Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
File: Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft (raw, json)
Hash identifier: W65n24Cy3Q1nfCz58jhMydmz2DP1JWg1vmXxvC8dpBE=
Subject key identifier: 1C:0C:CC:1B:11:A9:E4:CF:F9:C0:DD:BB:C5:C3:B8:0C:7D:D2:06:A3
Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
Certificate issuer: /CN=43e0a364131841056d48b2d788ea00ca4b91db56
Certificate serial: 01975121D2D3161E4F5CC18AE2CDE93D5379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
Manifest number: 1586
Signing time: Sun 08 Jun 2025 20:01:00 +0000
Manifest this update: Sun 08 Jun 2025 20:01:00 +0000
Manifest next update: Mon 09 Jun 2025 20:01:00 +0000
Files and hashes: 1: Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl (hash: CkBOraHZkMX6mGvMZZZL+g/j528glj6ZyNMN9VuTlPg=)
2: ymSnyZ91fxVC39LRAlSHciRZ46Y.roa (hash: 9upse4LtnCnU7pMyWCgkPTtYXe3IQqerCyozn8qome0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:d2:d3:16:1e:4f:5c:c1:8a:e2:cd:e9:3d:53:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56
Validity
Not Before: Jun 8 20:01:00 2025 GMT
Not After : Jun 9 20:01:00 2025 GMT
Subject: CN=1c0ccc1b11a9e4cff9c0ddbbc5c3b80c7dd206a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:17:02:d9:24:d9:9a:cc:4b:c6:de:29:44:
79:63:e6:2b:69:57:f7:96:e9:eb:a5:52:b7:af:83:
30:32:77:5d:af:ab:17:e2:ef:7b:48:f1:5f:ff:59:
d0:16:4f:c5:15:39:2d:b8:6a:00:53:41:a0:30:8b:
70:ec:1b:47:0c:51:c2:5f:af:04:df:e6:17:68:35:
35:16:94:26:f8:5a:94:92:9c:30:56:ce:cf:b3:ad:
60:4d:8c:98:8a:14:09:50:0d:ad:c1:1a:07:fa:9c:
9b:f9:26:88:83:9b:26:bb:3e:f1:03:61:0d:e0:3e:
e0:73:5e:84:62:98:22:c7:c9:80:67:f5:4b:f0:06:
59:b2:a6:72:98:2c:90:63:78:a1:1d:d3:63:36:a1:
1d:c3:2d:bc:71:23:9b:cc:c3:68:40:6d:43:95:48:
59:ce:2a:7f:44:b3:83:07:02:15:56:3c:e3:86:98:
be:c6:c9:ef:43:1b:df:9a:97:04:67:4f:c2:00:04:
e2:44:68:08:fc:7a:54:70:36:c8:6c:7a:2e:4c:ea:
a2:a2:78:2a:e4:8d:51:2a:87:a4:9a:0b:b0:d2:32:
10:3e:52:98:a3:2c:8b:70:98:a3:57:85:df:8c:74:
4e:73:c0:42:ed:f3:f3:0a:1f:f2:6f:0d:20:54:cb:
b9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0C:CC:1B:11:A9:E4:CF:F9:C0:DD:BB:C5:C3:B8:0C:7D:D2:06:A3
X509v3 Authority Key Identifier:
keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b5:1d:09:ae:24:d4:80:c9:d7:cc:67:ee:49:8f:d4:95:25:
a3:ce:a5:41:65:7b:63:bf:05:07:0c:a9:a6:a8:f2:cd:a7:d7:
d4:96:09:32:a6:2e:be:d7:63:64:1a:6f:73:46:f0:c4:dd:84:
95:d9:31:91:98:cc:45:7e:f6:01:82:e5:91:d8:fa:0c:84:8b:
a0:23:66:31:b7:91:b4:87:00:c6:01:7b:d0:d8:37:ba:da:13:
00:12:b3:9b:b8:e2:19:a7:8e:31:43:ef:93:5a:16:c9:6c:e8:
41:56:a1:3b:98:07:67:72:8e:a0:c0:df:19:d8:cd:0e:e9:44:
42:27:7a:85:08:8c:d5:ee:b0:d5:66:31:5b:50:80:e7:14:19:
3a:f1:57:34:4b:05:b5:64:1d:24:44:70:1e:03:50:05:e5:14:
32:6f:a8:ef:d7:a4:da:38:b8:02:d8:31:c8:b1:87:0a:e0:6a:
c9:af:1c:f0:ae:7d:3d:01:4a:4a:d3:35:dd:f8:ea:f8:21:54:
99:88:69:58:f9:a9:3f:98:2f:95:01:de:de:d4:78:84:3d:17:
1a:58:3c:fb:5f:56:fd:77:66:d2:7e:a9:67:33:82:b1:65:53:
62:ff:88:32:7e:1d:ca:a3:0e:f5:fb:41:4c:3c:37:92:61:d7:
f8:64:83:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:19:33 2025 by rpki-client