Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: 01T3H7s0g0y8eAl8XQQmXJgipaGHwcHqETgVS9ifdtg=
Subject key identifier: 99:FE:46:90:71:D1:79:6F:8F:88:23:9C:FB:7F:EA:2D:AC:F0:79:BA
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 01975912028AD0CE95D9C0B667C3A28B42B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 13D3
Signing time: Tue 10 Jun 2025 09:00:41 +0000
Manifest this update: Tue 10 Jun 2025 09:00:41 +0000
Manifest next update: Wed 11 Jun 2025 09:00:41 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: SWp8p72fSgIAwhR5kYAjIicH/pOR27TmNHr3f2PGqy0=)
2: cIo_z6M4iUgSv6Rq-GH3zvKNA-E.roa (hash: uuzfvafFMiGynhqFG/8GblYil9CuUOOslH5kMNYMbzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:12:02:8a:d0:ce:95:d9:c0:b6:67:c3:a2:8b:42:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Jun 10 09:00:41 2025 GMT
Not After : Jun 11 09:00:41 2025 GMT
Subject: CN=99fe469071d1796f8f88239cfb7fea2dacf079ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:76:9c:f7:3a:d8:55:42:ca:a5:c2:48:06:7c:
10:08:ef:08:16:4e:54:f7:84:61:a6:92:d4:6a:80:
60:3c:9a:d5:c4:0a:73:84:77:7b:fd:dc:82:57:ea:
10:4d:1f:84:5e:87:32:b8:e0:55:f1:b3:bf:8e:fd:
a6:7a:6a:a0:56:57:91:56:d3:a4:11:57:c2:92:9f:
0d:39:2f:83:2f:5e:49:6d:29:7c:c9:98:39:ac:dc:
82:0a:25:8f:00:73:f9:ca:ac:f1:00:44:20:ca:6e:
64:e0:55:03:0e:7f:c7:b3:c4:c6:2e:4d:7d:fd:80:
9d:e4:c3:0a:22:f2:7a:57:24:1d:d1:23:48:31:fb:
16:9d:cf:f8:87:c5:08:0b:11:6b:d0:20:a2:bf:f1:
b7:0d:62:85:11:87:19:12:e7:7a:49:bb:a5:85:52:
2f:8c:0a:eb:f9:f8:f5:23:8a:6b:36:15:9b:0c:b3:
f4:83:b8:cb:4e:15:11:79:73:e5:29:65:d2:cf:ff:
ed:38:7c:51:23:c3:fc:b3:52:22:b2:9d:22:6a:a8:
30:b0:7a:e4:d9:33:0d:b4:18:ea:bc:f8:fa:92:20:
17:7d:1f:ef:a4:55:24:26:be:c4:b8:ea:cf:51:20:
5b:96:d1:85:b9:cf:00:86:a8:f0:d6:af:77:61:cb:
00:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FE:46:90:71:D1:79:6F:8F:88:23:9C:FB:7F:EA:2D:AC:F0:79:BA
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3a:82:eb:94:6a:30:72:18:19:f9:45:12:aa:74:a6:e9:47:
7f:94:5f:8c:36:03:5b:65:a6:e8:70:d7:e2:b5:1b:e5:45:02:
4c:61:a7:2c:0c:47:24:da:5d:c1:b0:2f:89:6f:ee:ca:7d:df:
0c:9e:d6:d3:72:39:45:00:f0:18:e4:43:99:7a:b6:0c:52:a0:
19:b0:04:54:89:49:ef:e8:c3:22:95:83:20:a0:11:e2:b6:96:
db:6c:dd:67:39:03:17:36:2c:96:1b:ef:ad:96:9c:5d:11:e6:
43:44:b1:26:e7:8e:31:51:f0:f9:d5:ab:cb:a5:b3:32:26:08:
17:7e:08:d0:32:3c:3f:6d:c6:7c:a1:43:e3:c1:42:a1:82:dc:
c0:cb:a2:5c:cd:92:62:fb:19:6d:a0:f5:92:a6:c6:21:31:c3:
5e:dc:a8:77:19:4d:76:b9:27:14:b6:c1:7c:6e:65:1f:b0:c6:
3c:32:2a:79:1b:b0:91:71:f7:24:5e:74:79:95:12:59:f3:b4:
ac:13:ed:33:56:2f:7d:05:bc:dd:65:55:14:f0:28:2f:38:b3:
93:79:75:a8:f6:b4:39:67:92:ab:38:62:ba:62:01:e1:8a:0b:
86:76:e5:b9:0e:f5:fd:7c:29:b4:66:66:bc:d8:f2:2d:0f:7a:
66:30:a5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:14:15 2025 by rpki-client