Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
File: Q15Blg1ZDpmATpC5rwNlWExxLHI.mft (raw, json)
Hash identifier: SIVgRNZev0MGxb/+HEmNBHhDWRTB+kc8QpYXexRciPs=
Subject key identifier: 68:F3:A7:63:32:18:A3:B7:CB:08:7B:10:00:E8:40:AA:06:73:F2:AC
Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
Certificate issuer: /CN=435e41960d590e99804e90b9af0365584c712c72
Certificate serial: 019748FA38BC2AF00CDD3E49F4F9254D66DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
Manifest number: 12D2
Signing time: Sat 07 Jun 2025 06:00:47 +0000
Manifest this update: Sat 07 Jun 2025 06:00:47 +0000
Manifest next update: Sun 08 Jun 2025 06:00:47 +0000
Files and hashes: 1: Q15Blg1ZDpmATpC5rwNlWExxLHI.crl (hash: STi5g6Wb3Uq3vOtEt3/bl/z2DPVshTwxiw6A+nD2hqU=)
2: Qgkf9isvn9G1i53cocvwB25dPG0.roa (hash: 7pOvhNxITVVpr4C2N2+h/b2aAgFP8cFKYE5FjzDD/YQ=)
3: XGxdWNZPiFptk-3w7OILGgkhItU.roa (hash: xf5heCAI8Pty8+MuLnNYj13qa72HA9enfkhk9E22KD4=)
4: XQLqdml-mlBf3Z-90xd5Tk9chkc.roa (hash: nSfERnt4sWaMf0P1jQhY7bLFNZayDQ04cDYTAEFX1MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:38:bc:2a:f0:0c:dd:3e:49:f4:f9:25:4d:66:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435e41960d590e99804e90b9af0365584c712c72
Validity
Not Before: Jun 7 06:00:47 2025 GMT
Not After : Jun 8 06:00:47 2025 GMT
Subject: CN=68f3a7633218a3b7cb087b1000e840aa0673f2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:48:7f:af:15:91:7a:9e:60:c5:ab:4a:80:
5e:6d:0a:49:4d:47:d4:16:40:6d:bd:06:ed:cd:e3:
06:c9:92:0e:7c:25:1e:35:4b:f0:52:16:f3:45:e1:
7b:d5:eb:e7:f6:dc:63:a1:9d:62:7d:f4:3f:e8:1a:
9b:ea:b7:e0:03:b8:88:31:d9:e7:1e:be:6d:15:00:
c7:0c:c3:ca:ad:46:c5:11:cf:cb:22:44:1f:01:cf:
5e:aa:04:a4:14:9c:0e:4c:4f:c3:fd:da:a8:40:c5:
f6:d1:9f:e4:be:b9:72:11:46:39:d7:81:01:a7:9d:
05:c9:ea:bf:be:36:16:66:37:44:57:0b:0b:18:e0:
d1:1f:b4:08:9c:9c:4d:23:f9:f4:52:e0:a9:42:8e:
c6:42:a7:40:11:e3:a0:6a:ce:13:5c:43:37:ab:e5:
0d:23:19:e3:fd:f1:bb:f1:7c:2d:7f:eb:9a:01:d5:
5c:9a:61:b7:e8:1f:7e:16:8e:b2:7e:f2:6d:ab:33:
da:15:e3:b8:1a:67:42:68:d8:28:03:f8:09:73:e2:
c7:59:26:bd:b7:49:a4:b1:5d:76:e7:d9:89:a4:a3:
84:4f:df:1d:22:90:06:0a:2c:f1:37:39:6c:bb:84:
fa:c8:0a:91:84:a2:ce:ad:ec:a8:21:9f:39:22:84:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F3:A7:63:32:18:A3:B7:CB:08:7B:10:00:E8:40:AA:06:73:F2:AC
X509v3 Authority Key Identifier:
keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:30:2f:4b:23:88:a0:bf:50:1a:41:f4:1f:16:25:6c:4a:11:
cc:75:67:04:3b:ce:db:64:8e:e6:7b:e4:e7:43:d1:1e:11:90:
9d:19:ba:98:b2:55:7e:d8:67:1e:68:84:5f:0f:0f:ea:17:12:
8c:73:50:41:85:a7:1b:4c:92:e6:77:01:d1:e4:55:fe:9d:99:
88:67:02:b9:4e:80:06:09:e5:ca:33:a4:5f:7b:c2:04:a2:93:
dd:19:6c:8a:5b:f7:d0:29:42:7a:2d:86:60:f4:6b:eb:0a:2a:
fe:fe:c3:6b:31:9c:69:99:41:82:aa:a7:1f:cd:0f:66:2e:14:
01:ad:80:e2:be:a8:46:6c:5f:cf:79:13:e5:14:39:72:3d:30:
36:54:3a:58:fb:e4:7c:aa:68:56:e8:5b:0d:c2:90:b5:0f:a9:
a1:2a:f7:92:ab:89:ac:ff:55:51:dc:23:65:2a:0d:82:21:47:
30:4c:17:1d:ce:d8:4b:2f:82:5a:32:94:47:c8:14:f0:02:9f:
0d:12:43:e4:82:b8:a2:b4:ec:d7:c5:06:1b:23:92:6a:8e:16:
97:f8:1a:25:d3:52:5a:38:8e:02:68:08:40:85:db:08:53:b2:
43:47:4b:48:56:d4:ae:d5:62:7a:13:f2:ec:bb:47:ea:c1:71:
fa:94:36:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:04:24 2025 by rpki-client