Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
File: Q1lOVdyWy5uYClKqY35IqNhzicA.mft (raw, json)
Hash identifier: SeM4WAfhCPnUwAjIwm4RXbiLhi9JS/CTyGfQLy331gs=
Subject key identifier: 91:65:31:FD:FD:A3:62:CA:A2:95:4B:E1:51:D2:54:32:9A:FE:71:90
Authority key identifier: 43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
Certificate issuer: /CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Certificate serial: 01974E8E79E40912CC21A2E1C19C013FB680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 08:00:49 +0000
Manifest this update: Sun 08 Jun 2025 08:00:49 +0000
Manifest next update: Mon 09 Jun 2025 08:00:49 +0000
Files and hashes: 1: Q1lOVdyWy5uYClKqY35IqNhzicA.crl (hash: CZxy2zCR3jhEunCCksz+2LrKj4JP0G2y/BbkYwMgSq4=)
2: ZV9AgWO6uhagwHDD9I6tZkK9CXE.roa (hash: r40ZyDvHygBFDbvKP6P/hRu0VsEVvZUOQj6L+ANjkj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:79:e4:09:12:cc:21:a2:e1:c1:9c:01:3f:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Validity
Not Before: Jun 8 08:00:49 2025 GMT
Not After : Jun 9 08:00:49 2025 GMT
Subject: CN=916531fdfda362caa2954be151d254329afe7190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7e:df:65:bb:a9:a2:94:19:07:39:14:1b:65:
c2:a2:cd:6f:af:8c:af:fd:f8:ab:9a:c2:bf:5d:6f:
e3:4e:9a:ea:bb:1f:0a:57:58:13:5f:9c:5e:2a:ec:
34:a4:3d:0b:91:08:e2:58:d2:25:60:3a:c8:50:93:
bc:45:3c:af:e2:40:83:e4:83:00:04:3b:56:0d:51:
42:d8:da:51:fd:9e:59:5c:d9:b9:18:2b:8b:4c:09:
57:9d:c7:be:5e:ea:ca:23:11:87:2b:f5:b6:9a:0b:
e6:b4:a7:3a:b6:a9:33:80:1a:18:99:ad:49:74:da:
2e:dd:12:12:9d:d6:0b:df:8b:0a:dd:d8:98:7d:f8:
6c:d0:0a:01:4a:bb:a4:7b:cb:83:93:e9:28:51:a1:
28:f1:a7:84:88:a2:dc:0e:fe:26:25:69:76:3c:b4:
59:bc:59:e4:70:05:36:cd:03:5e:57:c9:42:55:0d:
e3:89:e7:c6:70:36:04:ee:c4:53:fd:bb:8c:0a:e5:
02:1f:09:82:6e:6d:a0:1b:12:55:a4:2a:af:f2:22:
74:4b:f6:0d:5f:84:f2:c9:d0:db:21:d3:68:c2:80:
9a:da:13:66:e5:41:d9:ab:60:2f:d6:75:f0:4f:84:
d7:1c:a9:d8:6c:0d:15:4b:29:f2:56:63:26:ba:01:
17:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:65:31:FD:FD:A3:62:CA:A2:95:4B:E1:51:D2:54:32:9A:FE:71:90
X509v3 Authority Key Identifier:
keyid:43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5b:cb:5a:94:b0:45:dc:9e:9c:ac:f5:4b:81:a5:32:9d:81:
04:e4:16:82:d7:30:7e:fb:93:02:17:dc:3d:de:73:0f:c7:24:
38:93:52:20:94:7b:c1:c2:3b:88:ba:f3:72:77:71:67:a3:ea:
6e:8c:e7:0b:9e:7f:07:eb:f5:2c:24:66:f5:05:28:65:64:74:
7b:c8:b1:a4:27:a1:1c:77:7a:db:a0:40:b9:97:94:a6:d5:c2:
a3:67:bf:bd:29:0a:69:d1:d5:30:40:aa:63:05:82:b2:0b:70:
58:e6:16:08:fd:db:2c:91:db:d7:e9:7e:75:71:ad:a7:22:c7:
4a:75:3a:a0:d5:ef:28:ee:63:d1:a1:60:31:33:6b:ae:64:d6:
78:ec:87:98:ff:5c:34:ca:78:70:37:b0:1d:28:20:8d:ec:3b:
3c:a7:47:7b:34:bf:b1:bb:4b:70:c9:5c:d3:e6:03:ea:e8:18:
93:b6:9a:e3:1c:03:e7:23:a9:a5:fb:4e:34:c0:8d:2f:c0:80:
3d:7f:da:c1:28:0e:90:e9:4d:6d:40:fd:c6:bb:3d:2f:c2:51:
dd:b2:d9:d7:e3:df:ca:71:89:32:11:2e:1a:bb:23:96:92:15:
b7:79:61:2a:40:f6:c4:fd:48:e4:ff:5b:f6:80:7f:17:f8:0d:
b6:3a:d1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:01:04 2025 by rpki-client