Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
File: 00QDowsxN1mvliav2NPSOAX8yA4.mft (raw, json)
Hash identifier: uEzo7JDMBMrhzgcDG/6hxI07AVVmwOaVqsflCmV4ds0=
Subject key identifier: E2:AB:45:55:89:8F:5F:E6:2A:5C:BF:B6:A9:3A:A7:7A:7D:63:AB:4A
Authority key identifier: D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
Certificate issuer: /CN=d34403a30b313759af9626afd8d3d23805fcc80e
Certificate serial: 0197B6A11AE4002993D905710CAF14FCFBB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
Manifest number: 1415
Signing time: Sat 28 Jun 2025 13:01:40 +0000
Manifest this update: Sat 28 Jun 2025 13:01:40 +0000
Manifest next update: Sun 29 Jun 2025 13:01:40 +0000
Files and hashes: 1: 00QDowsxN1mvliav2NPSOAX8yA4.crl (hash: l1tHzXjmhOtxaY9GE7Rq5NHFzlt7XkeYvuWrdpDNFRk=)
2: cVpmuHdAZzlijHGAjGSKkGw9RjA.roa (hash: qNHNU4vOIkFIe1aGqstJlXjPN0jdP5RduNW12cDiCyg=)
3: yay3nN2FWSrpjXKo77YZUaENbjA.roa (hash: 3dd/DLtrx7aUgl5CmfhFn/D7OtLGGdM5Nn2M37wMGvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:1a:e4:00:29:93:d9:05:71:0c:af:14:fc:fb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34403a30b313759af9626afd8d3d23805fcc80e
Validity
Not Before: Jun 28 13:01:40 2025 GMT
Not After : Jun 29 13:01:40 2025 GMT
Subject: CN=e2ab4555898f5fe62a5cbfb6a93aa77a7d63ab4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e1:e4:eb:e6:d0:20:2c:23:26:70:c1:05:31:
63:b8:4e:40:48:5e:0b:cf:7c:03:18:4a:3e:e4:5a:
5f:17:44:2c:8c:9c:e7:4a:2a:3a:e6:9c:e3:73:7f:
03:f8:91:37:81:2b:e3:3c:26:7a:ac:9f:46:df:4d:
53:34:b0:d3:f0:93:98:f8:6d:4f:29:81:e6:39:24:
2b:fc:2c:8d:72:42:1e:b4:1e:7c:e5:d1:0e:72:14:
19:9b:9e:84:d9:10:e5:8d:fa:93:54:6e:33:6b:16:
01:75:d0:04:63:e2:54:2f:d3:1c:46:66:2e:2a:bc:
df:fa:b8:3e:de:1a:43:a0:72:f0:13:55:d2:10:e9:
1c:5a:74:17:fb:61:55:6b:9a:26:24:10:d9:b1:a1:
c9:85:2e:c8:26:a1:ee:6f:2e:46:6d:4e:19:37:de:
1a:c2:bc:43:10:e3:08:0b:ba:80:e3:d4:6b:6a:60:
6f:2c:04:8c:4d:61:38:03:96:f6:72:ed:1c:94:d4:
7b:40:25:f4:ec:54:e6:1a:cb:24:5f:e3:21:04:57:
c7:97:9d:4d:b6:7e:0b:7a:68:13:b9:96:57:ce:20:
16:7f:d8:d9:d6:28:bc:26:6b:00:54:7c:8a:99:5f:
12:91:e8:8e:4b:84:44:24:ff:08:6f:a1:c6:9c:6a:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AB:45:55:89:8F:5F:E6:2A:5C:BF:B6:A9:3A:A7:7A:7D:63:AB:4A
X509v3 Authority Key Identifier:
keyid:D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d4:52:24:32:d0:5f:49:bc:73:67:6d:25:70:27:37:c6:f8:
1e:b6:9f:b0:0f:40:e0:6a:61:23:bf:bd:c4:d2:ad:ae:91:49:
1c:62:27:c4:63:66:1d:5a:09:6d:e5:cb:a8:05:ca:cd:51:f5:
5c:46:47:42:74:3f:dc:65:9d:49:d0:92:df:13:a5:cb:d0:47:
04:70:1e:40:c1:09:88:ee:c0:06:24:10:e5:30:2c:cd:a5:5a:
d3:34:93:10:f6:bd:78:32:3a:91:8a:4d:14:7a:5f:48:cc:9a:
c8:2a:4e:99:5d:61:e7:fc:dc:b2:bb:fa:2e:cb:5c:e4:92:99:
45:49:c2:42:da:34:d3:f1:d2:b1:30:92:b1:13:46:37:e4:49:
87:d0:cb:45:45:96:05:c0:60:3e:d8:b8:32:76:21:01:a8:b7:
de:1b:d0:79:a5:1c:46:7e:d1:ca:e0:6f:8a:6e:64:8a:db:e5:
57:ab:23:02:14:46:d8:d4:ee:bb:86:14:c1:9f:11:4c:74:2e:
ed:50:51:c6:0d:bb:4b:27:f6:32:4e:b0:9e:81:ef:d3:b1:a0:
10:c6:e3:a5:86:9f:07:6f:ce:6e:fe:a7:d2:78:c8:cb:db:98:
69:d0:a1:51:59:52:75:4a:53:1f:5b:cd:b8:bf:83:75:c1:b6:
85:0a:bd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:45 2025 by rpki-client