Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json)
Hash identifier: RUpQn1E9Czw3cHzdhRrkYPJrmA8Vud8f+gVIEgG1wSE=
Subject key identifier: 3C:5C:F9:25:D2:A4:FA:3E:78:26:46:E2:80:F4:16:C5:56:61:88:C5
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 01976A3CE7453B3F958EB8F315DFCF7D62FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 17:01:05 +0000
Manifest this update: Fri 13 Jun 2025 17:01:05 +0000
Manifest next update: Sat 14 Jun 2025 17:01:05 +0000
Files and hashes: 1: N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa (hash: Tpui/v5StmkjsF0FORh913wDyuFXShlf6/KyOzlpFaw=)
2: a9P-AA4M71AoAQl3T5rg8IgqWV8.roa (hash: p+vdBIjmH5hq5HNOBx9P2IYX3IN+k3FDRRTfZzHcnHA=)
3: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: UroKlLtXxS3mmnZ8uLJ6DKZrqHkLBlWYHHpJ24VUucg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:e7:45:3b:3f:95:8e:b8:f3:15:df:cf:7d:62:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Jun 13 17:01:05 2025 GMT
Not After : Jun 14 17:01:05 2025 GMT
Subject: CN=3c5cf925d2a4fa3e782646e280f416c5566188c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:98:00:70:34:25:db:fe:95:be:2d:9f:65:
71:77:7e:0a:ed:91:0f:4b:09:63:96:52:32:d8:e7:
af:94:5b:61:11:91:6f:48:0c:aa:f4:fa:bb:c0:34:
60:4f:89:82:14:aa:87:d4:5a:80:e0:77:9f:dc:8c:
9c:9f:08:61:fb:a5:39:33:59:d0:51:c2:60:9c:de:
41:2c:8b:56:55:67:e2:70:b3:93:f3:a1:cf:2f:82:
36:2c:9f:ba:c5:29:d4:51:1a:bf:8e:4a:87:ad:cf:
ee:8a:f2:b9:ee:a9:b9:c0:ae:2a:2a:c6:66:d5:81:
69:17:f6:52:d5:ad:1a:ea:85:47:be:97:0e:19:ce:
b0:f3:e8:ab:45:bd:41:33:0c:44:87:de:c7:94:49:
36:56:96:94:b1:53:17:54:18:84:ab:c4:fd:93:41:
e5:35:e5:91:d7:cc:06:f2:ca:90:97:84:28:80:2f:
15:62:41:7f:95:e1:64:f4:91:20:f4:b3:11:34:83:
e5:94:f3:fc:ac:9d:39:b6:ca:98:db:e7:2f:8f:7e:
bb:40:4a:6e:e5:55:f2:80:ed:25:5f:6a:20:63:d7:
2e:07:d5:e7:e5:5e:e5:bb:d3:ba:cd:39:ee:36:3d:
1e:19:95:13:b2:60:5a:19:77:15:7d:ef:32:bd:f5:
e9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5C:F9:25:D2:A4:FA:3E:78:26:46:E2:80:F4:16:C5:56:61:88:C5
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4b:0d:b6:70:1b:d2:33:fa:a1:b2:43:4b:a1:88:30:fb:d4:
f4:09:ff:cc:eb:bb:84:99:06:6b:59:0b:4a:a6:46:77:d3:90:
a9:93:d2:ea:67:7f:9e:05:d6:d6:31:b9:a0:0e:db:85:1e:d9:
4b:fb:6b:33:ae:72:08:ff:b4:54:c1:b4:42:c6:21:13:ff:51:
3f:8d:16:69:a6:ac:35:52:38:22:8c:ee:53:2b:42:ee:fb:a3:
cd:a8:84:c9:fc:72:2d:56:b0:85:49:70:65:b9:2a:94:1a:64:
95:39:cc:6f:b9:87:cd:ae:ba:71:80:21:e8:b6:a5:db:8a:22:
85:2e:3c:78:bf:1d:38:0c:a3:1e:e9:f5:b5:8e:7c:99:27:5d:
74:5e:ed:94:d3:64:94:80:7f:47:8f:c9:21:4e:50:14:ba:a7:
21:85:5a:77:d0:2f:06:ca:a7:01:86:09:03:7a:f5:ef:58:9a:
18:f8:18:6e:a6:df:bf:81:53:15:ce:a5:2f:ac:f5:45:c9:58:
39:0a:a9:0b:f7:da:19:9d:52:be:a0:7d:0b:f6:c1:b6:7c:aa:
1c:f0:b0:01:31:ca:d6:79:12:83:fb:65:cd:d7:1a:0d:fc:f0:
e7:f0:7d:50:52:e7:3b:be:b2:35:f8:77:cc:83:98:23:40:cb:
46:79:e9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 02:52:08 2025 by rpki-client