Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
File: qXjDZVxaYJcS51UQDZiJKuHI5es.mft (raw, json)
Hash identifier: E8l/YFbQj7tcWXS1GH/LefgXSce/CuIQE+NviEaQDl0=
Subject key identifier: 01:EC:EE:44:08:F9:21:B5:68:CA:71:EE:74:10:48:9B:0E:A3:C0:87
Authority key identifier: A9:78:C3:65:5C:5A:60:97:12:E7:55:10:0D:98:89:2A:E1:C8:E5:EB
Certificate issuer: /CN=a978c3655c5a609712e755100d98892ae1c8e5eb
Certificate serial: 0197B9D8D62354B99BFBF0D053A349A1C3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
Manifest number: 15B5
Signing time: Sun 29 Jun 2025 04:01:24 +0000
Manifest this update: Sun 29 Jun 2025 04:01:24 +0000
Manifest next update: Mon 30 Jun 2025 04:01:24 +0000
Files and hashes: 1: Yumm02n0U4zsJjWwtlYyB2Z-w4U.roa (hash: AJmjRPnoBgkPh5HzaY6seqwxdSiWYHbug0JOYxi/OM8=)
2: qXjDZVxaYJcS51UQDZiJKuHI5es.crl (hash: 3lcNGpgFhJEgOSrd9CIKWuU5+ypb1nS0N/GZZmZsk9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:d6:23:54:b9:9b:fb:f0:d0:53:a3:49:a1:c3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a978c3655c5a609712e755100d98892ae1c8e5eb
Validity
Not Before: Jun 29 04:01:24 2025 GMT
Not After : Jun 30 04:01:24 2025 GMT
Subject: CN=01ecee4408f921b568ca71ee7410489b0ea3c087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:c9:2e:8c:ad:35:ad:ee:92:4c:ca:fa:dd:
db:fe:b8:09:33:9f:6a:53:72:aa:b4:cc:35:49:95:
da:a6:58:14:98:4f:11:20:14:b4:fe:db:dd:3e:c5:
eb:4e:ed:02:09:14:99:f5:21:18:f7:18:67:01:d0:
b1:e5:fb:c3:6a:1c:36:77:83:e0:fa:db:8e:a2:03:
27:e1:bb:98:79:29:b4:a1:8d:d9:2c:85:a2:03:e5:
a1:e0:d0:1a:64:a0:e1:b2:58:9b:bf:8c:a8:33:6e:
95:98:56:af:dd:4b:50:33:b4:f9:97:5e:2b:da:1a:
79:c0:6f:1b:7b:20:b8:7b:23:7c:28:74:80:c5:6d:
e7:8a:29:e5:09:6d:6b:05:ac:0e:1e:25:8f:77:e8:
ea:00:36:e6:a8:49:09:5e:a4:77:8d:e0:e4:56:3b:
65:c4:b4:f7:0a:db:00:48:68:13:a5:6b:c4:43:44:
34:c6:a0:ce:1a:ff:e6:22:a4:ae:a3:cb:67:bc:11:
08:da:fb:e9:42:fc:e1:fc:e4:a0:33:e3:2b:09:43:
0a:7d:b5:88:06:e0:f9:9c:1e:cc:88:73:c7:ca:74:
75:9f:e7:b9:bd:32:13:18:d9:b8:e1:5b:5d:c1:7c:
9a:0e:b6:e1:de:aa:8a:2d:8d:e0:72:12:b5:1b:bd:
02:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EC:EE:44:08:F9:21:B5:68:CA:71:EE:74:10:48:9B:0E:A3:C0:87
X509v3 Authority Key Identifier:
keyid:A9:78:C3:65:5C:5A:60:97:12:E7:55:10:0D:98:89:2A:E1:C8:E5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6a:11:01:4c:af:5b:d4:67:82:3a:ef:a9:06:a2:53:f4:6b:
e9:7f:90:51:e0:05:1e:60:9f:66:85:10:f9:b5:a1:72:74:e2:
41:af:10:6f:e8:f9:20:d4:7a:50:24:f6:4f:61:e0:29:c4:26:
9a:e9:4b:45:ec:69:65:ff:80:d1:d1:d6:d1:cd:d1:20:fb:ec:
c3:92:36:ea:d6:64:90:76:39:d1:f2:99:dd:75:61:78:9b:a3:
05:21:96:d5:8a:62:86:7a:21:df:43:36:7c:8d:7f:54:77:27:
af:2a:50:f2:27:47:10:7c:74:25:47:66:89:f4:54:9b:9b:56:
a7:d7:e0:18:50:a7:eb:ae:fd:6b:3e:08:59:76:56:89:7d:ca:
7b:5a:fe:1d:22:e9:84:2c:d9:8f:ef:7f:75:03:9c:df:79:82:
65:51:ac:f2:33:3a:2f:b2:c3:5e:ea:55:0a:58:b1:d7:01:d9:
a7:e6:d4:38:39:8d:37:e7:1e:f7:44:83:c1:10:de:b5:f5:44:
15:a1:39:d0:98:97:b2:7b:5f:e7:5d:21:24:8d:bc:ce:e6:3d:
1f:24:bb:24:1c:9f:58:c5:31:20:71:95:18:bb:00:7d:51:fe:
fb:8f:4e:89:52:9a:cb:8e:c4:fc:f0:8a:03:b3:54:e4:f1:f8:
f9:ed:11:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:27:33 2025 by rpki-client