Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
File: mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft (raw, json)
Hash identifier: bIZ5q0XP5AizsTfAqT9Odw0UkskNF0EPVOzobGuGzn0=
Subject key identifier: C2:99:1B:F3:35:FD:64:9D:85:3B:E0:65:B4:6A:F0:47:46:1A:2D:EE
Authority key identifier: 9A:A6:64:66:2D:B3:7F:AF:9C:B5:38:09:F8:18:9F:64:54:2A:8F:64
Certificate issuer: /CN=9aa664662db37faf9cb53809f8189f64542a8f64
Certificate serial: 01974BC42C0147C9DAC07DFD07185DD7F206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 19:00:36 +0000
Manifest this update: Sat 07 Jun 2025 19:00:36 +0000
Manifest next update: Sun 08 Jun 2025 19:00:36 +0000
Files and hashes: 1: mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl (hash: q8q/w9Q45HaMs7U4Ks4Tv9+gXRSrX62Ba6v9FfW1DKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:2c:01:47:c9:da:c0:7d:fd:07:18:5d:d7:f2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aa664662db37faf9cb53809f8189f64542a8f64
Validity
Not Before: Jun 7 19:00:36 2025 GMT
Not After : Jun 8 19:00:36 2025 GMT
Subject: CN=c2991bf335fd649d853be065b46af047461a2dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b6:2c:4d:6b:52:f9:5a:42:34:e7:9a:6f:dc:
2c:4a:8b:31:1f:d5:74:d9:59:69:16:fa:43:66:d5:
c2:26:ea:b0:fb:4e:8f:90:8f:c7:0e:32:dc:ef:d8:
d7:b0:62:86:93:09:7d:a7:27:9b:03:1a:9e:d6:09:
55:09:9b:26:72:c3:46:aa:dd:d2:93:33:26:cf:8e:
3f:c5:be:87:11:cc:9d:4f:b0:3b:82:ba:52:2f:21:
44:e4:30:e9:e4:f2:6f:d0:d1:ac:21:56:e6:e8:9c:
f9:54:49:04:fc:7e:ff:2c:13:a8:60:00:69:e9:d1:
9b:65:c8:a2:d4:5f:56:9f:73:7b:b8:c5:fc:dc:a5:
e8:59:78:93:23:93:96:8f:4f:fc:54:af:a7:6e:b1:
00:41:af:be:6d:84:76:1e:6d:d3:e5:b2:a9:b8:62:
9c:19:46:3d:bb:1e:60:74:22:95:18:46:e0:ba:1c:
26:9f:db:2c:e9:3d:41:85:1b:6c:0e:6c:78:82:76:
1a:85:6f:58:0d:88:51:d5:e7:60:53:1f:5b:0d:7b:
5f:6e:a4:de:dc:54:bc:9c:b2:a5:10:ea:6f:4a:00:
96:90:3b:83:1a:67:18:44:54:a0:ee:5b:e8:ba:c7:
4b:4a:1c:ea:0b:19:4a:0c:6e:1b:a5:81:ed:b1:ae:
10:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:99:1B:F3:35:FD:64:9D:85:3B:E0:65:B4:6A:F0:47:46:1A:2D:EE
X509v3 Authority Key Identifier:
keyid:9A:A6:64:66:2D:B3:7F:AF:9C:B5:38:09:F8:18:9F:64:54:2A:8F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:c9:d1:76:ae:fd:20:95:93:1c:28:73:4a:f6:b0:ac:42:b3:
de:db:e2:33:89:45:80:0e:60:6f:ca:89:6b:2d:e1:c4:f9:01:
d1:3f:fb:2f:3f:2c:23:81:2a:c1:37:4b:8a:8d:c9:21:c7:0c:
a5:03:97:51:23:d1:de:12:20:da:f0:05:a7:9e:67:d6:27:6b:
4f:2d:93:10:82:58:15:74:29:97:b2:df:25:a6:c4:df:20:93:
44:e6:c4:bf:24:21:82:ee:18:b1:98:94:d4:fd:84:83:ee:18:
24:e2:0f:40:81:1c:c0:95:93:45:16:c8:1e:54:17:e3:e9:f4:
bd:40:39:e2:dd:bf:ee:19:d1:48:1c:1b:1d:fc:95:de:68:49:
c2:d6:bb:f0:a4:49:d3:5a:df:42:c0:8c:29:4f:99:27:67:0b:
26:0f:5b:53:33:2d:8d:bb:70:b2:18:50:ec:fd:c6:bc:0d:e0:
89:f5:4e:04:31:90:f5:32:f2:e9:3d:9b:16:95:d5:9d:99:86:
e5:3f:b2:41:10:a7:2e:69:ec:88:90:03:03:9d:42:05:a1:fd:
5a:c6:e8:dc:9f:0c:65:cc:d9:06:54:80:89:4f:ee:b5:d8:67:
c1:2a:bb:0b:2d:08:d9:a7:87:b1:bd:c2:76:6a:5a:40:45:54:
d4:cd:21:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:09:12 2025 by rpki-client