Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: eczFendto9NJW64HoBpaH2DOBskRvAA3t/bfU61VPys=
Subject key identifier: D6:1A:C9:63:83:44:C8:D5:73:B5:90:81:14:00:93:D3:F4:F5:B1:C0
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 0197B6D7B8CF61597EB4DC050E3FB162D3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 14:01:20 +0000
Manifest this update: Sat 28 Jun 2025 14:01:20 +0000
Manifest next update: Sun 29 Jun 2025 14:01:20 +0000
Files and hashes: 1: 3rk6DTXzfhXnDvH7YjIIV0HcXhY.roa (hash: 8yMBicvXGg6+UMP8iKzu3+exUVvDmdmba1/S47z8Uyk=)
2: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: Hpp5leecNWJf3TyxpnYLvubARjkY3+/vTsuT72YG+hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b8:cf:61:59:7e:b4:dc:05:0e:3f:b1:62:d3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Jun 28 14:01:20 2025 GMT
Not After : Jun 29 14:01:20 2025 GMT
Subject: CN=d61ac9638344c8d573b59081140093d3f4f5b1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c2:da:fe:d5:a4:ae:47:99:b6:ce:94:44:09:
0d:5d:07:89:3f:02:88:6a:90:a5:6f:fd:0e:f8:f2:
56:b5:1b:dd:d4:f3:7d:16:80:25:aa:38:be:f6:56:
f4:4c:bd:d6:c7:c5:a6:d8:5a:60:4b:2a:0c:03:20:
92:56:26:f8:3c:fc:b8:6d:9b:2e:cd:82:e1:0c:56:
65:42:27:f4:7b:6f:92:58:d1:d0:c9:82:7d:2d:cd:
a2:13:c4:35:74:2c:09:2d:27:5b:a0:5d:51:c7:0e:
a8:e5:d2:53:bc:b2:9f:51:d0:82:f5:a9:4a:89:9c:
6c:48:51:b4:10:71:e2:77:2f:f1:77:ec:c5:d9:ad:
51:c4:bf:70:2b:c9:80:e2:91:1e:3e:15:b7:bd:7b:
a7:44:1a:9d:d4:b5:09:3e:f0:d6:56:1c:f6:42:40:
0a:1d:8c:42:cd:df:37:5e:0a:56:b4:b8:59:e4:f4:
d5:5f:b3:fc:60:db:25:28:7f:29:51:f9:31:7e:f7:
cb:b5:e0:22:75:ee:63:21:79:68:0f:9a:30:fa:dc:
b2:84:aa:8f:d3:f3:cb:38:40:4a:f8:4a:43:36:af:
8d:37:77:51:cc:51:87:04:17:dd:5c:db:18:76:96:
9a:19:c2:0a:78:da:16:b6:41:87:55:61:7f:d3:a6:
9c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1A:C9:63:83:44:C8:D5:73:B5:90:81:14:00:93:D3:F4:F5:B1:C0
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ad:d2:dd:44:6a:93:db:cb:4b:58:05:ee:e1:30:12:02:b3:
e1:94:9c:cd:90:8d:59:50:77:30:9e:11:f9:74:c1:64:c3:12:
9a:1b:3e:c4:7d:63:ae:1c:59:ea:31:59:d3:d9:d5:72:04:30:
5b:9a:4a:cb:e2:24:c4:00:46:0c:c2:5c:ae:f4:74:f5:3b:25:
ac:fc:3b:60:c2:19:b1:78:79:7d:08:1c:cd:6b:56:09:60:2e:
a4:ce:7c:49:50:e3:91:4c:98:e5:5c:cc:39:b6:0d:84:2a:55:
6a:a9:a1:9c:f7:a6:b7:5e:5a:75:02:c6:db:1e:1c:df:b6:64:
3a:7e:6b:f7:39:0a:44:64:65:01:4b:98:95:19:fd:e4:aa:a4:
8e:36:b3:a2:81:bb:a1:45:1e:4b:9a:dc:e2:5e:ea:d2:bb:f6:
59:0b:25:a0:20:7c:73:d6:33:4f:d7:fd:e1:81:5b:45:d4:1d:
e6:2a:0b:92:3f:c4:4c:71:0e:1f:b1:ac:4d:c0:ec:8b:93:0f:
14:20:08:77:4b:e8:6a:f3:7c:e8:df:8e:ec:37:0a:d9:79:87:
47:b1:f3:56:d8:af:5c:b9:c6:a5:ba:35:86:7f:3c:3b:cb:4e:
fa:e9:85:cb:16:2b:33:b5:48:d2:2b:2b:46:0c:4f:19:2f:b5:
22:7a:4f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:08 2025 by rpki-client