Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
File: mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft (raw, json)
Hash identifier: jkBHTHih7nfQyjpZJpwqfedOLwT5FNHRZ8p2gdQpzB4=
Subject key identifier: 37:B9:0E:41:28:55:3D:DB:34:BD:B4:23:C6:D2:C2:38:F9:80:33:5A
Authority key identifier: 98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92
Certificate issuer: /CN=985b50a10d2d58c67503eaaa701e510915dd5192
Certificate serial: 0197470BED9D6BE743541A7D136443E3B867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
Manifest number: 04D7
Signing time: Fri 06 Jun 2025 21:00:53 +0000
Manifest this update: Fri 06 Jun 2025 21:00:53 +0000
Manifest next update: Sat 07 Jun 2025 21:00:53 +0000
Files and hashes: 1: mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl (hash: lgL0eKiG+JcUzomwjAMXy2x5HTOnopNFayawmhwHsrE=)
2: yN69dqz--m8dWXCMtbZ1dGzJo1k.roa (hash: pNrNwHsIk6sG4oFCvOY8zkn+qIXflJs47/VLFYzRdxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:ed:9d:6b:e7:43:54:1a:7d:13:64:43:e3:b8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985b50a10d2d58c67503eaaa701e510915dd5192
Validity
Not Before: Jun 6 21:00:53 2025 GMT
Not After : Jun 7 21:00:53 2025 GMT
Subject: CN=37b90e4128553ddb34bdb423c6d2c238f980335a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:34:98:0f:28:41:d3:a0:50:50:53:b1:a1:8f:
8c:c1:ed:f2:c0:b4:7d:3a:b6:c8:06:a4:ac:0b:d2:
7c:d0:80:cf:88:14:85:53:49:81:d1:f3:f5:ad:7c:
da:83:cc:f8:cf:f7:3f:4a:04:a2:71:e2:22:23:76:
ca:9a:16:3c:46:78:dc:fa:eb:36:e0:2a:e7:ee:95:
17:55:4d:86:e9:c4:78:42:4a:1b:4a:d1:e9:4f:7c:
b1:a0:fb:40:93:38:d8:19:16:ec:7d:d2:15:95:c1:
98:ef:da:ee:8f:24:dc:8a:5f:45:0a:f4:4a:de:7e:
14:84:f8:96:43:2e:0d:9e:bc:55:04:b1:03:54:be:
a5:1c:84:da:2f:8f:a8:db:7e:09:13:e9:2f:45:95:
75:0d:19:c2:27:92:8d:d7:35:6e:62:a6:ce:cf:9e:
24:73:e7:ad:73:b8:af:64:d9:0f:2f:8b:e6:53:ca:
dd:30:e6:79:f5:de:73:9f:5c:28:bd:71:1a:d2:f9:
65:c3:23:8c:75:92:32:9f:0d:e8:44:78:b0:59:be:
92:aa:2c:db:b1:29:ce:b9:32:00:aa:7a:bd:51:d3:
3e:2c:3e:6a:2c:64:03:fa:51:84:2e:0a:d6:b2:6c:
a8:c7:5f:05:c1:ac:c0:15:a6:36:e4:67:0b:34:d4:
95:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B9:0E:41:28:55:3D:DB:34:BD:B4:23:C6:D2:C2:38:F9:80:33:5A
X509v3 Authority Key Identifier:
keyid:98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:29:7a:c1:70:76:21:74:81:a6:40:50:b9:6c:d2:90:81:72:
b2:09:92:a6:b4:29:8f:60:06:8d:6f:4e:34:66:f0:34:8f:83:
24:60:66:c0:d5:88:cc:de:c1:ef:44:fa:ad:00:4a:06:97:a8:
49:7b:d7:39:71:c8:d3:12:e1:89:b5:45:02:ae:85:06:a4:6e:
84:6e:53:75:dd:93:ee:25:67:d3:13:5b:17:51:f9:80:e9:62:
7c:24:98:e4:41:0f:2b:13:18:68:b5:88:b1:2e:97:80:00:85:
46:b7:c3:1a:28:6c:a4:52:68:47:c1:9e:6e:d8:95:14:b6:eb:
3b:36:7f:c5:70:c2:ae:d1:de:c2:84:1d:87:b3:fc:67:e9:21:
4a:ed:5b:7a:1c:36:83:dd:52:15:c7:91:5e:f4:7f:18:11:a9:
28:40:ee:7d:c0:9e:c1:6b:9b:a2:3f:f3:cf:85:85:77:8b:51:
08:b4:bd:00:54:ee:7d:8d:eb:da:da:60:f8:aa:bc:db:88:21:
ff:b5:3b:a5:88:f9:14:c7:67:69:6c:58:8c:79:b1:5f:1f:39:
b9:08:dc:d0:89:7e:7b:ee:fb:01:4e:5c:94:11:45:26:63:09:
02:3b:4f:77:82:c2:47:8e:b7:0f:c3:f9:85:71:4a:7e:93:50:
c4:ec:20:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:35 2025 by rpki-client