Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
File: 5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json)
Hash identifier: QLyGVltbAC6PAs27YULaJRfkw0fCJ1fgmbkd/lsDspE=
Subject key identifier: 68:F1:50:B0:E9:AC:D7:C6:F3:5F:B4:D8:20:1F:99:ED:E4:4B:64:1B
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial: 0197B6A21DAC1D7582483569DB803D03F95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 13:02:47 +0000
Manifest this update: Sat 28 Jun 2025 13:02:47 +0000
Manifest next update: Sun 29 Jun 2025 13:02:47 +0000
Files and hashes: 1: 1ap-zhjP2xlpcyvljzd4At-hRqs.roa (hash: vy++CPahIzqV0ojk71CI64hyqugiBwjMnM2TKCrxcDM=)
2: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: WWO1p7cOlYCWI657aWbaGVFm6oznWE6qpEJm3pc/qrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:1d:ac:1d:75:82:48:35:69:db:80:3d:03:f9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
Validity
Not Before: Jun 28 13:02:47 2025 GMT
Not After : Jun 29 13:02:47 2025 GMT
Subject: CN=68f150b0e9acd7c6f35fb4d8201f99ede44b641b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:85:67:cc:9e:85:8d:fa:de:9c:0a:73:a7:c7:
58:d4:be:14:0c:e0:91:11:2a:27:ba:23:f8:06:d5:
b8:b6:32:ce:53:e6:0f:9d:46:82:cb:b4:67:de:a9:
8d:f8:e6:03:1a:a4:50:95:f8:18:db:fc:a4:26:00:
af:b5:4d:69:bb:8e:f4:56:01:37:2b:c5:23:52:8a:
47:c1:17:c0:c7:61:4d:c7:82:e3:11:fc:f1:23:cc:
ac:03:3d:f2:1b:de:7c:5f:2b:06:24:84:9f:48:a5:
4e:d7:a3:cc:29:75:fa:6d:43:c5:0a:61:bc:9f:87:
17:aa:9a:4b:9d:5b:32:0e:53:42:a7:c7:61:c1:83:
92:7f:7f:46:d1:a4:cf:d6:60:82:1a:97:3f:12:38:
0f:72:da:40:c2:75:42:cc:96:92:74:44:f8:3b:4c:
bc:6e:04:62:8c:7d:db:69:45:28:61:a0:b3:d0:f8:
9c:1c:5b:a9:e6:f4:9b:ad:a1:35:0e:2d:d8:b4:e6:
8d:65:2e:34:77:31:8f:5f:91:0a:81:1f:08:87:0b:
e0:70:96:2c:83:e2:a5:f6:d6:32:fc:d2:5e:e0:00:
cd:97:08:fe:1d:ff:a8:57:2e:d8:30:77:bb:ad:4c:
5a:bd:a2:b0:89:c8:43:1e:25:7d:e0:aa:9c:3f:03:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F1:50:B0:E9:AC:D7:C6:F3:5F:B4:D8:20:1F:99:ED:E4:4B:64:1B
X509v3 Authority Key Identifier:
keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:7f:7b:f2:27:5b:42:d1:b8:48:41:cb:36:af:85:06:01:e5:
f9:53:9d:ee:58:51:34:89:cc:dd:48:df:3e:16:e5:d0:fe:8c:
0d:4e:26:77:30:c9:6f:b8:39:96:a8:6a:48:ea:d5:b4:d1:61:
8c:6a:ba:45:4f:f9:db:f3:89:cf:47:f9:4f:7b:28:4f:b5:84:
87:62:a4:a2:48:04:6c:8e:2f:a8:de:7a:8e:0a:b3:ec:cb:97:
d4:08:66:72:ff:d4:b1:23:79:13:9d:01:2b:4c:3b:e3:ea:c9:
b9:ff:b9:e5:72:bb:90:56:03:9b:ae:40:b2:6d:45:43:b2:81:
0e:b0:d2:1f:76:45:25:67:5e:9f:19:00:d0:66:ff:6f:7e:e8:
48:d1:ea:74:32:68:84:36:86:75:a2:10:22:37:b5:21:81:4f:
01:7e:ce:85:cd:72:fc:c0:7b:23:8b:d4:d9:1f:6b:ec:4f:34:
39:55:df:43:16:65:73:55:99:be:97:c0:66:31:32:26:c2:97:
1d:d3:86:6f:d4:8e:73:9d:3b:12:c3:f9:a8:0e:6a:db:a8:6a:
83:bb:56:02:8c:63:ec:db:05:73:53:76:8f:04:97:3c:82:50:
07:96:6a:98:86:d4:77:5a:13:85:0b:c1:96:88:89:be:69:8d:
79:3d:99:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:17:58 2025 by rpki-client