Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
File: rQVANtrTLReoyRbcLfuzzoo2RSw.mft (raw, json)
Hash identifier: rPufuGKmHqxyP01d/hRLayXVnig8cesdV8UkEE7whe4=
Subject key identifier: 6D:2F:63:E8:68:CA:C0:FC:04:55:2A:10:E7:55:8B:31:6F:10:F9:42
Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Certificate issuer: /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Certificate serial: 0197488D3EC08315D633A14A4E6FE4B40FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 04:01:45 +0000
Manifest this update: Sat 07 Jun 2025 04:01:45 +0000
Manifest next update: Sun 08 Jun 2025 04:01:45 +0000
Files and hashes: 1: V1VyWKK4g97snYUaOwHJAFP_MdQ.roa (hash: IhL8EIfC6sBImzV34O7y77KJDpidcr5em23zVj3USMQ=)
2: rQVANtrTLReoyRbcLfuzzoo2RSw.crl (hash: KW/4Ze5Sxrd2yF4pwKafIkhQjZRIWsPwf2IX/P23enU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:3e:c0:83:15:d6:33:a1:4a:4e:6f:e4:b4:0f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Validity
Not Before: Jun 7 04:01:45 2025 GMT
Not After : Jun 8 04:01:45 2025 GMT
Subject: CN=6d2f63e868cac0fc04552a10e7558b316f10f942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:41:3b:01:df:bc:27:7f:ea:93:b1:30:4b:
8f:6c:29:3c:c1:9b:c5:49:73:22:c8:6e:75:37:83:
8f:ff:77:a9:c9:1f:ca:51:ef:ae:7f:e1:19:78:b9:
19:1b:d7:d6:50:12:aa:f9:db:0b:0b:6e:69:9a:a6:
91:19:10:ef:46:bb:62:e3:20:08:55:bb:49:7f:72:
c2:d6:68:d2:de:15:39:2f:c6:74:44:5a:ef:08:15:
b4:d8:ee:d9:09:6a:d8:43:68:d7:ce:23:58:59:42:
82:01:8d:89:fe:a4:7e:2c:68:7a:d1:9c:9e:e2:da:
81:46:ae:84:12:5c:b7:43:40:c2:c8:47:be:5c:3f:
cf:87:c9:af:fc:a7:cd:8e:f8:15:46:61:26:45:c0:
07:fc:5a:22:e0:43:8c:a2:80:b6:9e:6a:56:85:ae:
e5:c9:5f:16:c9:63:6e:72:5f:42:69:08:ce:e7:6a:
d4:e1:8a:07:54:5e:58:d4:0b:b7:70:1a:49:84:50:
a1:cb:a5:71:4c:2c:55:bf:71:19:47:51:4c:84:27:
a2:48:af:32:c4:59:dc:91:d3:09:b2:86:7e:1f:46:
e3:af:47:29:fe:3d:c0:df:96:cd:0f:fc:e0:82:08:
08:f3:3c:75:81:02:d5:d9:94:77:1a:13:2f:b5:1c:
18:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2F:63:E8:68:CA:C0:FC:04:55:2A:10:E7:55:8B:31:6F:10:F9:42
X509v3 Authority Key Identifier:
keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:cd:30:9e:4e:9c:79:10:2d:cd:09:b8:90:cc:9d:45:63:4d:
42:40:24:a4:5f:4a:7f:d8:3d:8c:33:e7:95:0f:b1:d5:fc:fd:
ad:24:fd:88:1f:f1:d6:4c:9e:8a:6e:b9:5f:a4:f3:21:2f:1f:
f0:32:d1:78:bc:22:98:0b:40:a7:5a:03:e6:57:20:5c:be:08:
db:83:cb:86:0a:a8:b1:c8:b2:0d:cb:aa:25:df:8d:a4:d6:2b:
7c:64:fe:25:44:ba:59:95:13:0b:76:07:55:3f:20:50:8f:b8:
82:6a:6c:8c:60:65:00:d6:d0:39:7a:a1:9d:71:3b:b2:d1:12:
c8:cd:2d:4f:0f:0f:bb:54:ee:b8:04:b7:25:47:b7:7f:49:bf:
d1:ec:bd:99:03:ee:80:3d:e5:5b:a0:14:5f:5c:f8:2a:dd:e1:
58:c2:9c:e3:b4:83:1a:34:c1:13:0a:98:fd:a1:6c:ac:5a:82:
6c:41:a6:17:19:cb:83:f6:9e:ec:ba:01:37:3a:3e:1f:d3:dd:
6a:39:1b:25:a9:cb:49:13:95:48:e1:0f:ae:0b:25:7d:40:b8:
9c:74:44:14:fb:a2:56:48:da:6f:35:02:57:6a:22:8d:84:fd:
af:1a:51:b3:ce:c9:11:2d:84:34:da:38:2e:b7:05:07:94:fb:
91:89:ea:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:13:32 2025 by rpki-client