Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier: t6WnRuQ7ImFraQ310iP8vrnLpfv4O+38dBHUpdnwAvM=
Subject key identifier: 13:F7:06:77:A8:C6:FB:18:25:8C:D2:92:AB:8B:1A:42:61:AD:0A:CB
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 0197B5FC2CFCFA468831E5806F8205DADD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 10:01:31 +0000
Manifest this update: Sat 28 Jun 2025 10:01:31 +0000
Manifest next update: Sun 29 Jun 2025 10:01:31 +0000
Files and hashes: 1: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: F2dV2iNsFi9JFxut2otTYU45p16zmBGBcrdf29Xx8mk=)
2: OvLZjS7E5MX30NZkLK9jxh8KFhU.roa (hash: cImSpb6PHoLXLcMRtEaZwDR7QJdikTFbgChlslLA778=)
3: SoN9k2cqGxyy_rsm3ydDmcCibzo.roa (hash: ajQGIB+pruVAaKn9625joYHZDBPfoDRUv7Hz6Vm4jnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:2c:fc:fa:46:88:31:e5:80:6f:82:05:da:dd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Jun 28 10:01:31 2025 GMT
Not After : Jun 29 10:01:31 2025 GMT
Subject: CN=13f70677a8c6fb18258cd292ab8b1a4261ad0acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:ed:07:c3:b8:af:75:94:57:78:87:7d:6f:
d3:a5:98:ae:6c:64:35:a9:60:ca:ef:69:e6:c9:a1:
6e:9f:39:c9:32:1d:48:bc:c3:2f:ff:8c:c5:e3:89:
f7:72:5a:2b:47:70:fa:fd:0b:96:35:00:28:7a:a1:
70:ae:20:1c:4e:1c:d8:16:2d:1b:b5:51:3f:45:f6:
3f:67:02:e1:1e:b5:e1:13:38:d3:87:16:6c:82:d3:
07:9d:0c:ea:d1:ee:cd:f8:c0:79:45:62:c1:fd:2d:
05:75:9f:9d:76:6e:21:eb:aa:31:3b:75:5b:33:e8:
44:d7:62:ba:45:ca:6f:bd:bb:ad:28:3e:5c:76:ac:
09:53:c8:55:5f:7f:70:96:c8:28:c5:d5:af:bc:12:
fe:ef:23:fd:c1:c3:2c:b7:88:c2:26:08:6e:5d:30:
3d:0d:11:95:30:54:4f:94:28:ae:63:04:5f:5a:00:
cf:6a:a8:bc:38:e2:56:ad:52:fb:4b:c5:da:45:4d:
83:e2:25:cd:bb:25:ef:12:a5:b6:26:4c:43:a9:d8:
5a:58:06:b0:11:fd:8a:fb:45:a1:52:b9:f4:e9:e6:
09:82:4d:d4:9d:ea:e8:5f:cb:1a:bd:c4:90:f2:e6:
bf:e0:f5:55:69:e9:ca:a6:71:9e:44:8b:7e:40:15:
4a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F7:06:77:A8:C6:FB:18:25:8C:D2:92:AB:8B:1A:42:61:AD:0A:CB
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f3:a3:dd:13:3f:eb:3f:30:5b:8e:d2:26:7f:10:4c:12:18:
81:30:aa:08:a5:a8:d5:91:33:4b:b2:e8:63:d6:cc:87:06:43:
44:f0:4f:6d:82:5e:9f:0e:c2:90:08:56:04:d3:08:0f:ab:fa:
f3:e9:1d:05:75:ae:77:be:e6:6f:13:1b:96:ad:00:0e:52:ae:
d9:28:3c:7c:f5:f4:4d:6e:3b:a3:99:c2:7d:ba:0f:ac:a5:67:
0f:a9:5e:3e:ec:17:9f:3f:c3:3d:5b:ee:59:44:1b:09:9d:51:
ad:b2:b5:60:a0:15:bf:55:27:cd:9b:fa:e9:5c:6a:aa:ee:84:
a2:fa:18:6d:f4:e4:a3:a7:d8:f3:d9:1b:7a:df:f0:0d:19:b3:
7d:e1:76:43:39:f3:2e:03:3a:3b:c9:82:e7:a8:2e:d0:53:d8:
ba:68:90:c7:d4:85:8b:e3:70:0e:d8:f5:f2:e8:cc:24:19:6e:
d7:54:6a:ff:2c:d8:05:40:a5:1d:0b:f0:90:77:23:4f:84:6a:
d8:81:53:0e:fd:6b:8f:e0:f1:3a:33:62:c4:e0:1c:a8:39:86:
d8:55:a3:37:3b:d8:e2:27:ca:9c:f3:d8:22:3a:94:d9:34:35:
25:e0:01:91:d0:3f:66:bc:72:00:6f:57:b0:6c:f5:06:19:1c:
c3:75:e9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:35 2025 by rpki-client