Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
File: 0xQt8vZwlAzPWksnoNDJh-zIhlY.mft (raw, json)
Hash identifier: IzhtDNesuKI3XUsaT0Bx4gl5GJR+RLzEKQnMia1duts=
Subject key identifier: 15:3B:0C:95:D6:4A:A3:73:EC:28:DB:39:B4:C9:C2:3D:2F:07:A8:66
Authority key identifier: D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
Certificate issuer: /CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Certificate serial: 0197B933DEE3F578311E0585FB229CBD677D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
Manifest number: 02C7
Signing time: Sun 29 Jun 2025 01:01:13 +0000
Manifest this update: Sun 29 Jun 2025 01:01:13 +0000
Manifest next update: Mon 30 Jun 2025 01:01:13 +0000
Files and hashes: 1: 0xQt8vZwlAzPWksnoNDJh-zIhlY.crl (hash: dbDJNmJYGtL2YtQgYsGXHnUMnYZdYkS7UbV8k5RTqaE=)
2: DxWkaJkNeo1GnfX8PTB6m_7NDo8.roa (hash: 1C13Qsc+uAlJmXy/kak788lVFXMyWIaA+AZiv7RcjGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:de:e3:f5:78:31:1e:05:85:fb:22:9c:bd:67:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Validity
Not Before: Jun 29 01:01:13 2025 GMT
Not After : Jun 30 01:01:13 2025 GMT
Subject: CN=153b0c95d64aa373ec28db39b4c9c23d2f07a866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:09:9c:ab:f7:19:97:89:97:d6:22:30:93:
52:a7:27:e1:07:1c:ec:30:2f:87:1e:cd:00:c2:a2:
f2:a6:47:71:1f:33:c3:15:6d:c4:1f:d1:d4:ad:c3:
08:f7:92:3c:40:4a:66:b3:bc:57:b1:2f:89:7b:a5:
1f:fd:97:05:77:dd:f9:35:17:25:12:b2:09:22:c2:
e1:77:1e:0c:b6:43:18:05:94:e5:4e:e6:75:88:5b:
10:40:4d:51:67:79:33:2e:fa:6f:d1:48:ba:a9:c2:
73:4e:47:8b:a5:e7:7a:a2:19:c6:ad:49:b6:25:e3:
06:52:9f:60:5a:e7:9c:6e:48:fc:9d:88:f7:24:1f:
1d:61:68:64:3d:31:76:8a:81:69:b4:e6:31:d1:63:
71:eb:2c:7a:a1:45:f3:f0:55:b4:8f:f6:26:47:02:
9b:29:94:df:f6:3e:79:22:33:31:bc:a7:3c:e9:f3:
3e:9e:ae:b3:9d:f6:c5:89:7f:87:d7:ce:f0:c8:7b:
26:dc:fd:8c:7e:c5:55:f6:07:ce:86:b0:67:25:2b:
3d:0a:00:20:d8:06:39:af:18:56:c1:b7:45:3d:33:
ab:78:ef:fc:26:e2:16:94:86:79:f0:a0:b5:5d:e9:
9b:de:cc:78:92:7b:e0:e6:d3:a1:4b:dd:90:e0:f2:
05:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3B:0C:95:D6:4A:A3:73:EC:28:DB:39:B4:C9:C2:3D:2F:07:A8:66
X509v3 Authority Key Identifier:
keyid:D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:6e:d3:ed:d1:4e:21:38:09:42:52:cf:c1:0b:db:f7:15:22:
90:13:45:29:ab:5b:5f:83:c2:e2:cf:07:6d:5b:4d:51:45:56:
6c:bb:9a:97:6c:d4:48:f7:f5:93:51:76:b4:97:38:15:f4:c6:
37:6e:24:91:82:f2:9c:d8:21:94:e1:fd:19:7c:ce:fe:27:57:
02:3a:31:c9:cc:08:84:b2:1a:5c:3b:3c:18:73:1c:7a:8b:bd:
cc:bb:f9:a6:7d:28:1b:96:12:72:48:17:82:f7:53:69:d0:53:
56:ac:f8:28:88:ef:67:0c:33:51:2d:da:e4:43:25:32:12:44:
1c:b0:cf:c2:77:50:87:52:9b:45:7b:e1:4f:19:16:cd:11:fc:
61:4f:ac:5f:ed:67:68:e9:c3:11:4e:4e:8d:50:9d:a2:e3:12:
93:db:3a:4b:8b:cb:0f:6b:b4:4d:82:f9:a5:2c:2a:53:44:91:
a8:35:50:bf:69:23:a1:16:d8:35:34:e6:9f:ad:6b:ff:13:6c:
b7:fa:ac:dd:65:30:d6:80:26:f4:78:89:3c:de:ed:41:99:2e:
43:9e:9d:ab:8a:64:f6:a6:67:7b:38:b5:b1:38:1e:9d:4e:5e:
4b:c6:eb:8a:a5:ce:c0:11:b6:37:f4:74:e8:f5:e2:0f:0e:7a:
4f:9a:7f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:31:01 2025 by rpki-client