Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
File: Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft (raw, json)
Hash identifier: 4V47jpgZTwvsXj0iKHgvCsZIDCG492iNxS+3hegAaQE=
Subject key identifier: EF:78:08:BF:63:6A:EB:D3:0E:F4:F1:9C:05:B8:15:7F:3A:1B:C2:E3
Authority key identifier: 43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
Certificate issuer: /CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Certificate serial: 01974DB2D297AAD5C6FC4B177BCD9DDD71B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
Manifest number: 1003
Signing time: Sun 08 Jun 2025 04:00:54 +0000
Manifest this update: Sun 08 Jun 2025 04:00:54 +0000
Manifest next update: Mon 09 Jun 2025 04:00:54 +0000
Files and hashes: 1: Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl (hash: 4Y8xDciitKla8jsyIyVGnSJgxUM3Vh1KK6vneHgnfps=)
2: TrfKChON90CRCXVKGdWD_lFGLCU.roa (hash: GFMm+kc1nJBxOyEj3z/q6lfVZK3yETv8yRHloXoAgN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:d2:97:aa:d5:c6:fc:4b:17:7b:cd:9d:dd:71:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Validity
Not Before: Jun 8 04:00:54 2025 GMT
Not After : Jun 9 04:00:54 2025 GMT
Subject: CN=ef7808bf636aebd30ef4f19c05b8157f3a1bc2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:a6:5e:b7:79:7b:fe:82:22:b1:5b:e2:4c:
8d:e5:ba:f0:f4:ce:c2:71:55:e5:35:b2:06:38:89:
97:05:5a:fd:1f:af:c6:83:64:a7:5f:b8:cb:1b:5d:
1a:2d:0a:ce:3f:54:9a:40:5c:24:ba:a4:80:fe:f8:
ba:f7:57:d7:b5:d2:54:5a:64:8f:97:51:4f:6b:7c:
0e:6c:4c:d1:3e:b7:a6:1b:9e:ae:28:83:9a:d2:6e:
14:86:1d:cd:3e:52:6b:d2:16:86:dd:84:8e:7e:28:
63:c2:f8:3c:f2:9a:bd:31:d3:dc:a0:a1:5d:36:a5:
11:e5:ce:01:6a:a0:bb:c5:73:49:9f:36:75:73:b9:
46:f0:26:bc:d8:b8:d9:f0:93:95:90:6e:c3:dd:f6:
77:f6:99:a8:03:09:b0:28:1a:b2:d4:6c:5a:95:b4:
3c:59:af:39:f5:cf:49:e3:bf:70:57:24:2c:50:58:
bf:63:e5:69:96:7e:43:c4:5d:ec:b3:8b:f9:1c:0c:
2a:b3:bc:6d:f1:ba:98:ab:c4:c3:30:72:0e:f0:c9:
1a:94:46:74:06:20:06:70:40:16:9d:b1:84:dd:48:
c5:ae:a0:a9:22:8b:11:d3:2f:85:36:0f:6c:98:f7:
b2:c0:a2:29:59:91:ba:3f:2c:4c:e4:2c:2e:a0:bd:
4f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:78:08:BF:63:6A:EB:D3:0E:F4:F1:9C:05:B8:15:7F:3A:1B:C2:E3
X509v3 Authority Key Identifier:
keyid:43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:96:d6:df:d4:3f:65:cd:49:69:cb:ed:60:4e:b0:f3:ea:06:
9a:a0:0c:a5:e4:6b:e7:95:14:26:10:60:e0:a6:15:ce:f3:44:
4f:01:e5:fa:55:71:01:e0:9e:b5:54:4d:38:2c:a8:b7:81:a1:
90:1e:e1:fe:92:2a:51:3b:21:97:f8:78:b2:6b:c2:d2:43:87:
eb:5e:64:b8:08:17:ed:56:36:99:be:1c:ad:1e:ab:28:d7:db:
37:4a:ed:49:f1:0b:52:cc:c2:d7:d5:31:a4:10:c3:a3:1f:53:
f0:3e:df:69:21:90:c3:d2:d6:75:87:40:b3:f3:9e:12:66:02:
f4:5e:ac:1b:5a:e1:cd:cc:a6:1e:70:a3:39:c5:85:7a:15:1d:
80:73:24:a3:85:47:e3:c5:ec:47:f7:1e:00:4b:e1:73:7c:34:
d9:eb:1d:6f:cf:8b:fa:8d:7a:fa:23:27:d2:1f:5e:99:2c:f7:
ef:ce:f2:24:ec:63:63:29:a9:ab:45:76:9a:9a:3a:b8:61:e8:
51:cd:25:52:9c:95:11:89:6f:47:3c:25:3e:14:02:32:bb:51:
61:5c:f9:75:5b:ab:6a:f9:bc:76:e5:49:03:20:7c:31:57:22:
9a:52:8e:39:b6:6d:d0:a6:4f:54:e4:b7:89:a5:6a:32:4c:f6:
51:0d:d3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:53:41 2025 by rpki-client