Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
File: q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft (raw, json)
Hash identifier: 7sQiIg1511tMwojSUWi2hte1fRaC7DlU+vz7yLidwLI=
Subject key identifier: 8A:95:78:6C:35:8D:98:3C:37:D0:B5:B0:94:16:8F:E3:AB:FA:16:C8
Authority key identifier: AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
Certificate issuer: /CN=ab87734368d88315f11b329386cc5ef2bb875858
Certificate serial: 0197C15B635C881A8036A884ED1E3D555EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
Manifest number: 15BA
Signing time: Mon 30 Jun 2025 15:01:21 +0000
Manifest this update: Mon 30 Jun 2025 15:01:21 +0000
Manifest next update: Tue 01 Jul 2025 15:01:21 +0000
Files and hashes: 1: q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl (hash: 2YmUHm2aS2d7FbwJo+tbvk0WXJx6/YKgGFVWivup0Uk=)
2: sqo5PLdWdHMa-3THIwpzThX3MIQ.roa (hash: mkeWzT4DWdeQx69gMonfC3UIQ6XY4x+08EOS1mbWBlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:5b:63:5c:88:1a:80:36:a8:84:ed:1e:3d:55:5e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab87734368d88315f11b329386cc5ef2bb875858
Validity
Not Before: Jun 30 15:01:21 2025 GMT
Not After : Jul 1 15:01:21 2025 GMT
Subject: CN=8a95786c358d983c37d0b5b094168fe3abfa16c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:49:ca:26:44:56:86:04:0f:81:fe:d4:44:
70:b6:e9:e3:c2:b7:c0:46:e1:04:6a:d2:20:1f:7a:
56:23:b6:ec:c5:36:64:b3:5b:91:47:a5:58:df:ad:
24:f3:da:f4:46:7e:1c:fb:36:ef:f7:b9:df:7a:5c:
0e:1a:bd:95:65:31:ad:9a:97:33:61:c9:16:31:37:
45:69:fa:2d:a0:be:88:4a:44:ef:c7:ad:63:87:ab:
b2:1d:b5:58:cd:71:f6:39:18:a6:1f:19:0b:a8:73:
e7:4b:bb:b2:3b:26:96:84:54:10:6e:8f:f7:96:c5:
2b:78:e2:c7:d1:f9:21:e3:d1:29:a1:bf:72:76:97:
e8:7a:eb:0a:af:e7:9c:a3:18:36:8e:6c:69:0b:c7:
63:39:7f:8b:34:bd:01:20:ce:aa:72:de:b5:3d:b9:
16:fc:69:7c:0b:68:87:e7:69:03:b5:88:4a:50:b9:
0f:b2:7d:b7:e4:6d:ef:c0:09:e4:dc:b4:0c:56:27:
b9:4c:78:e1:83:95:6a:5a:c5:57:e6:bd:38:0d:7b:
a2:3d:9e:04:88:73:ec:da:4a:26:65:a9:8c:20:2a:
fe:da:fd:6b:a0:d2:f7:6b:de:27:a9:db:50:38:8b:
bc:8d:6f:c1:1d:3c:37:1d:ec:39:eb:4a:c0:aa:6a:
93:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:95:78:6C:35:8D:98:3C:37:D0:B5:B0:94:16:8F:E3:AB:FA:16:C8
X509v3 Authority Key Identifier:
keyid:AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6c:f0:f4:59:c3:3d:4b:c8:69:9d:34:8f:4b:56:e3:c7:bf:
86:72:91:a4:4e:70:46:7e:23:14:75:2f:ca:7f:d7:e6:8a:f4:
05:eb:21:7d:26:a9:00:ae:1a:d3:88:d7:5f:ef:26:e9:95:e3:
c7:23:11:23:df:49:63:97:27:79:05:0d:f4:1e:bf:18:08:e8:
3c:c5:08:f8:76:aa:10:08:ae:03:fd:8f:36:6c:fd:bf:42:e3:
98:10:bb:26:8c:2b:56:57:36:72:ec:42:3c:26:15:e9:92:4b:
10:b6:61:c5:e9:15:57:e0:80:f2:64:0a:54:47:65:12:04:11:
ba:73:f5:86:9a:68:3d:dd:88:e7:f3:ac:61:a3:bd:1e:38:c3:
2c:6c:1c:33:d1:45:31:3e:46:60:78:71:bc:b9:aa:be:ef:56:
49:33:fc:e6:8f:a0:7f:40:f3:34:13:5b:d8:39:23:25:10:a6:
a9:77:8a:77:98:db:fc:26:16:47:55:f1:1e:97:22:2b:bc:fc:
7b:4c:13:3e:ab:68:39:69:68:f4:3f:68:02:8d:7d:30:09:67:
6c:6a:7c:51:14:0e:b3:d6:bd:83:eb:01:56:24:60:f0:94:b8:
7d:e1:17:c6:5f:19:c2:6e:af:70:3d:cc:db:08:19:77:14:c3:
11:10:8e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:34:26 2025 by rpki-client