Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
File: qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft (raw, json)
Hash identifier: IXYwzYw0m3zi/037y3AHEccBR7LvAUAHfmxQyLGrC/s=
Subject key identifier: 79:92:07:6F:35:13:3F:5D:2A:2F:F9:35:AF:83:D0:AD:57:DA:A9:C2
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial: 0197B70F1946ABF50E5E80C6FCDBA7CE8A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
Manifest number: 09A0
Signing time: Sat 28 Jun 2025 15:01:49 +0000
Manifest this update: Sat 28 Jun 2025 15:01:49 +0000
Manifest next update: Sun 29 Jun 2025 15:01:49 +0000
Files and hashes: 1: hofEb4DxTmo8-bHoq5_u1SjHWxg.roa (hash: hCqP+IxiyDQrp0AjJaVxMj1A1H2iMztGikQq20Whf3E=)
2: qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl (hash: hec5XWt17kEJUD1zDA41npYIBtOdJtEWEwp0SB503a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:19:46:ab:f5:0e:5e:80:c6:fc:db:a7:ce:8a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Validity
Not Before: Jun 28 15:01:49 2025 GMT
Not After : Jun 29 15:01:49 2025 GMT
Subject: CN=7992076f35133f5d2a2ff935af83d0ad57daa9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c0:96:07:02:21:bb:cf:01:64:52:af:c4:f9:
da:f0:e2:32:27:f0:db:2f:bd:bf:89:31:89:a9:1f:
03:47:b7:3c:b2:5a:8d:f6:c2:9b:89:99:0c:bb:4b:
e5:44:82:44:0e:2c:2e:ac:18:e2:67:86:ad:dd:80:
94:ba:1f:9c:5b:01:db:34:3c:18:89:ae:ee:97:c7:
e4:97:dd:10:00:91:ba:6a:89:a7:04:eb:83:25:26:
17:9c:ce:9f:0a:6a:33:97:b5:58:f1:62:bd:cf:10:
32:ad:9d:4b:07:33:3c:0a:12:17:57:90:b8:3c:23:
82:05:f6:4c:f2:cf:72:96:25:d5:5d:ff:11:3c:0b:
41:0c:9b:58:1d:fb:27:ea:20:ce:97:b4:d1:0a:e3:
c4:4a:72:61:8c:d1:50:b0:60:ed:95:55:f1:bf:6d:
fa:aa:68:47:e2:84:97:92:f5:99:a0:dd:1b:ba:bd:
a0:4c:0b:17:97:d1:88:e9:76:ef:99:aa:37:fa:fc:
a3:6c:ac:55:f8:d2:d7:82:a0:44:8b:09:3f:e1:ce:
c0:e4:af:88:9e:2e:a1:02:40:76:27:e6:5e:b3:5f:
ef:33:fd:f5:3f:bd:60:6c:eb:d0:13:ca:e6:09:57:
b3:54:76:a7:12:17:d3:f3:14:b6:38:3d:98:17:a3:
40:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:92:07:6F:35:13:3F:5D:2A:2F:F9:35:AF:83:D0:AD:57:DA:A9:C2
X509v3 Authority Key Identifier:
keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:52:81:81:dc:25:e4:b9:0a:b5:6b:c8:29:62:23:00:47:94:
68:77:80:87:66:4e:44:d5:b7:6a:fc:d3:1f:08:2c:65:8c:3b:
44:a6:0c:c4:56:f7:2e:36:de:70:2a:63:a7:63:aa:37:6e:e6:
04:00:4f:7a:84:56:b9:d6:24:e9:24:81:ca:02:66:90:e5:d7:
ad:ee:a1:e7:81:a3:99:a5:f3:2c:e8:63:17:8a:07:57:41:dd:
ee:e8:8f:27:fc:69:64:b7:41:8e:85:d4:a4:cc:92:c0:61:8a:
8d:39:7a:2e:7e:98:69:53:76:d3:38:e3:88:79:3f:f0:2a:3e:
16:63:21:5e:ac:9a:cd:f4:0e:07:6b:d4:c3:57:cc:21:a5:ad:
97:22:23:86:aa:82:a7:4c:13:b7:65:3e:63:dc:53:ed:8b:5a:
24:e6:53:22:eb:b2:64:f0:fe:e7:26:b5:b1:a5:db:89:13:cd:
90:97:0c:47:87:36:1d:9b:04:1f:3d:2d:10:e4:ea:ae:c2:9c:
00:85:f4:34:9b:5b:52:77:ff:68:d4:13:84:2b:58:88:46:fd:
ac:ce:8d:78:1b:ef:74:45:c2:58:a6:1c:16:d5:d9:be:4d:cb:
cd:ed:e8:e8:c4:8f:f1:ee:35:15:f7:74:b7:e6:28:9b:f5:7c:
3e:f8:a7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:45 2025 by rpki-client