Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
File: 1Cq3jtp78B2VtZd07TRry_lqJoQ.mft (raw, json)
Hash identifier: /IVD99M7lamFane5LPucZjzCGVJAnH9pP296qWK+SDE=
Subject key identifier: 83:CA:20:87:71:DA:DF:52:A5:69:71:74:34:B8:FB:DE:50:4B:D5:CB
Authority key identifier: D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
Certificate issuer: /CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Certificate serial: 019767726CBC03E22175A5C03136DBAE2DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
Manifest number: 05DA
Signing time: Fri 13 Jun 2025 04:00:41 +0000
Manifest this update: Fri 13 Jun 2025 04:00:41 +0000
Manifest next update: Sat 14 Jun 2025 04:00:41 +0000
Files and hashes: 1: 1Cq3jtp78B2VtZd07TRry_lqJoQ.crl (hash: TBJeYRj9ieay4FafWuwX4/C4ULdWxuM6S/H4cCQD3BE=)
2: veEHXuiIgvjqTG6WTLvj8TN1Y9c.roa (hash: zCX9I5DqbiV1NyDUSWL69SaWgCwLBmNnvgRIApALMN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:72:6c:bc:03:e2:21:75:a5:c0:31:36:db:ae:2d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Validity
Not Before: Jun 13 04:00:41 2025 GMT
Not After : Jun 14 04:00:41 2025 GMT
Subject: CN=83ca208771dadf52a569717434b8fbde504bd5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:91:11:2a:68:1b:d7:49:79:28:1c:36:5c:
14:5a:2a:5c:92:46:9e:ce:f6:50:28:0c:06:0e:c4:
7a:7f:74:5c:f2:4a:74:2b:44:aa:a4:2f:74:59:16:
37:90:84:e4:c4:d6:23:33:1c:2f:27:86:b8:ee:b9:
ed:96:3d:f5:b1:5f:0d:28:ea:ef:74:e6:57:97:10:
8f:31:b7:21:38:ff:c3:9c:89:e7:f4:ab:0e:83:73:
52:16:b7:18:77:4c:c4:30:54:e9:58:50:0f:17:61:
75:40:1d:dd:f1:e8:fd:c4:63:ea:1e:83:e4:cf:01:
86:36:cf:7a:7d:23:15:49:8d:e9:21:7f:b3:0c:17:
c3:db:39:7b:9e:4f:af:06:0d:a8:e6:79:d8:12:0b:
ef:d9:f7:d9:75:74:ac:c6:af:eb:2f:fe:fb:0c:6a:
e1:42:2e:1b:99:c1:3a:44:c3:7b:52:de:c0:51:64:
97:56:5b:be:51:76:f8:16:7e:c6:f5:3a:27:e5:fe:
89:ee:35:95:f7:51:b2:b5:f2:29:b9:5e:16:4e:b5:
5f:ed:0c:56:c4:d6:a2:43:4b:93:0b:f5:b9:2b:86:
22:f5:10:98:87:cb:65:6f:9c:15:3f:b3:37:98:5d:
25:09:2e:ff:12:77:f2:59:e5:6d:23:78:f1:91:22:
e6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CA:20:87:71:DA:DF:52:A5:69:71:74:34:B8:FB:DE:50:4B:D5:CB
X509v3 Authority Key Identifier:
keyid:D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:97:cd:3a:c8:1e:27:4f:43:15:34:94:28:6d:81:56:77:81:
c2:58:cc:e0:65:6b:df:c7:fd:2d:c8:45:33:85:40:b6:ea:80:
4c:5e:54:12:db:d5:a6:c6:1e:3f:14:7e:a4:e6:6e:47:bd:56:
fe:c4:25:b8:0b:99:af:03:bc:e5:48:81:96:07:01:33:e5:25:
f9:00:1c:d4:3c:38:11:4b:8b:85:37:33:eb:bb:fd:a5:dc:2d:
28:da:17:55:6a:23:94:71:30:24:22:34:3f:f1:7c:f6:cc:52:
82:6a:76:9b:85:ef:40:31:31:7f:7b:46:c2:3f:86:e1:2c:d8:
e7:74:3c:78:0d:ea:1e:e7:97:87:44:a7:5f:95:9d:ef:c4:5d:
5c:95:1f:47:8e:0a:79:e4:15:6a:20:20:14:cf:fc:f3:89:a4:
6e:4c:d2:60:fc:dd:ad:30:11:6d:b6:56:2d:57:c6:e4:83:87:
4f:3d:9b:c8:97:78:dd:5e:b4:32:3b:b6:e2:8b:f6:8f:37:53:
7a:91:be:e2:9a:80:59:07:12:52:95:1b:44:06:79:ea:36:97:
26:cc:ce:e2:4b:b9:9a:f9:73:7a:f1:4f:c3:67:c7:12:d9:c1:
4a:8f:f2:7d:7b:22:80:b8:e3:91:e4:99:02:ee:ca:1c:c3:5a:
a5:ea:d7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 06:42:54 2025 by rpki-client