Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: ZOwe5cXQLZPHgQgFwUiphvv/y3Hw1YCmK7RKOEuE6po=
Subject key identifier: 2A:E6:8F:4E:2B:F6:C4:0E:2F:71:A1:93:43:87:53:2A:82:06:21:2E
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 01974B5698942D5A2C1436A3C3515A9515A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 121C
Signing time: Sat 07 Jun 2025 17:00:55 +0000
Manifest this update: Sat 07 Jun 2025 17:00:55 +0000
Manifest next update: Sun 08 Jun 2025 17:00:55 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: sIcNMn8qmoRsRErjEal0egobAnV103e8XP/2eHAP5Ow=)
2: mF8H3prBEeFw8vv0-wYmE8_MtFk.roa (hash: k6q/MJjxt2Tjd0EikWZoheIRBqYjVQryjlZ0eCvLYRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:98:94:2d:5a:2c:14:36:a3:c3:51:5a:95:15:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Jun 7 17:00:55 2025 GMT
Not After : Jun 8 17:00:55 2025 GMT
Subject: CN=2ae68f4e2bf6c40e2f71a1934387532a8206212e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:5a:41:f2:ae:75:ca:02:2d:00:43:e2:3d:
af:04:44:63:45:7d:49:3f:8d:0e:25:8d:a3:19:c6:
04:37:b4:3a:73:17:f3:e8:84:3c:d1:96:b0:96:0a:
fd:67:b7:32:19:2c:a3:6b:d4:b1:50:ae:d5:77:25:
88:61:a4:ea:cc:48:ca:c2:d6:56:24:dd:66:95:bd:
81:50:dc:b0:67:67:ca:ac:6f:8b:67:20:00:78:5a:
9f:0f:ea:d3:5f:bd:e5:56:dc:6a:44:03:d9:98:25:
51:13:b7:01:1e:88:67:74:66:03:24:45:55:8c:25:
04:18:9b:d5:0d:7b:ed:3d:59:a4:48:ad:b8:c5:30:
06:86:cc:c7:a4:0b:c7:bf:7a:48:56:2f:06:da:ed:
4e:a6:3c:40:df:46:da:42:68:67:df:d9:cb:10:f0:
a0:01:f2:c8:03:77:b3:ae:4e:39:17:c9:15:9c:d8:
fe:6a:c0:97:ee:be:53:8a:e6:94:a7:f8:be:17:a3:
cd:18:5f:8a:60:81:a7:28:e8:f4:84:21:07:24:64:
1f:04:30:82:d7:01:98:01:2c:e9:b4:0f:d6:9e:c6:
33:17:2e:ba:c8:2f:f2:41:69:1d:d9:24:04:9e:e8:
8f:ac:ec:4b:7f:d1:5e:7a:b4:e1:5e:8f:bd:17:e3:
fe:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E6:8F:4E:2B:F6:C4:0E:2F:71:A1:93:43:87:53:2A:82:06:21:2E
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:09:d8:eb:25:c3:5b:6b:ed:f0:2b:fb:01:fa:d0:b6:f2:44:
2b:d9:39:f9:8c:58:7b:1b:47:eb:bb:d8:e0:c9:a9:6d:b6:5d:
7c:0f:40:62:58:22:02:05:c5:0f:79:bc:57:e7:07:09:0e:49:
eb:e0:72:91:c4:1d:32:4f:ff:d8:73:49:dc:c7:3d:d1:00:ec:
cd:b0:da:a9:32:f6:7d:9d:a0:fd:e6:58:d0:cc:87:8c:61:9c:
78:2c:05:84:10:ec:10:c7:e9:de:7d:39:78:bb:dd:10:5b:a3:
0a:e4:80:ba:d7:3e:37:54:60:6c:22:b0:26:16:22:3a:74:e5:
92:95:f5:2c:ed:7e:72:31:9e:53:f7:47:aa:4c:54:da:98:f9:
37:0b:18:44:02:90:0a:92:5c:f0:04:67:92:26:25:84:6f:5f:
71:57:cc:05:8b:36:48:f9:cd:48:bd:f4:8c:88:cc:5c:b5:42:
f4:b9:97:cd:a7:25:de:84:31:11:54:88:72:a5:ef:7f:4f:2f:
fb:86:41:af:28:55:51:be:3e:97:1b:eb:4b:fb:cb:21:da:d0:
f6:33:db:e2:8d:a4:b4:4e:a4:c6:b9:e3:9c:30:b8:2a:30:cd:
5e:77:26:0f:83:9c:ae:6a:4a:a5:a8:ba:b6:dd:25:90:8b:92:
b3:9f:0e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:53:26 2025 by rpki-client