Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier: JR8MzDouuDKPcu5x5dmVsf+xdqr0D3yq7FzdawjyQ08=
Subject key identifier: 3C:FB:48:1B:F4:31:7E:F6:97:7C:FB:7D:54:6C:18:6A:90:51:08:7D
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial: 019749310150F8A3F3D8DAE349B953909A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number: 0741
Signing time: Sat 07 Jun 2025 07:00:37 +0000
Manifest this update: Sat 07 Jun 2025 07:00:37 +0000
Manifest next update: Sun 08 Jun 2025 07:00:37 +0000
Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: SeZMvIVOUKtAMdHttjsnzE2bmN4b9PU+t8tH4kwQtoQ=)
2: z1aZ7-bmH6l6J7mLCP5moL6leU0.roa (hash: yKL3bhklKR6G8Kxo3AuOxdxqmVoJuUJSKeF/iJ4ql/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:01:50:f8:a3:f3:d8:da:e3:49:b9:53:90:9a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Validity
Not Before: Jun 7 07:00:37 2025 GMT
Not After : Jun 8 07:00:37 2025 GMT
Subject: CN=3cfb481bf4317ef6977cfb7d546c186a9051087d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:7d:5e:be:21:0f:b7:63:d7:6b:b6:63:a3:
65:d9:b0:65:0f:6e:e8:cf:2b:26:3e:5e:a3:60:a5:
38:5e:2d:53:3e:13:82:d8:8d:3d:d3:45:1c:47:f5:
5d:ab:b7:47:d4:c6:68:b1:91:e8:19:5a:97:a3:87:
ff:55:2c:f8:27:fa:ca:4e:f5:e0:b1:af:70:f8:94:
69:00:d2:fe:aa:d8:09:05:46:6a:32:09:9d:0e:68:
83:1b:bb:6b:a1:a8:70:67:2d:e7:d9:9e:32:7b:89:
fc:7e:12:a8:c5:6e:eb:44:40:df:4b:08:6c:b9:87:
b9:a1:3e:ae:2e:13:fa:f2:77:48:dc:ff:d3:4d:99:
ed:87:ae:3d:da:77:39:5f:4f:57:dc:62:ba:ac:8d:
d5:3e:ee:46:20:86:c9:82:37:fd:7c:c9:2d:65:73:
e1:98:5f:ea:4d:1e:de:0f:b4:1f:e7:54:a4:13:9c:
5d:53:2d:d6:23:2c:b5:45:d2:c8:b0:23:c2:7f:f8:
5c:25:cc:82:b4:86:fc:b7:51:3c:e5:6a:80:64:23:
20:85:a1:ae:cf:81:5c:a7:ba:ae:d2:27:a9:70:7c:
b1:bd:23:40:9f:3e:92:86:84:13:b3:52:f1:38:45:
89:bf:e4:d5:f7:e2:c0:00:c9:f8:86:70:39:8c:5e:
9d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FB:48:1B:F4:31:7E:F6:97:7C:FB:7D:54:6C:18:6A:90:51:08:7D
X509v3 Authority Key Identifier:
keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fe:c9:60:42:18:0c:8c:80:a7:57:59:b2:f5:5d:55:fa:b1:
1c:6c:f6:0f:e4:c7:59:69:1f:62:92:57:3d:53:82:eb:17:15:
3a:7c:f9:70:d3:6f:9f:28:8d:ef:c9:d9:98:6a:b7:b4:59:c5:
0a:5b:03:c8:b2:5a:9e:0d:b5:26:bb:d7:bc:36:38:92:a0:24:
40:21:d0:49:33:7c:11:bd:81:88:1c:6d:bb:b2:86:22:54:c3:
2c:40:5b:50:62:98:da:4f:21:3f:b7:d9:54:c9:33:e8:c1:67:
7e:99:52:9b:70:da:5e:78:03:89:2b:3d:07:9c:f5:52:aa:79:
4f:eb:f0:e1:fb:6f:fa:53:c5:35:02:f9:8d:1b:67:db:be:21:
14:1a:9f:d9:30:85:1d:d9:49:19:fe:a4:3d:1e:23:7a:95:c6:
de:68:20:5c:46:fc:f3:46:22:9b:7a:dd:50:b9:4e:1c:01:ce:
d0:50:c1:a8:dd:7b:ad:73:48:ce:37:63:1d:f2:34:7e:ff:77:
1e:76:84:47:3d:a9:a6:70:65:8e:70:2c:7b:26:c8:87:6d:37:
68:14:70:d1:6a:53:4b:16:ae:3a:6a:3f:0c:f9:59:32:90:62:
ba:d9:95:b8:97:97:98:f9:42:c1:a0:50:e6:9e:42:bd:c2:72:
da:bb:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:03 2025 by rpki-client