Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json)
Hash identifier: S2n7LA1YMLgtiq+BCv5gAO+qGiYu0ie6u5hAvbbrji8=
Subject key identifier: 29:56:6E:F6:BE:79:48:5A:1E:D4:AA:64:BC:67:DB:AD:67:36:E8:7F
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 0197B9A17E2B3DA0CAEC6335014C867D102A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
Manifest number: 15BC
Signing time: Sun 29 Jun 2025 03:00:57 +0000
Manifest this update: Sun 29 Jun 2025 03:00:57 +0000
Manifest next update: Mon 30 Jun 2025 03:00:57 +0000
Files and hashes: 1: CTedhf-UDhDCo0gKWN1eFB95iME.roa (hash: Vr6y6sdI8B/BSyNE6gcBQftZW1dE4fIdtomKsz3LLNE=)
2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: MsNKserSZDia8lssINsHVFC0DGt/cjglFhVDHqN2bz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:7e:2b:3d:a0:ca:ec:63:35:01:4c:86:7d:10:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Jun 29 03:00:57 2025 GMT
Not After : Jun 30 03:00:57 2025 GMT
Subject: CN=29566ef6be79485a1ed4aa64bc67dbad6736e87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:10:6f:db:45:21:85:18:7a:ae:72:3f:ce:
b6:94:ea:bd:c6:45:29:d2:e1:66:2e:6f:1c:70:1f:
67:7b:58:81:d7:ec:a2:33:1a:42:a1:4b:60:61:7b:
6d:e5:e1:e5:1e:a2:88:6f:f3:f8:19:7e:21:f4:b9:
4b:00:60:e5:cf:ac:14:71:53:4e:94:2b:1e:7e:c0:
28:a0:3a:19:19:5c:be:0f:54:e6:15:f6:6a:04:11:
53:78:cf:8e:72:03:41:0c:c4:bd:ea:a6:d3:c1:3b:
c3:75:6d:88:d5:b4:da:04:69:51:05:32:27:26:3f:
ed:b3:a0:4b:70:d2:c4:7c:07:b8:14:59:90:b6:e1:
49:ef:24:d0:d0:10:d2:9e:06:d4:b6:51:23:1f:7e:
52:4e:50:d0:5f:2b:b5:dd:1e:ac:2c:6e:18:28:87:
12:70:02:4f:80:7e:b9:f6:47:5a:82:fe:57:b1:32:
a6:de:3e:15:79:71:8a:12:b8:cd:39:37:bc:74:9e:
6e:35:8d:b5:11:f6:36:89:ae:fe:c4:fc:c5:28:1f:
4b:c2:42:69:6d:5e:ef:de:59:ff:a4:ac:6c:26:33:
0b:b1:ac:e1:05:0d:46:1f:36:09:5a:13:90:d2:a9:
61:b3:51:11:9c:6f:c0:e1:90:86:92:bb:9f:bb:54:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:56:6E:F6:BE:79:48:5A:1E:D4:AA:64:BC:67:DB:AD:67:36:E8:7F
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2d:c0:36:6f:1d:a3:3a:30:56:01:2e:72:3e:d6:f8:0d:76:
51:9c:6e:d9:c9:51:85:2a:1c:b1:ff:0f:af:7b:74:e5:4a:6a:
2d:6d:63:b8:7b:80:13:16:d4:5d:d5:5f:6d:28:a5:d5:60:49:
48:33:88:e9:8f:b9:2b:53:31:4e:e1:15:92:40:6a:63:2b:44:
a8:94:3b:8f:85:83:9b:48:3a:6f:d6:d8:af:0c:ae:ce:e4:99:
5a:db:9d:88:2d:f2:63:bb:7f:27:e8:62:4b:f1:63:f4:60:d5:
93:a5:a2:29:92:f9:e1:b5:b4:5c:f4:6d:b1:92:85:d8:32:ac:
8e:d9:95:25:66:e3:5f:6a:4b:65:e7:58:80:53:b3:72:f7:dc:
ea:d6:83:07:cc:5b:97:7b:11:bb:81:22:70:68:6a:65:3d:0b:
d5:5b:ce:c4:b4:5d:8f:5e:e3:57:38:19:8c:e5:ec:49:77:14:
23:0a:cb:20:56:31:c9:65:78:c2:bc:d4:4b:9d:99:67:12:ed:
4a:a3:d9:8f:d0:31:94:a7:f5:e1:71:8b:7d:49:05:ec:c0:3d:
30:cd:98:90:da:74:7f:f5:ce:96:f7:1f:68:dd:46:0f:51:f6:
23:88:31:f2:20:38:15:ad:42:cd:49:96:f2:2b:c0:7a:ba:f1:
d6:76:f0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:10:54 2025 by rpki-client