Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
File: 1QliA1xelRATygZwylaeefjWPBU.mft (raw, json)
Hash identifier: WYRHm/bgavCaU75b2MCfJyL0stEaHBSeKsrwG1cshOc=
Subject key identifier: D3:5C:DF:58:B4:AF:08:C0:4B:67:E3:C6:59:35:1B:8E:82:5A:FB:DD
Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15
Certificate serial: 0197B74589A06DA0216382646718909C037F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
Manifest number: 1081
Signing time: Sat 28 Jun 2025 16:01:17 +0000
Manifest this update: Sat 28 Jun 2025 16:01:17 +0000
Manifest next update: Sun 29 Jun 2025 16:01:17 +0000
Files and hashes: 1: 1QliA1xelRATygZwylaeefjWPBU.crl (hash: 81SxuwIq5qUGhwYq8ftwlJaE8xaTrKQ73SzJDTwrcSc=)
2: QgExJsLM6ckB_bwe9qRnk4o5HhA.roa (hash: P6xf+cz+/i4pkIjOYnliYy5pmyQWXuehaFAXXoyCR5k=)
3: fD4OezRM4UrasrKKJ10uGn5_Qug.roa (hash: +HiHjgUZa5Xei+THiDncnTXYzPCxqbbX0ahPYM7QsZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:89:a0:6d:a0:21:63:82:64:67:18:90:9c:03:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15
Validity
Not Before: Jun 28 16:01:17 2025 GMT
Not After : Jun 29 16:01:17 2025 GMT
Subject: CN=d35cdf58b4af08c04b67e3c659351b8e825afbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:59:8d:b6:d3:23:73:9a:c7:ce:19:76:0c:
04:b6:96:a9:b6:f7:8d:d4:28:d9:a0:96:36:c4:4e:
17:44:4a:3c:01:77:70:be:6e:d5:8a:df:c9:6c:b3:
a4:6c:d4:e4:a1:d1:e3:ca:b8:92:86:b6:9b:3a:6f:
de:8b:27:06:49:12:99:6c:b4:4d:bb:76:cb:b2:e7:
56:ce:20:6f:57:ce:a7:ae:aa:53:26:57:bc:42:fd:
f9:5a:99:59:83:f9:1a:48:8a:42:fc:48:0e:dc:0c:
3e:95:18:70:9f:3a:7d:48:08:76:41:4d:a8:de:76:
29:79:7d:39:73:35:56:6f:fd:cd:a5:c6:33:8b:f6:
91:c6:67:1b:81:ec:81:b3:51:2b:94:e6:2a:f5:e3:
9f:87:73:fd:30:29:86:da:f2:1b:ba:a9:f8:40:0b:
2d:c3:6d:f6:eb:1e:81:d6:8a:05:74:a7:f3:cc:d1:
1e:38:f0:6e:92:6e:91:9d:83:d5:b3:f4:f7:3d:75:
36:f4:24:07:8b:55:19:25:a4:e2:26:59:ca:67:0d:
26:61:87:46:78:54:73:5d:ba:ed:22:13:c0:09:70:
77:f3:78:f2:25:15:99:9f:7d:9b:db:21:96:4d:59:
20:cb:c8:af:7d:a5:fb:59:0b:90:7b:fa:60:aa:f0:
9a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5C:DF:58:B4:AF:08:C0:4B:67:E3:C6:59:35:1B:8E:82:5A:FB:DD
X509v3 Authority Key Identifier:
keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:68:7a:d9:88:55:30:fa:4e:29:48:fb:7c:9e:da:ab:9e:c9:
e6:2e:2d:5f:e3:d8:8f:15:d2:e6:04:10:6f:4a:69:65:12:61:
a5:4a:b4:aa:5f:40:fb:43:4d:50:cb:f6:0e:2b:52:1b:49:1e:
ce:56:96:38:56:c7:f9:eb:cf:35:af:7f:0c:0d:89:8f:27:a2:
4b:91:55:6f:d9:43:51:73:8f:a2:55:1a:6f:fa:c1:04:f6:85:
a8:3e:f9:4a:6e:b0:6b:4d:dc:2f:bc:f2:68:2b:24:11:6a:18:
80:78:f0:91:5d:85:f3:5d:95:f1:9a:5b:96:41:55:70:2d:0f:
79:38:df:65:53:96:8b:67:49:7c:33:4c:ac:7a:d4:13:de:d8:
a5:f5:8e:fa:f3:41:25:f9:a7:42:b5:1d:38:e1:ce:80:13:68:
1c:97:d4:47:cb:2f:10:e7:05:46:5e:ee:3e:9b:55:27:f5:c6:
b0:ad:9d:af:21:17:db:83:5e:7f:c9:30:3b:50:e6:72:ea:ed:
97:53:9f:fb:ff:4a:2d:5a:c4:53:a9:c8:55:65:84:0c:c5:3f:
c1:1a:ce:dd:78:fe:14:dd:ef:f6:01:b7:56:7a:15:99:8c:94:
8b:57:f0:36:69:e9:2e:df:43:0e:10:33:40:62:cb:cf:a2:f5:
89:c3:a5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:09 2025 by rpki-client