Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
File: Q1QWsigrRTPDUJwY6VfODINryDc.mft (raw, json)
Hash identifier: VuD36vyYz3Ntx7hpJlnEWwk4mRcue9l8qU/NDsh6gfw=
Subject key identifier: 31:DE:86:35:CA:79:0C:20:67:DC:55:88:57:05:99:FB:ED:7D:18:2C
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 019727EF6226F90D77934583EFDF8C8743FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
Manifest number: 0D5A
Signing time: Sat 31 May 2025 20:01:28 +0000
Manifest this update: Sat 31 May 2025 20:01:28 +0000
Manifest next update: Sun 01 Jun 2025 20:01:28 +0000
Files and hashes: 1: Q1QWsigrRTPDUJwY6VfODINryDc.crl (hash: MqUNS4KVzDGxHawKZEOFblKPnCgNpLREtsMu+mm6cQ0=)
2: Tt9cDnLqp2SOeeoElhH21A1JSmo.roa (hash: g7FEq0smlg0TkkjLfygzTEzTD8KkWT+7GvQHUxPqdJo=)
3: pSYXiKXGXABhmANIG0Y2vhGLRUA.roa (hash: kjXcWabBcy+Nz9B+eKiIbdHIvrnXu/XwD/9ZftdegXw=)
4: uJ1wgWjtfF_PUvxzUj8noSaLQx0.roa (hash: 5K3mYspcTrH8J1dlAJJG2SBHWuIALi8AQG16SYzuq8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Jun 2025 20:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:27:ef:62:26:f9:0d:77:93:45:83:ef:df:8c:87:43:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: May 31 20:01:28 2025 GMT
Not After : Jun 1 20:01:28 2025 GMT
Subject: CN=31de8635ca790c2067dc5588570599fbed7d182c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:2c:7b:a7:2e:7c:95:49:58:e1:2b:8c:c2:
30:a3:4e:1b:f2:3c:13:51:d0:3f:e4:5c:b2:e6:4a:
07:d0:27:37:46:dd:1e:aa:34:fb:e1:99:a0:dc:6b:
56:7b:93:6b:5e:ae:95:38:ee:39:cd:7f:30:b1:71:
89:72:5d:04:dd:04:af:06:05:47:c9:2c:25:13:fb:
35:c4:30:e1:b1:96:6b:6b:a4:b7:84:43:ed:0e:e0:
d8:5c:b1:e6:e6:5d:d5:c7:34:c7:b8:c3:5c:51:6f:
78:8c:1b:33:ab:bd:9f:ef:98:57:c0:b2:96:50:11:
7f:81:09:04:d3:69:20:f7:15:4f:e1:e7:db:ac:93:
3a:9b:36:a5:f1:a7:c3:de:72:f1:f3:aa:7f:d5:b5:
24:9f:16:84:d6:9c:a9:0e:45:d7:5c:7f:09:14:82:
ec:44:d5:a2:fa:d6:74:3f:d8:61:f3:99:77:45:77:
10:c1:57:39:04:0c:9a:a9:c3:d9:e9:7f:1b:4c:84:
be:9c:15:e1:1b:98:04:8c:58:d9:87:3e:4a:ba:b6:
82:05:d2:36:4b:73:7e:16:07:d3:65:ba:d4:c8:fd:
9f:f1:cc:38:24:fe:df:1f:e4:00:29:a0:5f:18:7d:
41:ed:17:41:bb:64:0d:dc:d4:08:48:cc:dc:16:a8:
c0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DE:86:35:CA:79:0C:20:67:DC:55:88:57:05:99:FB:ED:7D:18:2C
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:16:38:62:04:49:89:6e:7b:98:65:3b:55:e0:cd:46:e9:41:
e3:50:5d:02:a1:37:d8:7d:10:81:7a:2d:c6:32:eb:e2:9b:a6:
00:4d:ec:75:27:03:24:25:23:8f:5a:fb:73:86:95:b9:c4:6a:
00:2f:43:21:24:62:15:cd:35:d6:12:81:52:03:25:09:6a:58:
9d:96:79:be:ca:8d:c8:7d:bf:6b:a1:d0:20:24:01:bb:d9:36:
83:ab:01:1a:91:7a:a3:d3:60:ab:7a:a6:52:ce:9b:91:b4:17:
5b:98:41:13:9c:28:ab:18:de:ec:76:5d:f2:4f:64:cb:9b:13:
52:0f:b1:df:e9:0f:48:8c:41:c7:4d:04:66:4b:61:bb:93:31:
d5:01:77:dc:94:c3:6a:0a:82:9a:f6:58:0a:ab:d5:dc:82:df:
4b:67:c5:14:bf:4a:1e:dc:d4:9f:ab:ea:e1:bd:0e:bf:ba:91:
df:de:65:7c:d5:a8:09:9d:7c:3c:3e:fa:17:69:46:82:6e:fe:
cd:2b:9d:04:97:22:1b:b6:6a:75:30:d8:30:ff:10:47:a7:18:
97:56:8e:6f:23:65:51:c0:4f:66:05:b7:ad:fd:d3:35:e8:ac:
4e:67:ad:9b:72:6b:be:98:e4:7b:a2:1a:a7:ba:f0:1b:08:95:
9b:b2:b6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 05:38:20 2025 by rpki-client