
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
File: 1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json)
Hash identifier: oXM+L/4NBntZXnR/F81YF4wKWOlUDy3GmXOPtjV03Mk=
Subject key identifier: F8:E3:75:CF:DD:6E:6C:B3:76:21:77:F1:8C:13:94:54:91:85:48:D0
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial: 0196C3B939EA678C0D057C99FE22D98A7CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
Manifest number: 102B
Signing time: Mon 12 May 2025 09:00:18 +0000
Manifest this update: Mon 12 May 2025 09:00:18 +0000
Manifest next update: Tue 13 May 2025 09:00:18 +0000
Files and hashes: 1: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: SeiiEfeF+xK3Qf9z/D74oq43Qni2OaB8ZmoUXb8nUbw=)
2: AgasgsgRMARsZv6ZL1FMUAMH49o.roa (hash: rP0A/zCy7W2yRJEKVS59R2RHbWAgc1CTX30QoNq6GK4=)
3: kIQph00YRfR7VyoSJ5QKs9_47CM.roa (hash: T6/F9gO6dDf2HDaMUJjHPMQQkg1ian0JLCMBF3Ug9u4=)
4: qtgbnELTyW65aNCYZpJqV2m2-Jw.roa (hash: BZNYV9kq2qBJjfITSVC14VQZO/Cg3QnROE1UWyqLr8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:39:ea:67:8c:0d:05:7c:99:fe:22:d9:8a:7c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Validity
Not Before: May 12 09:00:18 2025 GMT
Not After : May 13 09:00:18 2025 GMT
Subject: CN=f8e375cfdd6e6cb3762177f18c139454918548d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:a0:f8:1e:6e:1d:d5:e1:a2:7d:e7:ea:33:
30:2e:cd:c5:75:fc:ad:f4:2f:57:43:ed:f0:05:85:
26:d2:b8:d6:9c:ab:e5:1b:1c:7c:3b:af:ad:71:b3:
2c:94:d6:a1:c9:d7:6e:6d:45:24:2e:2e:d7:17:88:
19:4f:1e:37:6e:1f:83:1c:7d:f4:c6:2b:2e:80:b8:
4a:b2:34:4b:6c:95:2d:e4:8b:30:00:88:f0:1f:b7:
c5:62:a0:91:1c:20:26:f4:ec:f5:1e:d4:7c:dd:6f:
46:ff:04:f8:2d:7f:ed:24:c3:3c:0a:03:a7:f1:ec:
47:1b:1b:2c:e8:08:0c:36:6a:e4:f6:85:59:58:ed:
dc:a1:40:fa:1e:48:40:f0:bc:fb:fa:d1:93:61:5b:
5c:a6:65:f8:ba:0f:6a:d0:da:39:07:7f:a6:e1:a7:
78:4f:1c:41:22:1b:c9:01:c4:d3:a8:55:47:86:9d:
2e:0c:64:26:f6:3a:53:39:0d:26:39:c1:d9:2b:5a:
50:fd:3b:bf:ff:1a:b4:b9:21:7a:a2:4e:fe:39:0b:
36:35:a2:72:17:95:54:e9:c4:b4:f7:fd:cb:ef:a4:
d5:7f:b4:d8:ea:1b:4c:35:bc:6e:56:6e:d4:da:40:
06:9c:41:3f:17:3c:27:ad:7f:4c:5a:7f:e5:1e:d4:
00:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E3:75:CF:DD:6E:6C:B3:76:21:77:F1:8C:13:94:54:91:85:48:D0
X509v3 Authority Key Identifier:
keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:13:dc:05:7d:0c:6c:59:4e:31:b7:2b:e2:d8:70:c7:b1:0f:
ff:dd:30:49:11:3a:db:1a:73:ec:8e:b6:e3:4d:82:f0:fb:b4:
ff:2e:f3:c4:d3:f7:c7:ce:bf:a8:bc:ea:cf:cc:e0:1a:6c:bf:
bf:3b:48:2d:88:83:a4:a9:c3:35:53:a8:77:f1:29:9d:be:45:
02:12:16:ec:37:57:d6:a8:d9:32:ee:fb:9c:3d:ec:e4:6f:b0:
22:36:d0:3b:45:49:7e:6a:ee:c7:0b:67:38:b7:b5:b0:60:ac:
8b:71:f8:d2:cd:a4:18:36:01:aa:f7:5c:01:04:23:cf:1f:d2:
93:8c:82:0d:fd:97:f4:e6:84:c3:e5:ae:6d:2d:f9:5f:66:ca:
07:37:b1:9a:60:6d:6b:8e:c0:22:f5:ae:a5:fa:75:a8:85:a0:
5a:a3:cb:8a:b1:15:26:45:24:b7:66:ab:62:2b:ce:1c:70:52:
8a:90:4b:d1:3f:87:1d:2e:b4:f7:84:12:9c:bc:26:78:4f:91:
76:8c:38:d0:9a:0a:12:59:49:60:d0:db:3e:89:d4:e0:13:2c:
cc:5f:0e:d4:eb:be:7c:14:48:96:6d:66:0b:e6:64:3e:c3:11:
14:4e:5e:fa:76:fd:d1:a3:82:63:7e:50:5b:14:72:0e:00:65:
b3:95:eb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:54:29 2025 by rpki-client