Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
File: rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json)
Hash identifier: /d1CGABvAiVJBLulqjogf1LnQmLU7gfa+35eX88/S+k=
Subject key identifier: C3:77:8C:8F:45:CE:E1:6A:1C:52:BA:96:AD:65:6A:E7:F8:1A:91:E7
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 0197B7B2E69478E20929070DA108CE899681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
Manifest number: 010C
Signing time: Sat 28 Jun 2025 18:00:44 +0000
Manifest this update: Sat 28 Jun 2025 18:00:44 +0000
Manifest next update: Sun 29 Jun 2025 18:00:44 +0000
Files and hashes: 1: OHSgHk7806-Y3EiMMODqh70dnpA.roa (hash: dwELo2G8zKa9A3mOV9vawf+jeFFyKXxpSg3LwUytDM8=)
2: ZfKmgCC5shqdiJ4oG4WQU2IlAJs.roa (hash: xPdeleCRUgq2S3wQBazj5FbP5YRWDoq9gRuAfQMqJJU=)
3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: DygRhnOWs16XlH/en8mc9oHbQtRhML50zRkAgX+majY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e6:94:78:e2:09:29:07:0d:a1:08:ce:89:96:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: Jun 28 18:00:44 2025 GMT
Not After : Jun 29 18:00:44 2025 GMT
Subject: CN=c3778c8f45cee16a1c52ba96ad656ae7f81a91e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7d:3c:f2:f7:1b:bd:a6:b9:25:72:db:d6:71:
42:28:58:d7:f8:e7:05:ec:6a:cd:b3:8a:3d:13:eb:
03:59:a8:09:4b:8b:5a:97:82:bf:19:09:fb:76:32:
c0:ff:0c:93:cd:f6:66:43:b3:f8:a2:6e:80:60:6c:
76:24:e3:f9:1c:2d:af:f1:c1:56:b5:13:b2:d8:e2:
cf:35:12:c6:ad:87:ee:0f:8b:47:7a:c1:06:1e:df:
31:44:85:39:86:47:77:c5:e2:7f:e7:6c:1b:f2:49:
76:d2:24:df:df:70:b9:2c:80:86:1e:55:26:6e:6b:
95:ac:52:eb:26:82:81:41:82:d3:79:fd:2c:21:a3:
b6:5a:15:e0:1c:a2:f9:9b:b1:92:af:18:f5:ac:24:
48:91:5c:3f:b0:b1:0b:47:03:89:e4:57:65:23:98:
38:4d:33:fc:19:77:2d:83:5f:3b:88:27:a4:1c:fc:
0f:57:16:c6:fd:07:2b:be:6e:85:ee:dc:f0:2a:3e:
ec:6b:3c:c8:58:22:09:0b:8a:fd:a0:14:aa:71:f8:
e6:48:df:6f:00:68:bc:d5:56:d6:da:3c:8d:d8:33:
70:88:81:a2:67:04:58:d2:b5:65:6e:bf:9a:38:a4:
e2:c8:42:2c:81:27:c0:a0:0b:e9:62:2f:9c:b2:21:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:77:8C:8F:45:CE:E1:6A:1C:52:BA:96:AD:65:6A:E7:F8:1A:91:E7
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1b:37:26:af:0e:d2:ae:23:64:fe:78:27:d1:28:65:5d:f1:
73:c0:e8:8d:f4:58:8c:05:12:66:51:a6:de:da:07:7d:0e:21:
38:75:a1:c9:42:ed:7a:82:c7:da:db:d7:a6:c2:3b:75:fc:66:
ab:0d:2f:0e:58:61:f7:1c:66:37:4a:f3:73:d8:fe:ee:1f:8b:
10:f2:3f:03:9a:ab:3d:33:25:b1:15:f7:b3:6c:1d:77:78:ca:
6a:c2:f9:09:c0:38:8f:a3:40:3e:57:61:fa:3c:17:fe:a4:2c:
89:cb:4d:dd:5c:e7:e4:1f:0b:e8:c3:16:77:11:00:73:cf:86:
e6:9a:6a:f7:b2:1f:0c:43:97:1a:58:67:18:a4:9e:00:39:cc:
d8:a9:53:7c:b4:e8:01:83:c3:1e:c5:ef:7e:75:74:34:8d:26:
a3:a0:69:95:42:62:56:cc:d6:b5:fa:54:07:93:95:c3:52:b8:
2e:c4:1d:e9:98:7a:14:60:af:b9:7b:ec:0d:32:0d:3b:3b:b1:
c2:89:15:e5:cb:97:33:ac:33:40:29:42:bc:5c:b1:51:ef:48:
e3:8d:64:75:a8:c5:05:75:de:ba:68:3d:2c:80:e9:c8:3a:ed:
01:e3:f2:0c:ed:80:48:15:8c:0c:4d:b3:dd:a4:f1:4e:f7:cc:
1e:3c:b1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:48 2025 by rpki-client