Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
File: MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft (raw, json)
Hash identifier: ftifDK+lPNm1kcDGWdEJLpuytfuxiyj/pi+f3hFZJEQ=
Subject key identifier: AB:4A:D0:CB:42:10:67:53:12:9F:0B:A2:17:43:06:CD:44:31:19:14
Authority key identifier: 32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
Certificate issuer: /CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Certificate serial: 0197B7451D9D3C36DDB5B394D9118013679C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
Manifest number: 0D12
Signing time: Sat 28 Jun 2025 16:00:49 +0000
Manifest this update: Sat 28 Jun 2025 16:00:49 +0000
Manifest next update: Sun 29 Jun 2025 16:00:49 +0000
Files and hashes: 1: MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl (hash: lJj0i9dLHTDDN5iK4iPGMl2nsfYXQkc4hfOTpkt2bto=)
2: n7xOAF9JLEuxF4PJQhQbDSl7UJE.roa (hash: aqnlDGIUWDjeSw56rbOxl68/tZN2XXXLT/oEGZEp9F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1d:9d:3c:36:dd:b5:b3:94:d9:11:80:13:67:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Validity
Not Before: Jun 28 16:00:49 2025 GMT
Not After : Jun 29 16:00:49 2025 GMT
Subject: CN=ab4ad0cb42106753129f0ba2174306cd44311914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:31:6f:5e:fa:ac:c9:5e:42:31:03:72:49:
64:3b:7f:b5:21:06:19:55:32:43:8e:95:5b:08:d9:
95:33:55:4a:3a:ca:3e:94:28:e4:68:7a:ea:80:68:
56:e7:39:6f:a2:ef:5e:13:4e:d1:c3:d6:c8:ed:54:
e7:66:7d:1e:5a:17:f4:78:c5:c8:50:4b:e6:dc:a2:
79:06:06:6d:f9:23:f6:c7:dc:b3:24:77:a9:65:63:
3e:02:c6:93:97:89:09:b4:87:f2:b7:02:cf:53:fa:
71:1c:df:51:a8:d4:4d:3a:74:67:2e:b5:9b:ed:92:
3a:a4:c5:de:20:45:f9:96:a9:25:24:28:1f:85:e9:
f2:71:6d:dc:17:09:ce:0d:c3:fd:e9:48:48:3e:50:
f8:ca:3a:a1:91:d4:bf:d1:c6:0a:34:ca:85:77:5e:
c2:82:d1:eb:7e:b8:fa:ae:e3:16:81:f1:c1:76:8d:
b1:82:4e:2b:22:6c:1b:d8:c7:21:92:1d:67:b5:fc:
c6:67:0a:48:17:54:04:e2:6a:ac:ec:67:c7:b3:35:
3f:2a:77:11:d1:26:fa:c4:94:3d:41:74:39:6f:d8:
ce:69:49:34:7e:50:63:20:32:c3:72:83:35:76:00:
7c:5a:bb:34:04:5d:4f:10:85:34:d5:42:15:6b:28:
a6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4A:D0:CB:42:10:67:53:12:9F:0B:A2:17:43:06:CD:44:31:19:14
X509v3 Authority Key Identifier:
keyid:32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:bd:f4:ea:ad:08:f8:93:74:48:bd:15:b4:f1:6d:79:c8:34:
ee:d6:b2:12:c3:0f:bb:2d:f7:1a:6d:01:7d:54:bf:55:ef:e3:
98:73:bc:69:c7:95:f6:04:29:fa:24:80:f2:d7:1e:e5:da:c8:
3f:83:6c:13:09:a6:53:8e:ff:b1:da:69:4c:1c:fe:eb:17:43:
c6:da:55:30:4a:a4:d8:0d:2c:86:13:2a:4f:32:b7:19:68:e6:
08:45:7d:fe:19:88:14:00:50:61:74:1e:bd:55:b1:2e:76:22:
04:82:0d:17:df:f1:23:a8:75:78:11:a1:1c:2f:ae:89:d9:dc:
1a:15:66:fe:89:8c:1b:18:27:b6:d2:0b:ae:60:70:54:9a:a0:
5f:b6:3d:b0:a9:a1:37:cb:08:e1:66:54:70:01:8b:ff:cf:a5:
6f:fa:5f:27:e1:86:b6:2a:1c:08:40:88:04:ff:4d:c3:f7:e5:
0d:99:13:e1:e7:57:9c:91:d6:f7:d2:9d:96:ff:78:da:e7:58:
69:af:53:74:bc:4f:bf:c4:b5:02:c4:83:65:30:36:7b:49:93:
d4:f5:05:48:13:7d:1e:ff:a8:16:f0:12:e1:f6:ed:f1:73:21:
58:34:33:a8:80:30:ff:ae:8e:11:45:46:d3:4b:67:cf:ed:28:
a1:20:c7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:46 2025 by rpki-client