Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
File: Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft (raw, json)
Hash identifier: 7i+BztE5zFpduXHwvgM007E7uJW0RUyCvhP1TushQrs=
Subject key identifier: 40:CC:A7:96:94:4A:35:69:8C:49:46:27:E8:D8:E6:0D:E7:68:CF:64
Authority key identifier: 43:7F:16:6A:FB:3F:10:2F:B1:25:43:B9:27:09:7C:96:B6:BA:9D:C2
Certificate issuer: /CN=437f166afb3f102fb12543b927097c96b6ba9dc2
Certificate serial: 0197B82107DA8C9EDCD1D60EF7395CBB6B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
Manifest number: 46
Signing time: Sat 28 Jun 2025 20:01:01 +0000
Manifest this update: Sat 28 Jun 2025 20:01:01 +0000
Manifest next update: Sun 29 Jun 2025 20:01:01 +0000
Files and hashes: 1: Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl (hash: hk3RW+pBRx+ncWH/9ZHAM/UhJ0Kfg7dv0VfURPLVaPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:07:da:8c:9e:dc:d1:d6:0e:f7:39:5c:bb:6b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437f166afb3f102fb12543b927097c96b6ba9dc2
Validity
Not Before: Jun 28 20:01:01 2025 GMT
Not After : Jun 29 20:01:01 2025 GMT
Subject: CN=40cca796944a35698c494627e8d8e60de768cf64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:44:47:6b:3d:91:13:99:b0:80:02:38:e8:43:
0e:60:22:51:2e:a3:2c:c5:8f:26:17:64:e0:71:2b:
56:3f:e5:c7:77:a4:09:ad:c9:1e:a5:68:e7:d0:14:
e4:ef:b1:81:cc:f7:0f:d3:46:07:0f:5e:cf:f8:be:
a8:89:bd:72:a8:c7:b7:c1:9e:ba:da:20:68:5a:8d:
e2:1f:97:02:92:c1:7e:12:40:e2:99:c2:60:78:94:
94:b5:cc:0b:c0:9c:dc:d0:e1:17:f4:8f:43:17:21:
e1:06:72:b9:ca:70:c4:0d:a0:89:ca:cb:e7:84:37:
5a:fd:9b:03:ac:38:f9:0f:b8:02:c6:af:4a:ce:5f:
9a:e8:a3:4c:da:01:ac:74:fd:48:53:48:06:be:57:
f6:a3:29:5e:ef:1a:3e:eb:f3:60:62:a3:9e:9d:da:
8b:d2:fe:3a:47:e6:0a:1e:10:e8:cd:11:3f:d8:98:
a8:f2:0e:60:41:17:60:77:d2:63:23:56:43:b5:b4:
f9:24:86:90:06:c1:21:1a:d2:33:a4:68:32:50:fb:
7f:c6:7b:43:13:1b:77:6b:6b:42:fe:3c:46:62:e6:
af:e7:fc:71:21:e0:d0:f0:7f:0b:c7:61:17:11:57:
79:c6:a1:c8:80:91:b1:cd:cb:18:75:b4:89:4a:08:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CC:A7:96:94:4A:35:69:8C:49:46:27:E8:D8:E6:0D:E7:68:CF:64
X509v3 Authority Key Identifier:
keyid:43:7F:16:6A:FB:3F:10:2F:B1:25:43:B9:27:09:7C:96:B6:BA:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:aa:b3:f8:61:d4:2b:47:6f:d4:e4:9d:75:6f:0f:20:5a:93:
94:e3:da:8a:ae:c6:f9:93:8a:c1:74:ff:41:36:ec:ef:53:14:
4a:fc:f4:9b:04:f9:28:6f:53:9a:b0:ae:ff:32:6a:de:88:8c:
29:a0:24:e9:d3:1a:d2:75:4c:f0:5c:15:58:19:b9:31:3f:94:
71:1b:f1:47:21:4f:46:c9:86:2c:b0:fd:8d:a2:99:9a:e9:cb:
d7:3d:17:c0:ce:e8:17:8c:87:2f:95:f6:a3:4c:e3:9c:51:89:
16:a8:49:c2:09:f6:51:e6:6c:38:de:02:52:b5:81:bb:98:08:
02:ab:8e:88:99:e8:b0:1e:26:51:4d:e1:d4:22:eb:c7:5f:9a:
d3:23:3b:50:66:04:9f:7d:98:fa:55:d3:09:36:ae:28:0a:a8:
6f:91:f6:20:f3:6e:7d:c0:23:c7:6f:a1:f6:18:db:65:50:18:
5d:29:c8:d1:dc:82:7b:f7:8b:60:6c:c9:9c:25:86:9e:14:78:
f1:4d:dc:c2:4c:d4:e8:d0:8d:d3:c6:50:53:37:21:c2:64:5b:
f1:94:14:90:cc:98:07:22:e8:68:3e:06:ac:76:08:c5:82:b6:
e8:e7:e8:6c:65:a3:e1:a6:23:e3:52:99:82:0a:a1:c8:47:44:
0f:4e:dc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:34:07 2025 by rpki-client