Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: U9ZXyQuGYQKzKz1z1dl5vdO/MUnxQszGHny04T97icg=
Subject key identifier: DE:B2:18:17:7D:61:55:D8:B5:27:4B:77:EE:94:3E:40:DB:4A:3D:7E
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 0197B88F1FA10483D9F4E6C286DCDE5551B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 0BE8
Signing time: Sat 28 Jun 2025 22:01:16 +0000
Manifest this update: Sat 28 Jun 2025 22:01:16 +0000
Manifest next update: Sun 29 Jun 2025 22:01:16 +0000
Files and hashes: 1: 1HhNu8sG2l0hcVfkxopBJPM0AJA.roa (hash: Qt4OCtipxtwIwXuC2KjZFTe3zgqaRe5IKbtJYrVBUxM=)
2: hJbHpAPOiNkNScuafVbq5FNZ7D4.roa (hash: /FjzkSwns/04Wx3/dyzKMt8M5RMeRjhJm2fdzZxup8w=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: A32d6yMoCYJ1e/5ogaJ6csD/UZGVaVv7rufEvVKlGA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:1f:a1:04:83:d9:f4:e6:c2:86:dc:de:55:51:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Jun 28 22:01:16 2025 GMT
Not After : Jun 29 22:01:16 2025 GMT
Subject: CN=deb218177d6155d8b5274b77ee943e40db4a3d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e9:ef:d7:d0:5a:30:00:ac:17:59:ba:e1:b9:
9d:75:b1:ce:78:34:85:a4:7a:dc:91:73:21:ab:e0:
fa:9e:57:d2:8b:e7:bc:a5:cd:aa:38:02:4c:a6:81:
cc:c6:64:aa:a9:7e:a6:51:d4:26:09:6c:8c:33:07:
0c:88:2e:85:e3:f6:6f:40:c9:bc:9c:78:92:90:cd:
6a:0b:a3:0c:05:28:51:15:fe:ad:41:a8:d6:5e:19:
36:4b:6f:2a:51:96:6d:2f:6d:df:d4:35:e9:2f:a0:
0a:61:6d:80:41:09:98:67:14:48:de:c6:d2:59:24:
03:90:d9:54:e8:53:f1:e5:3d:f0:15:7b:6f:f3:e4:
38:11:c6:fa:e6:8f:12:92:83:14:ed:a9:e8:9e:1c:
5b:38:22:3a:3f:19:ac:72:8c:c1:64:6e:44:a7:f4:
2b:8b:28:2e:1c:f1:da:ae:0d:4d:77:ce:b3:d5:92:
44:8d:b3:1b:34:ff:eb:0e:2a:6f:09:8c:51:f1:45:
23:27:82:4a:f9:2c:86:6c:08:0f:18:0d:29:e7:24:
e3:3b:b1:3e:5b:89:eb:51:0f:0e:f2:a3:cc:36:64:
d6:5f:bb:12:cc:47:e6:83:c7:fd:d9:0a:84:42:e1:
38:58:f6:55:5f:8b:5b:04:f8:11:4d:99:1b:90:71:
db:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B2:18:17:7D:61:55:D8:B5:27:4B:77:EE:94:3E:40:DB:4A:3D:7E
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1b:b7:e8:0b:8b:f1:e3:c5:ba:f4:1f:67:f8:04:63:d7:7a:
ca:e8:86:60:0f:06:f7:53:ce:59:90:8c:ab:41:0d:66:6a:be:
b9:24:ab:cc:00:b2:d9:46:61:0b:dd:20:31:9e:2f:fd:4e:88:
fc:b2:f3:99:6e:8a:ca:20:4d:81:77:d0:2d:ff:ec:f4:c3:bd:
1f:94:ac:87:bd:2b:be:b6:73:64:02:6b:eb:21:87:cc:c7:c1:
2d:ed:41:47:b9:14:c1:a2:ee:eb:a7:19:df:6f:1f:39:41:a4:
83:09:ae:51:79:b8:79:df:37:1f:5f:0e:96:ae:9d:a0:b7:44:
e4:38:e0:82:d4:8b:15:d4:1c:bc:80:33:c2:14:53:f7:43:3e:
a5:4b:b4:13:2a:64:07:96:82:b8:0a:02:f1:85:e9:7e:62:2c:
ef:2f:d1:2c:f5:44:5d:89:74:9a:b9:b7:07:6f:02:61:9c:a4:
6f:1c:8a:29:72:eb:4f:eb:54:ec:da:48:0e:c9:68:7f:6f:9f:
5a:96:33:70:01:8c:e3:36:17:59:fd:01:e7:bf:a6:6d:e3:ed:
07:d7:da:94:31:49:24:c3:ff:9d:b6:7b:a7:1a:f7:75:c5:8b:
95:da:f6:38:ea:fc:ea:f7:27:0f:4d:91:b8:72:d8:89:58:dc:
ae:01:ee:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:06:02 2025 by rpki-client