Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
File: q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft (raw, json)
Hash identifier: 5W8eA/Du2WQQfxQfpNhaFp1PfMGpWp4W3yi8OMGNzTI=
Subject key identifier: 37:CA:52:99:49:4D:7F:49:AA:98:EB:4C:73:F8:1A:49:DF:1B:19:0C
Authority key identifier: AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
Certificate issuer: /CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Certificate serial: 0197B8C5E7F308B860C33BB05556B232B12D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
Manifest number: 1262
Signing time: Sat 28 Jun 2025 23:01:07 +0000
Manifest this update: Sat 28 Jun 2025 23:01:07 +0000
Manifest next update: Sun 29 Jun 2025 23:01:07 +0000
Files and hashes: 1: OQ-BUjiM-4ZYICksoUde6ONei7U.roa (hash: nuZwAEc9XGaRcjHMhQRLcOzGazeKsZ0/3EUvFc3DPLU=)
2: q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl (hash: 0ceUxAYw7VEKyHQgBIFc0uTe2duhNUERzqwxD5FHHyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:e7:f3:08:b8:60:c3:3b:b0:55:56:b2:32:b1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Validity
Not Before: Jun 28 23:01:07 2025 GMT
Not After : Jun 29 23:01:07 2025 GMT
Subject: CN=37ca5299494d7f49aa98eb4c73f81a49df1b190c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:78:b2:f5:b5:40:61:c6:75:75:ee:bc:a3:
a6:23:13:7b:6f:ac:31:cd:10:f4:68:2f:76:c0:0c:
96:ca:8f:46:73:1f:b8:7a:8b:e3:73:d7:d7:e7:66:
24:41:20:50:29:0e:40:1b:a3:23:c8:6e:67:ce:c6:
61:ec:0d:a0:24:4e:0f:2e:25:30:66:86:7b:65:d3:
d5:e3:71:b6:36:34:6f:bb:74:7b:13:55:72:49:6b:
02:13:01:b6:84:09:12:0e:93:51:ec:ae:93:04:0f:
4c:9f:0e:0a:51:8d:34:48:a1:07:84:c2:f5:15:c6:
b4:7b:9a:c2:0b:d6:cd:7e:ab:aa:57:4e:27:ea:55:
4a:cc:92:9b:c2:82:73:60:0e:4b:51:9d:27:a5:ee:
a3:31:01:d7:b5:e7:c7:c2:b3:8e:6d:62:b4:89:e6:
ba:d0:c6:53:b4:81:df:92:7a:06:ef:a0:f2:98:0d:
ce:fd:ee:f5:21:a4:e7:98:e8:ec:03:3c:1f:6d:e9:
92:7f:ef:c0:36:89:bb:fc:a4:9f:2d:68:b7:38:cd:
32:59:24:0c:e1:c0:3c:58:de:3a:a1:66:47:5c:60:
9d:04:79:87:ab:4f:d7:79:a1:31:58:ce:90:da:e5:
27:84:6f:6c:32:8b:1c:96:08:d1:5b:86:62:e3:e8:
0c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CA:52:99:49:4D:7F:49:AA:98:EB:4C:73:F8:1A:49:DF:1B:19:0C
X509v3 Authority Key Identifier:
keyid:AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3e:d3:38:c0:e7:e6:ac:fd:b9:4f:b5:6d:26:10:3b:a8:37:
d4:04:2c:c1:b8:48:9e:a0:62:47:55:98:82:ba:df:40:ac:76:
98:48:23:97:99:b4:d4:f4:83:d7:77:40:a9:51:88:12:a7:16:
00:49:15:46:85:e9:9c:2f:bb:06:ca:52:25:95:12:1d:cc:45:
a4:f7:24:20:67:ae:fd:e3:e0:be:c2:47:06:9a:aa:47:70:33:
35:88:40:a7:68:03:e8:78:f8:f5:93:4b:bf:02:a9:d9:65:08:
95:c4:40:58:df:bc:94:30:4c:a9:07:ad:cc:ad:2e:e1:7d:7e:
26:be:e3:eb:5c:3c:f9:8e:71:2d:49:7e:02:0b:d1:12:9e:ec:
05:f7:06:d3:d7:d8:69:6a:61:04:b3:5f:f9:b0:20:fe:cf:07:
79:54:0b:b6:37:27:84:f8:58:5e:5a:68:dc:02:93:a2:43:1b:
b8:75:d9:39:82:c7:c7:5f:ab:bb:f0:4e:36:ec:17:e3:a2:40:
9a:24:c1:8e:f9:11:9a:4d:58:4e:d7:35:43:03:3d:1b:73:48:
32:f9:2b:c9:6f:76:1e:3b:6f:7c:52:b8:d2:73:e4:cf:8c:d2:
68:a9:6d:55:45:bd:9f:ec:82:62:cc:15:b6:00:77:73:f7:4c:
4e:0a:50:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:33:58 2025 by rpki-client