Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
File: Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft (raw, json)
Hash identifier: 8ZfLx8nJGeQ2sQ+84SGZgXuYFKau76cheBpDdXbnzGI=
Subject key identifier: 9F:ED:1D:69:DE:F9:E1:32:51:97:70:05:CA:3E:B0:1A:E1:ED:80:29
Authority key identifier: 43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
Certificate issuer: /CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Certificate serial: 01974A7AAB7EB7727911C67EA7228ED3D432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
Manifest number: 053B
Signing time: Sat 07 Jun 2025 13:00:42 +0000
Manifest this update: Sat 07 Jun 2025 13:00:42 +0000
Manifest next update: Sun 08 Jun 2025 13:00:42 +0000
Files and hashes: 1: Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl (hash: XB5kD56S7MoNRRhfgsMGgIHK5ENQEmB2HVguBaQWsng=)
2: fiGpYaULVSGddPa40kO95drtEI4.roa (hash: hSGW2kYFHKKsMMUOHTMd5Mel06lDgF+QorDCIkRAx3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:ab:7e:b7:72:79:11:c6:7e:a7:22:8e:d3:d4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Validity
Not Before: Jun 7 13:00:42 2025 GMT
Not After : Jun 8 13:00:42 2025 GMT
Subject: CN=9fed1d69def9e13251977005ca3eb01ae1ed8029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:49:97:66:e1:df:41:81:ae:7f:3b:34:00:
8a:e1:55:66:9d:6c:0c:2b:9c:02:a8:20:a5:9c:0b:
9b:32:91:37:90:e5:b0:26:8b:bd:1a:c2:ee:2d:64:
5b:8d:24:8d:fd:8d:4d:95:8f:41:ff:8c:87:3f:28:
7f:85:c0:4f:b6:22:a2:1c:9e:09:9c:a7:61:1b:93:
94:7a:e0:21:39:31:03:fd:f4:6f:ae:49:61:f4:24:
b2:55:5b:78:27:4c:7e:cb:65:09:c3:91:94:f3:ca:
a5:c5:a1:97:09:a2:4f:47:b9:f4:84:66:87:2f:ad:
47:14:a2:0b:6f:ed:06:ec:73:63:6a:50:bc:b2:23:
47:db:38:85:91:c7:1a:2e:7d:b6:ef:5a:85:87:3f:
cc:4e:ed:b5:f4:96:c8:a2:68:42:06:7c:89:7b:b4:
d5:d0:5a:4a:6a:53:9d:3f:1e:52:1f:56:5f:12:df:
1a:06:cd:be:bd:a8:07:23:a7:bc:b6:9c:83:e5:29:
26:c7:71:76:de:23:8c:29:34:0d:77:db:d4:c7:d6:
ad:c5:33:be:00:4c:47:a1:34:b0:9d:88:ed:71:88:
5f:35:bf:84:44:fe:74:b8:ed:7f:cc:76:b0:a3:ec:
d6:b7:cf:46:71:96:f3:64:7f:62:5e:28:60:b5:6b:
c8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:ED:1D:69:DE:F9:E1:32:51:97:70:05:CA:3E:B0:1A:E1:ED:80:29
X509v3 Authority Key Identifier:
keyid:43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a5:97:89:8e:93:a2:3c:f3:2d:6f:e1:2f:7f:1e:b7:e4:91:
b9:f4:24:db:be:57:ad:64:3d:5f:e9:c3:3e:52:90:6b:08:50:
a9:3a:c8:cb:ab:bd:c0:11:0f:06:68:f1:04:42:48:87:c5:74:
a5:81:b1:d6:6c:78:36:58:da:63:7b:59:61:b8:ac:4c:37:d0:
b9:16:af:64:e1:d4:9d:b0:d0:c0:9e:6c:9e:c8:7a:11:75:f3:
ee:93:bd:7f:4c:00:c3:1c:45:31:02:9a:61:0a:d3:b4:c1:51:
c7:8b:b9:c9:e1:4b:3d:ca:17:6d:1f:1f:8f:a6:78:81:69:b1:
a1:20:57:ed:5c:85:ee:95:11:ff:e0:d8:3b:b2:c4:f1:df:f1:
7a:83:59:bc:7f:16:26:7d:f7:f4:9d:50:12:4f:5e:8c:a1:fc:
83:a6:97:25:a6:24:af:9e:35:05:f9:18:fd:e4:c5:f6:84:71:
f7:5b:e9:1c:11:37:29:5b:7c:60:2c:d0:df:54:98:14:55:b5:
06:7c:49:ef:b1:eb:ff:7d:d1:6e:d9:f2:f5:0c:fb:a4:aa:55:
cf:f4:63:43:ce:bc:a3:e0:3e:08:aa:cc:82:2d:3c:05:08:47:
d4:7f:20:6c:0a:0f:8f:f8:81:87:53:b7:4b:e8:6f:0f:7b:82:
22:db:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:13:54 2025 by rpki-client