Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json)
Hash identifier: os30di5id7xxuBltpuZWHWdDnRvLCXmPkWPNmXWi9NA=
Subject key identifier: 07:CC:81:D0:6F:D4:CB:FD:CE:B7:20:C4:87:41:47:C1:5A:49:BB:B9
Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Certificate serial: 0197B6A128735DE763B8E030377756544B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:44 +0000
Manifest this update: Sat 28 Jun 2025 13:01:44 +0000
Manifest next update: Sun 29 Jun 2025 13:01:44 +0000
Files and hashes: 1: dCfTqcxg62Lir67qVkgBChTuqA4.roa (hash: UBu+ymeFM9aQ8J18E3tvVpuPsYqEYn9P+xx2d6+/UxI=)
2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: PFqTOiJoYawTX/Ykgd7Nav+hSZvVBywpkrLazc9dld8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:28:73:5d:e7:63:b8:e0:30:37:77:56:54:4b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Validity
Not Before: Jun 28 13:01:44 2025 GMT
Not After : Jun 29 13:01:44 2025 GMT
Subject: CN=07cc81d06fd4cbfdceb720c4874147c15a49bbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5d:81:d5:22:67:9e:a2:6e:de:f5:05:ec:68:
72:03:dd:23:78:df:17:e7:bc:2a:42:b4:ef:a4:9c:
91:e0:58:a1:c8:11:e0:4b:1e:c7:45:de:41:19:2f:
0e:2a:87:fd:91:76:c3:ae:78:48:55:6f:fb:f2:13:
4f:15:a3:87:c8:b4:17:38:fc:05:c7:bb:9a:af:70:
02:3f:d6:5e:eb:a8:64:fc:cc:53:86:0e:08:79:62:
fb:d9:c7:31:4a:8b:37:2d:13:bb:45:73:ea:b8:28:
2d:eb:44:55:76:6d:ea:7f:ee:c8:18:18:97:15:27:
74:20:88:c7:88:2b:4a:49:e9:b1:46:19:e8:c4:06:
fa:a6:d0:c9:44:ae:78:59:e6:03:a8:ad:0f:10:2f:
8f:ad:f6:ba:18:47:79:f8:26:e6:81:7b:60:ff:88:
39:c2:61:a6:58:65:d1:e7:ad:2d:9a:a9:1c:52:44:
2d:23:e2:84:c1:9a:69:e8:55:dd:b0:f7:6e:b7:30:
25:b5:77:8d:9d:50:13:dc:53:e1:d1:e1:b1:4b:79:
5e:6a:b6:77:11:c8:48:09:50:a2:e2:b6:88:06:ee:
da:4f:73:64:60:dd:95:63:67:8b:35:02:66:3b:83:
50:b6:31:7c:5a:cb:56:c3:1b:b1:9e:e7:9b:68:df:
5f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CC:81:D0:6F:D4:CB:FD:CE:B7:20:C4:87:41:47:C1:5A:49:BB:B9
X509v3 Authority Key Identifier:
keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d3:86:83:93:e3:1c:ea:d5:ed:f8:1c:33:07:a1:88:b3:62:
d1:d4:da:47:01:69:64:ed:87:71:50:d0:e9:43:40:a9:95:41:
5b:62:4b:7d:99:7a:1a:de:db:8b:5a:ae:f7:f8:f2:f4:80:4b:
73:5b:76:28:d1:8d:86:be:4c:4a:e3:1c:81:1f:36:cd:7f:88:
8a:7e:77:de:e7:ff:60:8f:c6:0c:fa:b6:0b:71:71:bb:57:4c:
cc:9a:1b:d5:ea:a9:f2:11:83:53:86:2e:78:b6:9e:b2:44:ad:
20:49:c8:a1:70:54:30:3a:5f:c6:c1:1a:a6:c6:fb:d6:ce:94:
f8:bb:51:3e:8f:28:d7:c5:01:cc:ea:e3:ef:9f:d6:11:e7:8d:
7d:89:fd:a4:41:88:c0:65:d0:5f:c2:74:4e:9a:fc:37:fd:2a:
be:40:f5:38:1e:49:eb:1c:fe:02:2a:c4:cc:84:02:a6:c9:53:
94:32:c4:98:d8:2d:ca:f2:c3:ea:17:ab:dc:65:e9:c1:e0:4e:
1f:e5:bc:9b:d5:d3:15:8a:59:39:1d:69:1b:3d:d3:a7:73:8b:
90:a9:78:41:7f:b6:0b:1b:00:6f:fb:d8:d8:50:2a:40:08:8a:
64:46:6a:47:33:d6:87:f1:32:38:60:c3:77:aa:18:89:4f:71:
a3:86:6f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:39 2025 by rpki-client