70:2C:12
X509v3 Authority Key Identifier:
keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1a:ac:83:6a:52:6d:27:56:6f:c9:57:2a:61:b3:f2:49:db:
21:32:c5:68:f0:3f:55:a4:b3:f8:fa:eb:c4:c1:02:ad:31:f5:
8d:e5:b5:cd:dd:07:1f:bf:56:4a:82:7f:bf:9e:62:72:c4:26:
9b:45:57:bc:81:bf:a7:4d:ee:2f:16:15:8d:75:b3:20:b3:26:
c5:87:70:fa:46:42:22:88:21:c9:f1:5c:e1:42:90:c4:be:f2:
e4:18:a1:9f:8c:67:20:83:6f:70:b1:ec:e7:05:74:4b:ce:34:
86:a5:45:50:3d:de:26:46:7f:73:72:81:fb:2d:8a:0a:39:86:
b7:75:61:a8:92:20:98:62:aa:a5:99:1e:a3:db:f6:d8:0d:be:
e8:ed:ba:ae:c8:b2:3a:49:cb:3c:ef:31:5b:f8:c3:76:46:a0:
db:ee:ec:aa:47:c2:a8:cf:36:82:a9:f6:16:bb:0e:09:15:53:
3b:d8:aa:14:c1:31:39:4d:7b:f0:ae:b6:86:6e:0d:90:cf:7a:
11:ef:89:41:24:ff:88:a6:05:71:58:de:43:d7:9d:fc:35:fb:
0b:1b:75:5d:78:6b:a3:87:37:e1:ba:18:8f:e1:b6:26:57:40:
91:35:fd:f8:d1:01:f9:57:fb:8c:38:08:cd:65:37:33:c1:dd:
bc:2b:ae:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:53 2025 by rpki-client