Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
File: qoj641tmtN4uQcpe4He17wtKtkk.mft (raw, json)
Hash identifier: 7xZ3exiNKSw4tBUC8bEU9u3BcqzsfrN0YiVmc3Rqtb0=
Subject key identifier: 3F:9F:9C:1E:37:7E:A9:2F:43:CC:82:C7:76:AD:68:D4:71:A1:E1:17
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Certificate issuer: /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial: 0197C802D2907F0E06A0315C72A7A1CE628B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
Manifest number: 1525
Signing time: Tue 01 Jul 2025 22:01:57 +0000
Manifest this update: Tue 01 Jul 2025 22:01:57 +0000
Manifest next update: Wed 02 Jul 2025 22:01:57 +0000
Files and hashes: 1: oS0baXfZNGyY1D73J2ZM4dbyUEc.roa (hash: Etkc7DGAN6PIaAjm/aO1aFavjNa8wspYkBLe0PvWnjU=)
2: qoj641tmtN4uQcpe4He17wtKtkk.crl (hash: +LMIBRI3Hyk0kGLR4IHuDhrR1M265eRrvYy2NB+5Hs0=)
3: r-zsasbUjJEaU71e8kbXi99TukU.roa (hash: gv3XffgL881eMS9I6xI/He9cs/3EXg91NLNFK1oWx0g=)
4: zeGJY-nsOInvvd3T0IdWJNf1k28.roa (hash: p/aKgF7SzmiRfhNkcpLsPCyw0fGJ04jvtIbzFNx9GZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:02:d2:90:7f:0e:06:a0:31:5c:72:a7:a1:ce:62:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Validity
Not Before: Jul 1 22:01:57 2025 GMT
Not After : Jul 2 22:01:57 2025 GMT
Subject: CN=3f9f9c1e377ea92f43cc82c776ad68d471a1e117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:68:d8:83:f8:9e:aa:ca:f6:f9:c8:a1:37:
85:08:2f:61:f2:e1:a2:ca:1f:05:3b:05:35:a4:5c:
b2:ee:f4:c1:72:19:44:8a:4f:d7:49:1f:f7:ef:b9:
24:4f:e6:c9:45:79:1d:f8:07:a4:97:93:0e:d3:41:
a0:c5:e0:45:79:44:9a:31:24:89:73:0d:0f:f9:e4:
59:7f:2a:0e:43:af:ba:49:d4:0a:d0:f1:71:25:dd:
78:6b:0e:4a:41:fa:f3:81:2d:08:42:55:3c:17:fc:
7e:5e:cb:32:45:06:4b:5a:f9:1d:50:95:63:d6:6f:
90:6b:a3:47:2f:0a:c2:1e:0e:7c:0f:c1:4a:bf:86:
7d:18:b6:91:2b:df:7a:a1:66:e0:56:6d:74:7e:47:
f2:00:28:ca:17:c9:6e:1c:7f:60:55:c8:8f:1e:15:
e7:dc:e1:8e:60:09:4d:86:a5:54:55:b7:da:e8:0f:
57:e3:df:98:1d:18:b3:c5:02:52:bf:eb:d2:82:6a:
9e:44:d7:a4:7c:6c:e9:0b:e6:7f:4c:af:89:65:b9:
4a:11:4b:6f:20:8d:82:ce:64:93:82:56:b7:fe:d3:
df:97:84:2a:c9:1e:0c:d8:cc:0a:1f:fc:23:f3:8c:
7f:05:e2:8b:3a:98:2a:99:c7:ed:37:5a:9f:20:80:
c9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9F:9C:1E:37:7E:A9:2F:43:CC:82:C7:76:AD:68:D4:71:A1:E1:17
X509v3 Authority Key Identifier:
keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:45:2f:5d:c7:d0:68:c7:5b:54:0c:7f:30:12:61:47:c5:15:
3f:80:5c:5d:70:b4:46:bf:cb:5c:db:0e:9a:02:83:e9:f9:b3:
90:f7:d1:a7:79:d4:0e:fc:c3:c1:a2:e8:5c:9c:03:e4:72:41:
e2:4f:ba:f8:32:fe:bf:ca:98:59:20:9a:ea:f3:f2:37:c0:ad:
34:9d:f5:86:55:88:9e:1a:e2:87:ea:e4:2c:77:89:9a:0c:36:
74:84:11:74:70:5f:26:24:e9:ee:b2:b8:d2:66:cd:53:1d:b9:
01:28:0b:e6:b3:1e:1e:82:36:8d:6e:fe:27:c9:63:4f:7e:f3:
c2:c2:ac:89:ea:ff:0e:2b:b0:7e:ea:bb:78:b9:61:e4:9b:a6:
c8:fe:ed:0c:58:bd:1f:ef:3b:85:8c:a2:4d:cc:4f:cd:61:5d:
f8:cb:3f:9e:20:3e:25:3a:21:63:43:e0:7e:07:78:4c:f5:66:
0e:9f:19:ff:03:74:b0:d4:b2:11:92:f1:20:6d:6d:b7:d5:53:
41:0d:f7:47:de:45:0c:55:04:79:0e:0b:d4:96:1b:ac:f2:57:
6f:29:a8:c4:01:7b:fa:c6:ff:f6:67:21:f9:66:c7:f3:d6:3e:
fc:37:99:f3:c4:7d:97:ab:36:04:ea:21:59:de:80:57:77:8d:
1d:71:11:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:51:40 2025 by rpki-client