Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
File: r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft (raw, json)
Hash identifier: TQj2gd7WI6UGwzAlDzBnpXtaH7VNW++61dcIraO6V34=
Subject key identifier: F7:60:87:11:F3:7E:98:3A:2E:84:5F:99:1B:50:71:2B:D3:44:3C:46
Authority key identifier: AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
Certificate issuer: /CN=af542dad0baede4a8b1150f459a03f011cdba654
Certificate serial: 019749D58B63733B31380F43F5781A5D7509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
Manifest number: 0222
Signing time: Sat 07 Jun 2025 10:00:20 +0000
Manifest this update: Sat 07 Jun 2025 10:00:20 +0000
Manifest next update: Sun 08 Jun 2025 10:00:20 +0000
Files and hashes: 1: r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl (hash: I56EmaDI1z435UA47E/HxOXnXKaHIg735E/PwnZBzWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:8b:63:73:3b:31:38:0f:43:f5:78:1a:5d:75:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af542dad0baede4a8b1150f459a03f011cdba654
Validity
Not Before: Jun 7 10:00:20 2025 GMT
Not After : Jun 8 10:00:20 2025 GMT
Subject: CN=f7608711f37e983a2e845f991b50712bd3443c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:d1:00:23:7d:31:14:25:44:8c:93:5b:1a:
d4:57:9c:4c:36:12:01:13:ea:12:ed:30:99:70:b1:
1a:63:5a:73:64:d5:e8:af:65:e5:9e:36:c3:78:78:
a8:ab:a1:76:de:15:54:e0:a7:83:c5:87:48:ad:6f:
e2:42:32:96:7a:cd:d0:cc:ed:e5:16:fe:9c:c4:de:
6c:fd:16:17:50:8a:dd:33:2a:60:97:11:86:00:e9:
89:05:fe:3d:bb:f8:e6:f9:e7:b8:dc:b3:ac:62:94:
fe:b6:b3:4d:d1:85:1b:4c:f1:d5:5f:4c:1d:32:8c:
c3:49:4d:5f:46:7a:c5:43:fc:69:e3:6d:0d:41:89:
54:93:4e:eb:b6:ae:11:53:ae:d9:64:50:37:09:ec:
44:d7:73:64:53:e1:2f:af:66:16:00:3f:fb:8c:3c:
e9:35:c8:55:6d:c4:af:0e:a0:18:89:fc:be:89:0d:
4a:dc:0e:c3:e7:99:e7:e9:d7:15:0c:40:64:b1:fe:
17:a2:2e:ba:f2:5f:d1:36:d9:5e:aa:ba:6e:00:09:
70:a4:a1:36:42:77:38:74:9f:b8:40:11:3b:45:0f:
19:e8:54:7e:5d:59:87:ae:ec:eb:c1:d7:e0:9d:6d:
83:e6:d5:81:a0:1a:41:1b:de:31:42:8d:f9:89:92:
60:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:60:87:11:F3:7E:98:3A:2E:84:5F:99:1B:50:71:2B:D3:44:3C:46
X509v3 Authority Key Identifier:
keyid:AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:20:68:22:34:b8:16:53:9a:3e:89:6c:4d:9b:93:c2:b7:c8:
e3:ff:d2:ca:95:eb:35:c9:1a:60:1c:61:80:71:85:c7:a1:86:
10:f7:dc:32:b6:1b:38:96:16:64:ca:9c:ca:86:d1:57:0c:d7:
5c:3a:26:51:71:46:7d:81:f4:3a:28:e0:23:c2:02:a3:bf:a1:
60:50:ef:d7:55:68:bc:8a:47:64:b0:ab:13:80:03:4a:16:95:
37:14:c1:f1:7c:91:4e:d3:ff:61:d1:0e:ca:00:19:40:09:08:
3f:3a:3a:b8:00:80:56:10:57:86:48:08:5d:77:b2:65:2f:66:
a7:43:2a:9c:ca:dc:36:53:f8:f1:81:c8:d2:81:4c:8c:5e:d8:
07:05:f3:fd:48:df:ce:ae:66:f1:07:99:b3:e4:69:13:a6:ee:
96:71:58:3d:03:8b:d7:ed:93:0d:7e:61:2a:a5:54:7c:43:4d:
55:16:26:25:67:11:fd:90:ab:08:74:46:36:fa:8b:50:d3:fa:
73:13:7d:78:c8:08:b1:e4:10:4b:3d:3d:13:e7:2c:d0:99:9c:
92:b7:aa:85:b1:d4:27:08:97:1b:fd:cd:e3:b6:cf:e8:1a:b8:
08:d7:ea:94:94:ef:43:26:61:4e:70:34:e7:a3:89:85:b4:94:
b7:6d:25:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:58:25 2025 by rpki-client