Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
File: Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft (raw, json)
Hash identifier: Ocn4QbdgQslM64PhhT7Wf1PBf78ndEx8+mp+kLMzO14=
Subject key identifier: 2E:51:3B:9B:5C:4C:E3:D5:9F:65:DA:94:BA:39:D2:55:F4:B8:D6:EA
Authority key identifier: 43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
Certificate issuer: /CN=4398f624d57f4613c0bf651161c756c316659ab9
Certificate serial: 0197488C6B4FE880AD66499E09A85F531694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 04:00:51 +0000
Manifest this update: Sat 07 Jun 2025 04:00:51 +0000
Manifest next update: Sun 08 Jun 2025 04:00:51 +0000
Files and hashes: 1: Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl (hash: cWEOYGQJau+cjrv9v8zCqo/dIey72ZZJAkCxLOznaws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:6b:4f:e8:80:ad:66:49:9e:09:a8:5f:53:16:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398f624d57f4613c0bf651161c756c316659ab9
Validity
Not Before: Jun 7 04:00:51 2025 GMT
Not After : Jun 8 04:00:51 2025 GMT
Subject: CN=2e513b9b5c4ce3d59f65da94ba39d255f4b8d6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:b9:47:d0:9d:ab:75:f1:b9:6c:66:31:e2:
1d:cc:e9:32:6d:12:db:01:93:7b:69:82:d9:ca:a5:
2b:91:fb:b2:ee:b9:24:08:9d:8b:c3:50:45:e0:40:
b7:09:82:a8:cf:e3:42:71:b8:f5:e1:9a:aa:8c:31:
35:a8:0a:ee:7d:11:4c:80:85:ea:23:ac:db:fa:03:
b9:43:24:1b:0b:c8:8c:d4:b8:05:e8:42:d1:e6:45:
f7:45:33:9a:cf:66:af:44:a3:ff:47:7b:69:f9:ef:
9e:28:b8:6a:1d:80:d6:58:05:52:50:1e:af:82:9c:
76:68:f1:89:26:9e:dc:05:c0:67:34:91:bd:e1:f2:
ad:23:ac:b3:0d:d6:10:48:f4:16:88:d4:42:a7:c9:
07:29:2a:15:cd:97:a9:0a:8b:af:14:8f:b5:3d:11:
90:36:8e:f9:7a:ee:de:71:76:88:01:c5:6a:0e:cb:
22:d4:cd:67:57:1f:98:18:0b:65:e1:a2:f7:6e:d5:
43:5c:34:55:68:f4:9d:01:94:be:50:d0:9b:2d:ba:
da:7c:cc:05:b4:a1:8c:ef:62:d3:ab:d3:af:89:93:
3f:b9:0f:dc:22:17:a4:c2:c0:2b:9c:e5:77:57:66:
04:85:4e:cf:2b:b2:10:e1:cb:75:5b:19:6e:b9:56:
ee:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:51:3B:9B:5C:4C:E3:D5:9F:65:DA:94:BA:39:D2:55:F4:B8:D6:EA
X509v3 Authority Key Identifier:
keyid:43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:63:41:63:4c:3a:8a:ad:db:a1:0f:ed:2e:19:4b:03:af:f8:
de:41:a0:b7:26:09:d1:fc:1a:0a:95:95:79:01:c5:ab:8d:10:
89:d2:0a:c4:34:77:5a:63:13:0f:33:fc:fc:5a:80:89:ec:96:
f4:e6:ec:a5:92:28:15:3d:db:53:eb:a1:8c:fb:ec:86:38:6e:
d4:53:6e:bb:44:4f:1a:bf:d3:e6:d3:48:3d:1c:b7:1d:6b:d4:
92:e2:6d:cf:7f:9d:23:2b:23:b2:dd:08:fe:b3:52:1f:16:73:
1f:21:cb:83:38:29:40:6c:6d:ae:60:d8:a8:bd:5c:e0:b7:89:
72:ec:19:ed:34:25:62:d1:21:99:1b:51:d7:b5:0b:79:a9:60:
38:21:cc:88:ae:dd:77:23:64:33:67:89:b0:79:ed:e8:fa:54:
30:8d:80:1b:b3:bb:78:73:50:1e:27:00:89:6f:a3:f5:92:43:
eb:25:31:f1:ad:48:27:72:77:87:4c:5e:9c:6c:e8:06:3e:03:
b6:36:99:ee:42:2b:d7:9a:36:eb:92:f6:8a:9f:63:94:c0:a7:
51:09:09:4e:1f:51:e2:d3:26:90:4d:96:0c:cf:fc:02:04:4a:
f1:99:6d:a3:bb:c1:a4:d7:7e:01:3d:86:e6:19:df:39:01:fd:
79:a7:e0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:55:54 2025 by rpki-client