
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
File: Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft (raw, json)
Hash identifier: wJ4jPuxHWT9CU9BvEwBdAXY+g/q74ZYkig6sax+Y2yc=
Subject key identifier: 31:73:3E:75:B1:70:79:BD:25:0F:F2:14:EA:2B:EE:E6:5F:F7:9C:AD
Authority key identifier: 32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E
Certificate issuer: /CN=32ad7f7d838485a19e00279968a9b98683a4c56e
Certificate serial: 01974A4367690D7D7F96213E7FC967EE40D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 12:00:20 +0000
Manifest this update: Sat 07 Jun 2025 12:00:20 +0000
Manifest next update: Sun 08 Jun 2025 12:00:20 +0000
Files and hashes: 1: Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl (hash: vMXZ3dJr5JNbmzpU5yoLy9AlMTm8e42usY2sxRbd3Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:67:69:0d:7d:7f:96:21:3e:7f:c9:67:ee:40:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ad7f7d838485a19e00279968a9b98683a4c56e
Validity
Not Before: Jun 7 12:00:20 2025 GMT
Not After : Jun 8 12:00:20 2025 GMT
Subject: CN=31733e75b17079bd250ff214ea2beee65ff79cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:5e:05:af:f7:07:11:9b:95:62:e6:64:53:
8a:c8:62:e8:a6:ee:9b:7b:0d:4d:cf:50:5f:e5:e6:
78:13:81:c7:e1:e2:49:53:b8:09:ac:95:0f:13:39:
b5:bc:3f:3c:7d:47:cd:7d:27:46:5c:cf:e5:b0:a8:
a2:f0:99:70:55:14:bd:45:cb:2a:96:7c:ba:d9:97:
ac:bd:4b:88:7c:78:02:cc:6c:0d:f2:89:8c:eb:d6:
02:1e:e3:9f:a0:35:d3:f5:00:37:dd:8e:93:94:61:
cc:ea:12:f0:55:05:74:41:e4:de:a5:0a:79:12:ae:
ea:aa:72:1a:72:12:65:0a:4a:28:74:30:23:f5:9e:
14:d7:90:02:c8:5a:c0:ce:9f:a4:0d:98:9b:a5:0b:
20:1c:cb:83:7b:a2:f3:38:68:37:f0:40:2b:8e:07:
50:a2:98:8c:60:56:07:e6:b3:5c:e1:82:34:dd:b7:
5b:bb:db:fc:85:b0:b7:52:da:c4:08:f0:e6:83:ea:
8c:f8:66:85:ed:26:07:2b:d1:4d:db:6d:1d:54:a8:
28:85:2a:ca:3e:84:c7:db:2b:eb:cb:c1:63:79:c3:
37:7d:77:e9:7c:9f:53:e5:8b:95:b5:c3:17:da:e7:
65:2d:ce:68:4c:4a:aa:ab:c6:18:39:99:06:30:f3:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:73:3E:75:B1:70:79:BD:25:0F:F2:14:EA:2B:EE:E6:5F:F7:9C:AD
X509v3 Authority Key Identifier:
keyid:32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:57:3b:a7:0f:be:d0:ea:24:65:4e:ea:1e:22:00:2d:28:85:
bc:46:6d:17:4d:38:34:71:c4:5f:9e:ff:78:c5:a1:7b:62:7a:
12:96:f0:05:c0:09:10:cd:53:ff:59:1a:00:70:9b:01:b5:09:
03:ea:41:18:b4:58:4b:5c:ca:d0:0b:1e:0a:b3:e1:9b:42:15:
f6:74:73:f1:dd:d5:fc:23:47:cf:93:9d:16:be:f3:19:1a:4e:
c3:7c:fb:62:0f:1f:eb:d9:78:3d:75:90:f3:81:06:7d:7c:29:
8d:10:13:8e:d5:01:78:29:1c:8a:19:1f:d7:57:9c:73:2a:ee:
a8:c7:46:85:5e:08:72:23:c4:e2:1c:e4:5f:47:b4:ec:e2:a4:
7c:31:7f:08:a0:a6:1f:e9:6f:bc:8c:02:27:4f:b7:83:a0:3e:
93:24:f0:71:3e:0a:7a:b5:fe:36:35:ee:b6:50:8f:a8:68:e3:
1d:58:9d:2f:4d:48:c0:1e:d0:55:7b:18:ac:c2:8a:f8:6e:05:
46:9a:54:11:7d:b8:14:1c:6f:e2:fe:61:b5:cd:56:d6:ae:0e:
d8:db:47:26:7d:58:e4:ba:25:cf:bf:3e:8f:23:eb:36:7a:08:
62:46:dd:8f:cf:66:b2:4d:25:f8:82:76:b5:9b:51:ce:10:f5:
d4:d4:d1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:36 2025 by rpki-client