Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: 8eq1+i0yXBxTIPhOB0FD1xACzX8kfVs0VVTPcUxbL6E=
Subject key identifier: 43:41:E7:CC:21:46:51:E4:F3:98:12:A8:CE:2E:51:0F:62:69:A7:C1
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 0197B77C2B35666EF78BB73E757F0D52AF5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:00:57 +0000
Manifest this update: Sat 28 Jun 2025 17:00:57 +0000
Manifest next update: Sun 29 Jun 2025 17:00:57 +0000
Files and hashes: 1: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: pz5mCZ6X5KS6PSurwwvOyvnxMNCQPNuVtbyidvUZ1KQ=)
2: raYuD2-oWYFkHeIeR6LIUYgtbtM.roa (hash: JU+hidsjRHQowQdjLtlmSpodi1Pd90fMaRJU/QLsDsg=)
3: zY-mc8ottsO0mlX2DbncV_JVaGI.roa (hash: IXtxsfxn422nBKB3kQxte4GM01lfDRPi2WPTNL4v8HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:2b:35:66:6e:f7:8b:b7:3e:75:7f:0d:52:af:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Jun 28 17:00:57 2025 GMT
Not After : Jun 29 17:00:57 2025 GMT
Subject: CN=4341e7cc214651e4f39812a8ce2e510f6269a7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:74:f9:ec:63:ed:f5:cc:a8:ce:a9:a3:63:
0e:77:ab:7f:1c:3a:c9:42:1b:67:8a:19:f6:48:94:
0a:57:dc:33:d4:16:5e:c7:9a:39:af:d0:76:38:d4:
f4:0a:42:65:55:97:a8:34:11:94:cf:1a:c9:c6:0a:
93:f7:09:be:7d:a3:f7:41:d4:08:23:f5:3d:4a:f3:
fb:64:91:6e:dc:cf:03:32:fc:aa:45:03:02:a3:97:
6e:62:ed:ac:9a:f9:5f:c2:71:1e:1c:05:a1:18:d4:
30:41:d9:74:d9:42:87:0f:8f:ca:6a:80:e3:42:e8:
26:3a:d4:50:49:a6:9c:0f:fe:dd:89:2c:8e:52:3d:
cd:f2:21:ee:39:11:19:72:10:78:9b:91:46:e8:75:
25:ff:b6:04:b0:07:71:f2:ac:7d:78:78:06:c7:ca:
50:1f:94:e1:6e:40:c8:fc:fa:d0:1e:5d:00:73:ab:
cf:e8:f1:a6:e5:b3:b7:e9:d1:a9:e5:b1:8b:06:14:
60:3d:2f:71:0c:66:8e:be:f8:15:17:1a:d5:c9:da:
64:7b:e3:bd:6d:13:a1:00:69:dd:fd:7f:25:0a:3d:
03:73:be:b0:5d:19:90:83:34:66:c7:e5:3a:e1:48:
44:3e:15:96:fb:78:a2:85:32:1c:cf:fb:78:e5:6e:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:41:E7:CC:21:46:51:E4:F3:98:12:A8:CE:2E:51:0F:62:69:A7:C1
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a1:e1:ea:16:66:ab:a6:35:31:ae:b6:20:2f:35:90:b5:1a:
89:cf:9d:78:64:2d:d2:af:48:07:64:d9:2b:9a:c7:fb:d2:bd:
41:ae:2f:ca:24:52:b6:98:71:cd:75:77:45:cc:ac:8b:5d:c1:
2b:cb:09:a6:b8:31:fd:ef:ce:7a:29:27:ca:25:c7:eb:41:26:
5e:3e:22:b5:b4:c0:d7:d4:be:90:b0:d6:1c:3d:26:9d:c0:01:
de:86:ad:18:fd:02:d7:69:5d:3e:f6:39:20:b8:19:c9:2d:ae:
ce:25:2a:4f:32:e7:b4:7c:b9:1e:94:a4:14:87:45:21:03:aa:
1c:a5:4f:2b:01:f4:4e:1f:56:de:06:92:7e:9a:f7:64:cb:de:
d0:36:5c:a7:ba:dd:53:bf:c1:df:85:bc:ee:f6:94:de:c4:5d:
dc:72:69:91:c8:25:60:7b:6a:7c:dc:24:72:ec:fd:fe:1c:04:
08:b7:4d:88:86:ef:12:1c:a5:47:5f:22:cd:ce:fe:39:11:21:
a8:13:17:f0:87:dd:d3:53:2e:4a:4a:0a:b4:cc:0a:3c:fa:bd:
b9:cb:33:31:cc:21:d3:18:99:b1:7d:77:f2:09:8c:ae:49:f8:
3f:ee:45:24:96:96:98:53:b4:6d:e8:39:84:57:98:ff:e0:47:
df:07:d2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:04 2025 by rpki-client