Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
File: q3dzqhxxoCJlFGujNszC5Y3q24g.mft (raw, json)
Hash identifier: IFEg03jz/G2F3+JmlAbUfW1xsGu0GmQoNCTW79VI+N4=
Subject key identifier: BB:84:9B:6B:A2:B7:3D:44:10:6C:E0:B5:74:B7:50:91:0E:04:6A:F2
Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Certificate serial: 0197B7EADFC01FC18CCE77F86602D4DB5050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:52 +0000
Manifest this update: Sat 28 Jun 2025 19:01:52 +0000
Manifest next update: Sun 29 Jun 2025 19:01:52 +0000
Files and hashes: 1: cyFUaiualt3wMiC5gtz5aMOvlGc.roa (hash: RoAUS0DbrFV1sDA69agJ/hjEE06MIOfXgztHL0bgXao=)
2: q3dzqhxxoCJlFGujNszC5Y3q24g.crl (hash: uEkBwAFfTW5SW44UT2QwJW6xOgS7csFhlumaDEgt6Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:df:c0:1f:c1:8c:ce:77:f8:66:02:d4:db:50:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Validity
Not Before: Jun 28 19:01:52 2025 GMT
Not After : Jun 29 19:01:52 2025 GMT
Subject: CN=bb849b6ba2b73d44106ce0b574b750910e046af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:10:e1:58:d1:bb:6b:56:6b:89:52:f6:71:
81:e3:07:c4:8c:9d:aa:81:f5:79:89:5d:f0:a3:43:
45:f3:2e:c6:10:f6:cf:bd:44:cb:c0:68:c2:ed:65:
dc:7f:5b:6c:b2:34:31:84:e4:cc:85:db:9a:14:e7:
e6:ef:02:fb:01:1b:b4:87:9b:de:b7:3f:ba:9b:5d:
78:be:26:ea:33:d8:e3:b9:8c:87:6e:0c:7d:a4:f6:
1e:e7:ec:f2:18:22:cb:36:6c:ee:ff:61:88:1a:cb:
cc:5c:06:3a:23:a6:0a:3f:e3:b3:2f:36:fb:97:66:
e7:bd:0d:1b:81:ee:11:58:6a:18:14:de:b2:c9:c2:
07:50:9b:a8:48:c0:b0:f2:b8:66:24:64:3e:33:40:
8b:76:8d:1b:f4:31:df:44:f7:00:45:8f:9a:25:6a:
4d:45:75:d8:b6:20:f2:ec:79:00:16:5a:77:bc:8c:
ed:79:57:2d:5d:5a:23:ad:2e:60:69:8e:65:f6:93:
76:e2:dd:bf:33:4e:77:1b:14:bf:76:40:e3:d7:4f:
fc:03:61:88:16:a9:da:97:2f:25:44:c4:51:db:ec:
11:81:d6:7e:97:87:ec:21:f8:22:1f:09:12:33:60:
57:bd:26:e7:5a:65:7b:1a:34:71:44:42:e4:22:71:
10:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:84:9B:6B:A2:B7:3D:44:10:6C:E0:B5:74:B7:50:91:0E:04:6A:F2
X509v3 Authority Key Identifier:
keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f5:f3:ac:47:7f:d0:6c:dc:ec:d2:d5:6d:60:63:28:51:ad:
cf:78:f9:8d:ed:17:b4:cc:da:92:48:11:7b:4d:dd:c8:1a:fc:
7f:65:e0:d8:77:8e:0f:22:2f:1e:d2:7b:4d:1c:da:47:28:eb:
e1:04:87:4e:3b:44:36:c4:f9:ef:fd:53:df:80:33:5d:57:c3:
04:c3:27:66:ae:4a:ed:22:41:47:ed:75:38:7f:af:d2:e5:aa:
f0:0b:a6:7d:a4:af:43:b9:3a:1d:59:27:a1:75:fe:c4:14:b2:
9e:fd:aa:35:c1:88:96:d0:0c:72:75:12:c0:e3:b6:46:85:99:
a9:b2:9e:ba:2a:03:3f:57:a8:73:cc:95:55:e0:9f:43:87:97:
83:a4:01:6f:e3:67:95:33:28:8d:2e:d2:61:53:6b:32:09:d4:
bc:75:96:58:1b:ea:7b:b2:c4:7e:e7:4b:74:33:c3:80:42:d5:
60:bd:fb:f0:f9:97:53:3b:88:2c:09:43:8e:c8:48:f9:76:93:
e6:82:dc:44:49:1a:a7:24:41:d5:ad:94:20:36:53:4e:91:03:
9f:84:b4:7e:4b:6f:df:8b:01:cf:4f:44:23:7f:08:91:09:cc:
98:49:e1:ab:50:ba:27:5e:3e:f9:be:4a:e0:8d:a2:08:5d:7c:
cb:f8:5d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:20 2025 by rpki-client