Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
File: Q1w_GpeQPnlikqKsenjUGxwh24U.mft (raw, json)
Hash identifier: qp1xWoaN/hSZ1Y+JGu/OggvJ1JLPQhtDeVnYBv+3Tt8=
Subject key identifier: 9A:14:F8:48:C3:D4:77:A5:C5:4D:81:8B:57:0B:75:B3:4A:A6:25:A3
Authority key identifier: 43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
Certificate issuer: /CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Certificate serial: 0197B7EA634A4412A19644DA914D544294BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
Manifest number: 0EDE
Signing time: Sat 28 Jun 2025 19:01:20 +0000
Manifest this update: Sat 28 Jun 2025 19:01:20 +0000
Manifest next update: Sun 29 Jun 2025 19:01:20 +0000
Files and hashes: 1: IB6At0eMkw1jy1fdpcIgarxWKQ4.roa (hash: rOQggKg6yCYoTFHyozZzxf3+Jia2rL6WXiIW/P0HCuo=)
2: Q1w_GpeQPnlikqKsenjUGxwh24U.crl (hash: vxMGmxysJjto2VHe8azB0bxN4+LeGpN09FFSfvsYfG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:63:4a:44:12:a1:96:44:da:91:4d:54:42:94:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Validity
Not Before: Jun 28 19:01:20 2025 GMT
Not After : Jun 29 19:01:20 2025 GMT
Subject: CN=9a14f848c3d477a5c54d818b570b75b34aa625a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:49:66:2c:09:4a:f7:51:80:f7:d4:a9:49:d2:
25:a4:6b:d3:ff:5e:aa:77:93:c9:27:38:91:ee:6b:
97:a9:d9:c1:be:72:0b:51:59:37:a2:b7:0a:9c:09:
7a:ab:b3:79:67:60:63:0d:6b:60:1a:54:91:c1:49:
a5:43:db:af:e5:e1:48:92:02:0d:81:4e:1b:cc:e5:
7a:22:72:2f:d3:7e:59:49:b4:9f:7d:ed:0f:ca:01:
50:6a:13:2a:c3:f9:21:ab:f7:f5:7b:1f:7f:3a:86:
e2:1d:b1:6e:24:ac:73:58:95:79:79:9e:92:8c:3f:
9f:aa:b8:8f:73:0d:75:01:fa:a1:3f:45:4d:3b:3f:
65:ea:1a:76:9a:1d:76:29:9a:38:50:ae:c5:24:e4:
05:05:f3:d4:16:34:e7:4c:91:0e:9c:bc:d6:50:4b:
a5:c2:4a:33:f2:8c:65:f5:58:27:ac:00:1c:72:4f:
87:fd:b9:24:5e:a9:ed:45:6b:3d:09:95:e6:69:fb:
e3:b3:34:d9:a2:69:48:46:87:48:d7:18:c1:04:82:
10:96:fc:fa:0a:51:d6:31:72:f6:7d:68:14:ae:ba:
40:9c:29:61:e6:88:0a:79:84:fd:a2:eb:92:02:e1:
8f:db:0d:63:6d:02:2a:20:29:8e:f0:ae:54:f7:a9:
1d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:14:F8:48:C3:D4:77:A5:C5:4D:81:8B:57:0B:75:B3:4A:A6:25:A3
X509v3 Authority Key Identifier:
keyid:43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:08:76:ed:b6:d8:32:3f:b9:05:6a:82:81:92:4a:cc:ce:5f:
64:49:c6:55:73:71:91:3b:79:0e:1c:57:ba:a1:70:32:47:bc:
42:d2:7e:23:e6:e0:3b:c8:9b:6e:69:0c:d7:96:05:0c:05:49:
dd:ba:96:c2:06:c8:c9:a4:c9:69:0e:2f:64:f0:bb:02:5e:20:
97:3f:26:10:87:bb:1e:b9:59:2a:55:d9:ae:90:54:9f:68:48:
23:94:8d:27:91:87:72:44:ab:b1:a4:90:a8:26:e3:5b:42:ea:
bb:46:35:51:88:60:40:1b:94:7f:dd:44:3c:6e:44:ce:ff:8e:
96:40:98:f8:9a:50:23:73:f4:ce:34:58:6d:8f:94:65:9f:6a:
03:64:3f:17:03:f0:49:a8:b1:dd:70:67:72:03:07:01:6e:8a:
5a:f1:d5:b3:0b:0b:30:32:98:c9:13:29:c9:12:d0:05:02:f9:
9c:30:ce:dd:cb:67:fb:5f:8f:ed:0a:12:3f:b5:20:71:13:09:
26:d7:34:da:f5:55:ad:71:41:05:bf:b5:06:4e:03:2f:a0:44:
7c:31:21:39:f1:8e:22:83:20:93:45:ea:65:2e:07:ea:f4:0c:
ea:32:4c:4b:5f:a7:d3:c4:67:1a:05:c9:47:f8:2f:cf:43:f8:
e5:82:62:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:32 2025 by rpki-client