Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
File: Q0XQdzx63gjUSBnjthG9KXo5idM.mft (raw, json)
Hash identifier: LRK05p3aN/HbADFB4KlQcQaIa/sKnLbJnSMbSGlgTEQ=
Subject key identifier: 53:C5:F4:D1:20:1E:E1:04:6E:FC:12:16:31:8F:F6:6C:A3:88:20:97
Authority key identifier: 43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
Certificate issuer: /CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Certificate serial: 0197B6D79D3ED00D72CFA48B0AF2A55BB5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
Manifest number: 12CE
Signing time: Sat 28 Jun 2025 14:01:13 +0000
Manifest this update: Sat 28 Jun 2025 14:01:13 +0000
Manifest next update: Sun 29 Jun 2025 14:01:13 +0000
Files and hashes: 1: D7IbZMa3P-hRRIAm78DqK4wNZ34.roa (hash: 3Rvd3MmyWPzVOpIFhMlT5LNPsKGSgahML9FUxKiCMwI=)
2: O7r63uTdFaICg1i90uf5cyEl-h4.roa (hash: Efs34tr8Lub/IHxUGCrqJn6lA9J8HyHyjcZJAIyTZbQ=)
3: Q0XQdzx63gjUSBnjthG9KXo5idM.crl (hash: 1CGq9JTi504sh5N0xiwvvRmRz+oDZ5Zrghgn1aYFvaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:9d:3e:d0:0d:72:cf:a4:8b:0a:f2:a5:5b:b5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Validity
Not Before: Jun 28 14:01:13 2025 GMT
Not After : Jun 29 14:01:13 2025 GMT
Subject: CN=53c5f4d1201ee1046efc1216318ff66ca3882097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1b:46:24:38:81:a4:49:2a:c6:94:c7:5a:1a:
5a:5d:84:f6:26:b9:90:54:13:d0:4b:ee:8a:c3:b8:
e8:e6:dd:2c:22:e0:f1:8c:af:6d:fb:a9:24:51:80:
69:13:db:a5:5b:d2:a9:e5:d6:72:08:d5:13:7b:ec:
da:15:db:a9:23:26:9b:4c:ca:56:89:25:5c:c2:b4:
eb:23:7c:0b:fb:eb:f1:3d:f8:d9:e4:c8:ea:e4:73:
1c:cc:26:be:b4:b2:5b:97:6e:56:6a:c4:b6:ed:ea:
b7:98:18:27:d6:51:83:bd:89:0b:24:53:03:18:78:
16:07:1b:7f:a3:4e:2c:a0:3f:f5:ba:74:60:62:96:
18:53:fa:1a:ec:3b:a9:04:01:b6:55:b5:f5:fa:c4:
b0:34:7b:33:3c:5c:29:e0:a6:a4:c3:b9:08:53:63:
a2:7d:3e:14:4b:6c:80:57:9f:64:9d:7f:5e:1d:80:
ec:75:cf:9c:cb:33:83:bc:40:19:e5:d1:76:87:0d:
44:87:53:79:57:ef:5c:31:c1:e3:e3:04:4f:5f:de:
7d:75:ab:18:75:7d:bc:c0:64:60:0a:cb:8c:0d:de:
1c:e5:28:77:f0:96:3a:d0:0f:60:79:4d:cb:3f:5a:
cc:2c:9b:04:68:e8:4a:87:fb:93:11:c7:e4:d4:37:
d6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C5:F4:D1:20:1E:E1:04:6E:FC:12:16:31:8F:F6:6C:A3:88:20:97
X509v3 Authority Key Identifier:
keyid:43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7e:6e:c7:22:71:6d:80:dd:02:13:66:c6:d5:e7:9a:04:06:
75:90:68:57:3c:9a:31:35:24:a6:f2:d5:06:f7:07:64:20:e2:
a1:81:0b:c5:af:9a:dc:1b:e3:6d:20:50:f9:d7:16:15:03:49:
a4:d8:ee:73:8d:d7:1d:5f:ba:33:6c:6d:be:b6:e4:32:d2:59:
31:e9:22:ef:4f:eb:0c:38:59:a0:8b:87:ee:16:23:0b:77:d7:
05:3b:1a:47:cc:33:a7:9b:58:c0:c6:a7:d9:ee:0a:9d:81:95:
e3:2d:f1:79:78:bb:36:60:0d:58:c5:35:1d:c3:b0:27:04:ef:
ad:8e:c4:a4:97:bc:47:e7:0a:a2:ef:42:20:dd:9e:53:d2:3e:
a7:91:79:4d:09:df:93:cb:3d:45:ef:35:34:29:a5:07:99:85:
5e:a0:29:1b:23:db:e6:eb:12:04:b3:04:8c:eb:5a:1d:e3:93:
bb:5f:f9:ac:76:4f:62:43:a8:53:76:4c:38:7f:a4:8d:f4:93:
9b:3e:04:97:05:f1:98:0a:60:dc:a2:63:cb:48:70:e8:51:5e:
50:54:59:1c:b8:f7:b2:2c:a7:74:15:c8:6d:1a:4e:8f:d1:c0:
e0:21:6a:8a:13:05:97:3e:16:1a:d5:3a:94:35:d7:6b:f9:1d:
d4:f3:9c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:06 2025 by rpki-client