Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
File: fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft (raw, json)
Hash identifier: cOiifl27N/aumL8RYIwFxtqg5dDlrHw+6ASe7YkZ8fU=
Subject key identifier: D0:91:06:15:C2:DC:D0:EA:92:5B:20:7A:8B:B2:9B:7D:A5:80:6D:CE
Authority key identifier: 7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
Certificate issuer: /CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Certificate serial: 0197B77C464885DF1B518640603E9375EADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
Manifest number: 1545
Signing time: Sat 28 Jun 2025 17:01:04 +0000
Manifest this update: Sat 28 Jun 2025 17:01:04 +0000
Manifest next update: Sun 29 Jun 2025 17:01:04 +0000
Files and hashes: 1: fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl (hash: pA+BO9eOPx/0Wjj21vsYp8jjQ//hw3+rhrenFyu0qU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:46:48:85:df:1b:51:86:40:60:3e:93:75:ea:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Validity
Not Before: Jun 28 17:01:04 2025 GMT
Not After : Jun 29 17:01:04 2025 GMT
Subject: CN=d0910615c2dcd0ea925b207a8bb29b7da5806dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:01:d6:bf:1d:16:2f:93:f7:ee:8e:d1:42:
34:a8:22:89:78:de:2e:ae:be:9e:c0:ca:41:3b:fc:
ac:50:3e:62:dc:87:0e:c0:29:60:ac:7b:c5:ea:47:
66:69:0c:54:7a:21:25:9e:ec:40:4b:30:ee:b8:fa:
43:9f:24:70:7a:1a:e1:fa:cc:4b:03:23:ee:de:f0:
47:81:a9:f6:69:9f:82:16:73:74:82:a2:10:0e:a0:
1d:b4:73:50:80:0c:d7:b3:a9:6b:f8:44:f8:40:2e:
d8:44:9a:46:95:b8:e4:db:d1:50:31:3e:06:d1:e3:
e4:ba:84:ba:25:fc:e2:5d:e7:34:0f:ce:61:87:21:
6e:b9:2e:92:e0:74:7c:fa:f7:8d:ec:0c:68:29:0b:
ee:a7:ea:ce:86:cd:01:65:30:93:b5:7d:4a:75:e7:
26:e5:ef:6a:30:3b:d3:0b:c2:dc:37:ef:fe:64:4d:
3f:b5:3e:4a:06:bd:62:03:d8:92:36:95:49:95:dd:
fb:e0:ef:5b:99:50:f5:ed:b1:8c:17:d3:31:a8:bc:
9e:1b:8a:8a:58:5b:d6:b7:f3:99:21:d5:a4:3b:0d:
4d:ca:ce:b2:95:47:1b:f8:f0:fb:4e:0e:e7:9b:85:
60:d0:cc:10:e9:2a:95:48:95:e5:db:27:98:df:18:
da:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:91:06:15:C2:DC:D0:EA:92:5B:20:7A:8B:B2:9B:7D:A5:80:6D:CE
X509v3 Authority Key Identifier:
keyid:7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:59:90:ab:78:fa:c7:a1:20:f7:82:98:06:08:7b:06:db:c3:
f8:0c:03:84:20:bd:01:8e:c3:cb:e2:ff:8e:ae:7e:d3:3d:1a:
d4:ba:0c:33:a5:57:bf:92:67:07:aa:7a:23:76:a3:75:2f:d5:
fc:09:44:07:c3:2f:19:4d:2b:b9:53:1a:23:ae:61:b0:2c:38:
c4:0d:b0:06:70:45:bb:c4:34:9e:a0:32:04:7c:32:d2:65:f7:
6a:8a:6c:93:0a:9b:4c:1c:07:d6:e6:82:69:e3:af:7a:43:a9:
88:cb:92:b8:55:5a:f5:18:68:db:9e:96:d8:09:28:2a:24:76:
1b:2a:d6:04:df:40:2a:fd:4e:2a:31:b0:31:b2:cf:cb:f8:78:
a5:f7:91:10:65:57:9e:0e:ab:33:0b:79:61:cf:17:19:c2:21:
48:50:80:9a:9e:37:49:5f:70:38:22:5a:33:b7:f4:41:ad:9d:
1f:78:28:01:f7:c0:42:99:99:03:ab:3f:83:4c:7b:1a:56:f6:
45:32:69:4e:29:11:f4:1f:4b:91:15:d8:9f:2a:d7:b9:97:d2:
59:49:73:b3:49:38:cb:8e:3b:b3:bc:24:cc:69:19:7c:85:d5:
13:43:45:4a:51:d1:e8:92:9f:a2:a5:5f:f2:fb:f9:14:8c:cd:
1d:2e:1c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:55 2025 by rpki-client