Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: pGO9qdO/O3JB2xwTOlVsGyS5aWMA8ypVeVLsIfOcdtI=
Subject key identifier: 7E:88:B0:08:3E:19:AA:E1:70:59:F3:FE:43:A2:41:EA:AE:3D:CA:3D
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 0197B7B2E685ACC1F2441E28BC92EA55A4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 02A9
Signing time: Sat 28 Jun 2025 18:00:44 +0000
Manifest this update: Sat 28 Jun 2025 18:00:44 +0000
Manifest next update: Sun 29 Jun 2025 18:00:44 +0000
Files and hashes: 1: B5665HYy6kSNy90OpMzSYkfYZ78.roa (hash: l3LMbVnBNYo1auwulw02upGn169zVSqtpPpAH0JkHoI=)
2: BhseQy6cfY2KxD85qSiLzXh-5UM.roa (hash: 0YvZXzvsO+BZgmZ0JpcK1I5V3fjP6y+JiPN3ak5ChGQ=)
3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: wO/5veVvxAr32s7k4xobZMmp6WpCDi54Bq/qM1bbxKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e6:85:ac:c1:f2:44:1e:28:bc:92:ea:55:a4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Jun 28 18:00:44 2025 GMT
Not After : Jun 29 18:00:44 2025 GMT
Subject: CN=7e88b0083e19aae17059f3fe43a241eaae3dca3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:5b:06:07:48:03:86:74:cc:f4:c9:7a:65:
a8:76:a1:1b:cd:57:c4:80:c3:08:db:ec:f9:ce:36:
83:71:29:2c:09:3d:ad:c5:a6:cc:94:c1:10:a4:25:
f8:1b:88:78:76:06:d4:db:ec:1f:ed:ca:59:b6:ef:
57:e9:14:ee:ac:f8:bc:d1:30:60:15:9f:5e:ad:82:
3a:d5:c2:26:3e:fc:ae:c9:98:d2:96:83:23:28:05:
63:7a:c0:d1:d0:99:84:9c:1c:3a:cc:6c:1f:73:20:
d7:41:92:16:31:a6:01:81:d6:a5:03:2b:70:64:b7:
91:05:bb:02:74:10:14:60:d1:26:24:f5:b7:90:13:
07:5a:ad:91:67:5c:20:10:77:d7:97:aa:77:0e:e4:
85:ec:0f:99:b6:68:5a:49:e6:bb:08:a6:81:21:cb:
10:2d:8f:1f:43:c5:a7:f5:da:2d:e7:01:a7:63:e2:
91:27:e6:88:6d:70:f9:d8:2e:13:35:2d:4a:81:71:
68:99:65:e3:15:cc:cb:12:78:03:7e:6c:60:3d:22:
f3:f8:2d:cf:4e:7f:35:3e:5c:dd:61:32:6b:c3:b3:
bb:43:7b:9a:7b:04:b2:f0:e1:56:a3:c5:c6:e8:a4:
a8:23:2c:57:8d:e3:8b:52:6a:6f:bf:59:1e:1b:ac:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:88:B0:08:3E:19:AA:E1:70:59:F3:FE:43:A2:41:EA:AE:3D:CA:3D
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:12:eb:fd:eb:68:f0:11:5d:59:8d:7d:e9:e9:b9:92:23:8e:
4c:de:a2:d3:9a:ef:e2:6c:2a:38:67:6b:d5:ab:9c:92:c1:66:
e5:0c:89:ed:77:25:1a:16:c3:36:13:9a:01:25:57:b4:95:aa:
e5:68:81:a7:23:04:5a:7d:e7:39:52:45:ba:b2:84:a1:09:84:
06:72:3b:30:aa:11:55:e0:69:30:1e:34:77:c9:95:f6:96:db:
80:11:03:f3:30:6d:44:7a:0f:7b:32:f5:18:47:4e:b8:8b:bf:
8d:88:4b:96:02:68:75:86:75:97:b8:62:9a:2a:39:5c:f0:d0:
46:41:1f:fd:f2:a6:3d:ef:f9:37:f7:ff:e6:69:20:bc:6a:c4:
2e:74:7c:bb:ca:b0:fb:5e:0e:a7:84:49:c0:4b:0f:40:3e:f9:
67:1d:62:97:39:99:7c:01:18:70:9a:6d:c6:d4:83:2f:c2:62:
a4:b7:61:96:2d:73:7c:77:b1:36:aa:a7:6f:c3:41:18:fc:0d:
11:e6:ab:dd:84:28:ef:1d:61:6d:a2:ab:9f:fe:de:b4:22:ed:
45:7d:59:c0:69:b9:ac:77:40:1e:79:87:11:08:d6:b1:d0:a9:
90:53:93:6b:ef:1b:99:e8:a6:4a:a4:41:9c:fd:43:53:ce:66:
e3:56:48:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:16:26 2025 by rpki-client