Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File: qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier: s/iXPyG/KXg6P0S5I5My8hOSid0/mOLMormBA59wnVY=
Subject key identifier: 44:B9:EC:86:77:68:3F:78:F8:21:E7:F9:42:0A:44:D1:44:BD:BE:D7
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial: 0197C2DBCB28B5351E507907B7CCEB6F7B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number: 0AD8
Signing time: Mon 30 Jun 2025 22:01:13 +0000
Manifest this update: Mon 30 Jun 2025 22:01:13 +0000
Manifest next update: Tue 01 Jul 2025 22:01:13 +0000
Files and hashes: 1: 0mOwovSQfaOTpOjMePlA1vJyx3o.roa (hash: UKn/uBWWad1ow9KJDqJ57gBdSqtGNkm8IvDuZQii3FA=)
2: Rb-9REf4Ku4-CgLC6REjl5LjwmQ.roa (hash: cTHupzsbPAMMKa56v6BN9R2pDgzgt3AMXO4LKaMqhQw=)
3: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: 6/+oXiYQa8kfJomHoqxCvZKlbM26dzlMvsC+JuG3+WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:db:cb:28:b5:35:1e:50:79:07:b7:cc:eb:6f:7b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Validity
Not Before: Jun 30 22:01:13 2025 GMT
Not After : Jul 1 22:01:13 2025 GMT
Subject: CN=44b9ec8677683f78f821e7f9420a44d144bdbed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cc:87:5b:05:88:ed:4a:7c:fc:7d:37:47:ae:
b8:99:05:6b:c0:32:84:d8:f2:14:e3:fb:01:7c:5e:
79:d5:20:8a:5f:17:15:a2:a8:3c:3b:de:ef:e8:42:
d4:9e:a5:07:1d:d9:01:38:8a:27:ab:81:d1:60:85:
07:71:f4:f9:26:18:5f:40:10:f1:e9:f0:2d:b8:53:
1b:f7:be:a8:2d:ff:4b:32:bf:c3:94:13:e6:b3:79:
d4:b8:71:ce:05:d8:4c:fb:4b:3d:5c:87:f3:4f:c6:
96:da:92:b3:92:80:c6:d0:41:1a:67:35:4a:a4:07:
94:70:c1:c9:92:60:eb:15:ad:77:df:dd:18:4f:a5:
65:5c:be:1d:cd:d2:7c:8a:75:41:29:26:24:07:14:
04:c5:c2:1e:45:3b:50:d6:bd:a1:c2:c5:c8:d8:fd:
aa:cc:b9:74:b8:c6:97:a9:9f:e2:b0:3d:00:35:8c:
24:09:ec:9a:92:07:ba:b8:25:c8:e4:9a:a0:37:18:
d8:2b:93:26:2c:70:5b:69:57:1a:1f:e8:b1:8e:8e:
50:a9:00:27:9c:10:9e:f4:e8:ee:ba:e3:98:08:14:
19:3d:5f:b8:9d:ae:6f:27:a2:83:14:ff:2a:f4:2a:
a0:fc:27:72:52:7b:bc:16:74:67:d9:a5:b7:23:61:
cb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B9:EC:86:77:68:3F:78:F8:21:E7:F9:42:0A:44:D1:44:BD:BE:D7
X509v3 Authority Key Identifier:
keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:19:d6:e6:7d:5c:f8:99:52:7b:08:ff:5f:66:e1:94:6b:5a:
67:a0:4b:07:67:17:bf:30:a4:e1:08:23:6c:42:78:2c:27:ee:
d4:de:ea:25:a3:fd:0b:19:01:24:d8:01:2c:ff:fd:04:ac:4c:
11:ce:d8:3a:b7:d0:74:95:b5:36:06:ea:e8:8a:5e:04:3f:d2:
eb:fc:96:f5:3e:e4:70:e5:c9:db:3f:38:01:12:90:08:f9:6c:
5d:08:b8:d3:33:b8:c8:5c:f5:55:b4:0c:c8:f0:c2:0b:ca:1d:
93:a2:68:39:d5:05:f7:25:3d:b8:24:b7:74:9b:d5:01:f8:77:
57:1a:37:f9:db:3e:f2:8e:6f:4d:01:ff:c2:55:46:0f:5a:92:
c5:72:81:19:cb:fc:95:48:81:5c:29:4a:94:52:42:6f:0a:6b:
fc:fb:25:25:4d:8c:76:23:cd:86:fa:70:48:90:c5:57:0b:33:
26:c1:29:ed:bd:6f:5d:6d:6f:7b:02:89:3b:a8:26:31:f2:dc:
51:9f:63:ff:12:cd:77:34:cb:c9:11:bc:3c:e3:f3:83:ad:28:
82:33:ec:8e:8e:38:b6:a4:ee:b3:6b:de:bb:35:fb:18:56:d8:
ff:56:f0:03:2d:33:9d:39:1c:a8:94:b9:7d:c8:17:59:47:da:
a6:75:62:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:34:27 2025 by rpki-client