Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
File: cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft (raw, json)
Hash identifier: xJXzyYqBM1B9p8KgYaJQCja6+ws+n5qg4rdSaTDDRTM=
Subject key identifier: 4A:88:E5:AF:34:70:A8:F5:43:87:4E:02:42:A3:4D:88:B6:E0:12:BD
Authority key identifier: 71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
Certificate issuer: /CN=710068d5bf1bffd79174e37501bfa17f917b313d
Certificate serial: 0197B77C3A47B7CF88F8A8C65273E1F073E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
Manifest number: 0DE2
Signing time: Sat 28 Jun 2025 17:01:01 +0000
Manifest this update: Sat 28 Jun 2025 17:01:01 +0000
Manifest next update: Sun 29 Jun 2025 17:01:01 +0000
Files and hashes: 1: cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl (hash: 7w84avqozRaf7l1L3/HIcNEDsPenGxll8bKilDVakdk=)
2: q8epYF3ITJmcTk7KzU9-ybVTiI8.roa (hash: ynf0gvvVwgf87WpAamEBJq2+/MA1NpfszumEHpnlxfU=)
3: uDM7F8LY5WouCO7a0kMUmT3QPVg.roa (hash: 2/WNOkYZ2Hjr/CS7x76w5+dnVkOCkqa3HT6PAApsbQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:3a:47:b7:cf:88:f8:a8:c6:52:73:e1:f0:73:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710068d5bf1bffd79174e37501bfa17f917b313d
Validity
Not Before: Jun 28 17:01:01 2025 GMT
Not After : Jun 29 17:01:01 2025 GMT
Subject: CN=4a88e5af3470a8f543874e0242a34d88b6e012bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:31:2c:84:c7:95:61:ba:19:71:97:b9:5d:b4:
a3:20:78:9b:84:9b:41:14:99:cc:c4:23:91:e8:de:
0a:7c:a6:38:1b:aa:3e:9d:73:9f:65:c3:9b:f9:9e:
9f:ad:c8:17:3a:b6:43:f2:ec:a5:d3:35:f4:8c:e7:
7c:da:e0:2f:05:43:58:86:e7:31:bb:3c:38:24:7b:
45:e5:e1:af:1c:34:ab:05:5b:c7:3b:86:bb:3b:59:
17:c1:49:5d:15:ef:e8:17:fb:3d:c9:5d:6c:c9:8c:
5a:51:da:b7:18:09:eb:00:7f:93:61:53:98:4d:4a:
3f:28:0a:b0:1c:2e:cd:0d:e1:13:f1:91:c8:04:f0:
87:73:db:24:6b:cb:19:82:e9:11:d8:e3:a8:4f:8f:
09:fa:2d:21:51:58:16:d6:84:22:80:77:b5:61:6b:
03:0b:02:ca:b5:88:cf:66:62:87:48:49:e4:2d:c5:
9e:f2:69:f8:a7:bc:47:6c:bc:1d:a5:04:32:01:0f:
01:f8:5c:aa:6b:33:ea:33:45:95:cc:a5:af:4f:a0:
3a:02:bc:df:e9:8b:c7:82:c0:91:32:0d:a8:cd:9a:
3e:56:e4:59:28:d9:13:29:b3:a8:90:ee:0d:4a:5f:
5f:da:bd:36:bd:fa:4b:82:27:d3:67:0b:1c:cc:4b:
b1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:88:E5:AF:34:70:A8:F5:43:87:4E:02:42:A3:4D:88:B6:E0:12:BD
X509v3 Authority Key Identifier:
keyid:71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2a:25:c6:55:3e:ec:e8:aa:99:6d:e0:c3:12:8d:af:e6:5d:
9a:63:49:7a:e0:61:7e:7f:a3:98:07:eb:ed:47:8a:a8:a8:0e:
88:8a:c0:45:f5:f3:f5:2d:b5:80:b6:fe:90:9f:b5:bb:56:2f:
98:d0:80:a9:06:bc:82:f4:24:e4:19:8e:00:ea:27:d9:6c:37:
18:c6:56:4a:92:92:a3:e6:0a:4b:f0:ef:bc:12:28:0d:6c:28:
82:9b:7d:bf:3b:ec:2c:af:18:9d:87:22:77:b8:17:6c:f8:7f:
15:75:e8:35:c9:a1:e8:d1:99:4c:9b:49:df:ad:13:2b:1a:da:
b8:65:5a:ab:ba:f2:41:76:81:19:c8:1a:16:ba:0a:14:21:2c:
82:8a:df:df:fa:87:5a:06:fc:c2:82:87:ac:f1:88:7a:10:18:
ab:59:17:ee:5b:5c:c0:d8:71:2f:22:a6:10:64:75:28:cc:b4:
c2:74:09:7b:11:f1:ab:85:e0:75:c5:15:8d:ce:a7:16:d3:b1:
b9:1f:4c:f3:3e:96:e1:45:26:04:27:ce:ee:da:eb:2c:9e:c7:
3b:8e:b2:57:32:7c:21:e8:17:69:11:a0:3e:72:c4:02:64:13:
89:41:bb:dc:3f:80:43:1d:48:82:4a:5c:44:e8:d3:cd:af:46:
0d:e0:47:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:43 2025 by rpki-client