Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
File: Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft (raw, json)
Hash identifier: cyS0nFZ3CBIZeZnpw0ZGfhILnF++2jHC4men38iezw0=
Subject key identifier: 99:1B:3E:E3:D2:2B:22:26:E7:CD:46:E1:AE:C5:5B:1E:6F:C0:19:81
Authority key identifier: 43:68:33:0B:EA:2D:FE:88:0F:FA:62:F6:7B:56:6A:EA:E2:D2:87:FD
Certificate issuer: /CN=4368330bea2dfe880ffa62f67b566aeae2d287fd
Certificate serial: 0197B7EA4B81D179618418B2F885DA754771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
Manifest number: 12E1
Signing time: Sat 28 Jun 2025 19:01:14 +0000
Manifest this update: Sat 28 Jun 2025 19:01:14 +0000
Manifest next update: Sun 29 Jun 2025 19:01:14 +0000
Files and hashes: 1: Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl (hash: ioyRFFGoFaedlXOhbqgkO7sA5JGrFnleSUIKeFuSUSA=)
2: rz-RdiM9IWT3IB5wGzMs1ZBSN0Y.roa (hash: o6qyEqxDzSGkgBN+te6/IqxauC6oKPYhjWorkJVF6Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:4b:81:d1:79:61:84:18:b2:f8:85:da:75:47:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4368330bea2dfe880ffa62f67b566aeae2d287fd
Validity
Not Before: Jun 28 19:01:14 2025 GMT
Not After : Jun 29 19:01:14 2025 GMT
Subject: CN=991b3ee3d22b2226e7cd46e1aec55b1e6fc01981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c5:d2:11:db:c4:9c:21:aa:61:c3:77:12:3e:
14:df:ec:51:87:c8:7e:15:40:8a:8b:ff:01:bc:aa:
dc:4c:70:bd:ee:80:a1:00:34:a3:13:5b:3e:46:ba:
68:06:1a:f4:82:8d:d0:89:dd:b5:84:a6:9a:15:67:
74:1e:5b:d0:24:9b:2a:d6:94:b6:ee:f1:c6:ad:8b:
1a:ac:0e:38:8f:b6:b2:84:b9:70:83:ac:eb:92:b3:
43:10:4f:e2:54:ff:c3:a1:d0:e2:d0:30:47:e8:91:
6e:97:62:9f:b7:49:65:8e:62:cc:32:11:6d:f3:a2:
7d:b0:11:cf:45:2b:12:c1:cf:90:18:3c:b0:e0:c7:
78:38:84:38:72:15:68:91:5a:9a:2a:3f:34:29:f3:
ff:94:c5:13:e1:e6:0d:7d:94:ed:75:5b:90:9d:6e:
69:67:89:32:9d:97:c1:cd:ef:61:42:e9:f7:9a:15:
db:10:4f:2f:71:91:e4:8e:04:3a:15:cd:49:57:50:
d2:7e:ab:3b:7b:ba:06:6b:9e:6a:bc:78:b8:4a:cc:
51:ae:1b:15:cb:55:10:1c:33:54:b3:1f:35:b4:3a:
19:f5:a5:51:0c:f4:00:69:aa:5a:7d:f1:7f:13:1a:
3c:cb:0c:7c:8b:64:ca:09:d7:33:7a:8d:f5:95:02:
13:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1B:3E:E3:D2:2B:22:26:E7:CD:46:E1:AE:C5:5B:1E:6F:C0:19:81
X509v3 Authority Key Identifier:
keyid:43:68:33:0B:EA:2D:FE:88:0F:FA:62:F6:7B:56:6A:EA:E2:D2:87:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0f:91:4c:d4:72:54:83:ee:35:6d:78:49:95:13:21:bc:fb:
7c:da:35:82:07:66:2e:11:81:50:29:ec:4c:09:4b:9c:f8:4e:
41:c7:03:79:83:b9:0f:ae:10:18:0d:99:47:c2:de:40:52:1a:
5b:24:de:82:15:22:69:dc:d5:ef:9a:67:b5:1f:ca:df:5e:a3:
a9:37:b8:da:2f:4d:20:04:47:7c:e2:f4:77:9d:fa:2b:9a:fe:
b5:78:6b:88:88:96:ed:06:05:25:48:2a:4b:35:89:d4:a2:14:
8c:22:c5:10:44:74:d3:27:93:ab:1c:37:50:6a:2c:dd:a5:fb:
73:39:f6:13:d6:a2:27:90:e1:7b:07:da:56:54:1a:cf:fb:5d:
85:fd:c6:f5:9b:24:14:70:5e:76:f4:f3:79:ba:04:25:df:2a:
7a:89:65:18:fe:f7:6f:b1:2f:c0:69:51:1a:69:dd:cb:80:b7:
44:94:7e:83:e0:00:ee:2a:80:f6:c3:ab:d1:17:9b:0a:aa:43:
c4:57:53:0a:5d:ac:c6:e0:33:c9:c1:29:a5:46:e0:0d:3f:2f:
e2:ae:57:c4:d5:ee:92:60:4c:d3:67:8a:da:55:69:cc:85:4f:
b7:8d:71:cd:e7:31:b8:5e:ed:b5:6d:41:96:c0:75:39:d3:ea:
ac:23:6f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:05:57 2025 by rpki-client