Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
File: RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft (raw, json)
Hash identifier: wGlN0aDynD8K82j9JS2XPP6yQEd2Ad+DKcMM24s7FB8=
Subject key identifier: B1:E8:5F:51:9E:5A:D3:3D:C4:89:DE:A0:40:62:7D:95:FA:8F:4E:0E
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 01975F81B26ED0EC0B03D0C812E339F160FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
Manifest number: 0D73
Signing time: Wed 11 Jun 2025 15:00:24 +0000
Manifest this update: Wed 11 Jun 2025 15:00:24 +0000
Manifest next update: Thu 12 Jun 2025 15:00:24 +0000
Files and hashes: 1: RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl (hash: I6TeBzY8w5QVq1VuCdgd8MgUgbxQHSc3hK3wwkiVCnc=)
2: bdbKzGuhzcfiVqYcyUjbwWvnE0w.roa (hash: EoIpsT1HmNm7h0aLpOdMeI8Ad8kT8sfcfHIMZV0nTSQ=)
3: sayECznhSIzMnJpVagOHebCR_x0.roa (hash: hUIe0JVfYeAbZr+iALwcU4dqSjQhm3L+k0UihQEwCkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:81:b2:6e:d0:ec:0b:03:d0:c8:12:e3:39:f1:60:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Jun 11 15:00:24 2025 GMT
Not After : Jun 12 15:00:24 2025 GMT
Subject: CN=b1e85f519e5ad33dc489dea040627d95fa8f4e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0a:e1:20:90:93:02:ce:f8:2c:11:d5:de:82:
93:7f:27:fb:79:70:11:65:49:68:92:e0:b5:f7:83:
47:15:b3:5a:2a:46:8a:84:46:be:ca:ff:ea:d3:b8:
67:bb:59:be:af:b3:c1:cc:90:7a:b7:39:c3:d3:89:
f9:10:54:70:68:65:9e:f0:41:46:95:2f:92:b4:1d:
40:c6:40:46:df:61:5d:b8:d6:5f:9f:cc:d8:ef:21:
28:7f:05:28:5c:a6:13:d2:c6:04:cf:09:31:8b:7c:
71:67:69:50:20:2a:0c:32:c2:05:bd:ec:34:8a:9f:
84:41:a3:74:8b:61:5f:a7:d9:e4:8b:00:ab:f8:56:
52:8a:86:8a:e5:42:e4:94:8a:b9:12:f2:5f:60:a7:
cc:56:17:1b:a1:21:ec:f7:61:50:31:c9:40:2c:46:
de:0c:08:95:c2:b9:b3:6d:99:c7:b0:d5:08:89:62:
29:b4:be:6d:e6:06:64:5b:b5:2a:d3:8c:0d:b9:37:
00:cd:98:f0:99:33:b8:d6:c4:47:f6:be:39:28:43:
4d:67:50:1f:68:32:72:fc:ba:d5:93:d1:08:51:fe:
9b:20:0f:7f:71:30:6c:3d:5f:75:a6:f8:8c:cd:84:
a5:a7:d1:6a:c7:d9:38:a7:74:0c:23:53:4a:44:08:
28:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E8:5F:51:9E:5A:D3:3D:C4:89:DE:A0:40:62:7D:95:FA:8F:4E:0E
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:78:1b:4a:d4:28:09:86:90:46:19:cc:f4:35:07:5f:b2:f1:
9c:10:56:91:b1:1b:d8:39:14:53:01:4e:e8:05:e1:b2:72:a2:
8c:14:76:26:df:ac:17:44:1b:48:35:80:e4:00:01:c0:fc:29:
ca:83:32:e0:d1:79:74:81:97:6e:25:4e:43:fc:55:05:93:9f:
9e:b6:fd:66:43:13:df:31:06:1a:58:a8:44:a2:df:a7:e0:f9:
1c:ca:2d:74:ff:f6:c5:e7:31:2c:5d:e4:9f:e5:29:d1:aa:5a:
8d:df:92:4f:15:99:09:7f:58:5a:9d:cb:7e:c5:b0:9f:88:53:
18:12:7b:f8:81:93:bd:52:d9:ab:c1:d2:57:41:b2:dd:2d:67:
57:04:55:cf:52:30:a3:59:d7:46:c9:43:6f:45:7e:f2:ee:5d:
46:f6:5a:d0:47:cc:04:bc:cc:85:6c:02:fd:a1:15:63:1f:73:
6a:19:c4:e3:45:26:20:68:ce:f7:89:65:ab:ff:8c:77:39:39:
f7:ce:9b:8e:38:61:e3:71:0a:ae:81:51:3c:ce:dd:5f:59:bb:
23:b5:52:04:5f:dd:46:ab:4b:11:d2:44:2b:50:e0:30:6b:15:
ca:fd:25:4d:63:9a:55:ef:78:99:cc:0d:87:48:63:e3:26:1d:
4c:96:1a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 00:52:33 2025 by rpki-client