Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: iANui+29dCAZfP5j0QK9vAO1IHGrzQ+JOg9zbeXzEEA=
Subject key identifier: 61:14:9D:18:86:D8:FF:2F:87:4F:F9:44:C5:6C:02:2C:38:70:F9:11
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 0197B6D73140F5F652B319A694ADC30383CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 074B
Signing time: Sat 28 Jun 2025 14:00:45 +0000
Manifest this update: Sat 28 Jun 2025 14:00:45 +0000
Manifest next update: Sun 29 Jun 2025 14:00:45 +0000
Files and hashes: 1: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: xEbeelOD/TEF+eHiIhY/UDKnaQiwgXBrhPRZFBl8swk=)
2: s-6iu0euq8mwctWc84gynbP4Gz8.roa (hash: ix817uYIHKTbd4XoAS5Yf6A1NltjL0SfzgZQTYUowKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:31:40:f5:f6:52:b3:19:a6:94:ad:c3:03:83:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Jun 28 14:00:45 2025 GMT
Not After : Jun 29 14:00:45 2025 GMT
Subject: CN=61149d1886d8ff2f874ff944c56c022c3870f911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:97:7a:43:36:85:55:86:1b:6c:74:f6:75:ae:
e0:d5:2b:c6:3a:20:33:8d:f1:30:63:a5:ee:c2:51:
cd:48:ef:4b:a2:e6:47:3a:08:16:f7:4c:6d:7d:87:
d9:62:a9:cf:60:d7:42:ce:05:b0:b4:30:e2:b9:71:
08:ae:85:d1:f6:b7:c5:9c:0e:a8:d8:52:22:a3:3d:
d5:fb:38:89:a8:bd:21:4c:c6:6b:78:42:66:62:9e:
04:2e:1a:62:65:e9:4a:8d:0a:7f:b2:a0:f9:18:c6:
f3:13:df:0e:5f:7a:46:ee:f6:22:78:34:ff:ea:96:
10:12:6c:e0:7c:ec:2f:7b:01:f7:5c:eb:92:e4:b7:
e1:c8:41:f7:c0:5b:51:9c:ca:77:e9:ec:4b:33:b2:
41:27:05:4f:22:fa:6f:fb:b1:e2:60:28:b7:98:92:
aa:15:9a:29:0f:5d:01:e7:9c:72:07:a4:64:e4:da:
2d:03:46:22:45:28:85:69:9e:f9:3e:b9:1a:fe:cd:
09:88:7e:82:df:79:5e:d0:f6:78:c6:e9:e0:62:27:
aa:b1:d7:fb:48:f8:4b:cc:c2:9f:e7:5b:6d:52:0d:
c7:22:a0:83:3a:73:e0:41:00:03:17:6d:86:fa:57:
37:9e:a7:13:73:22:a5:fd:c3:84:ee:3f:ea:03:90:
b2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:14:9D:18:86:D8:FF:2F:87:4F:F9:44:C5:6C:02:2C:38:70:F9:11
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:de:c4:0d:4e:93:0a:ae:8f:ac:2c:ea:53:6e:5e:d5:a4:55:
76:83:f7:44:4c:f2:d0:b4:da:ee:86:fe:67:b7:db:7c:d8:f9:
94:d8:ff:4a:1b:ad:e5:96:c2:32:bb:d4:20:e7:69:70:15:7b:
21:6f:84:47:20:4e:7a:fd:dd:26:ee:49:cc:ec:89:e0:08:a4:
30:3e:8a:bf:b2:b5:99:c5:e1:b2:71:4e:25:8d:b0:6b:a9:fa:
8d:8d:14:c9:f2:21:2d:5b:b1:af:d5:e9:b8:91:f1:02:da:34:
c4:41:e1:71:24:d2:ab:c3:58:85:fd:b2:eb:29:a7:f9:7c:22:
19:21:f5:c9:67:d6:8e:70:d3:85:ed:da:51:db:03:f7:67:90:
5a:9a:ed:0f:09:3a:f3:eb:ce:54:57:b4:ed:b3:9e:1a:88:7a:
30:1c:d8:de:20:46:a3:bf:34:8c:04:95:2e:52:87:74:eb:1f:
08:cc:2e:6a:5e:1a:c7:66:74:fb:85:96:be:dd:e3:c9:96:60:
bd:9a:2e:f4:8a:3a:93:d1:df:4e:bc:59:fe:e8:31:6c:f0:ec:
c9:72:fd:be:34:f5:9c:ef:e4:4d:75:0c:83:6b:97:72:64:d7:
66:28:e6:00:82:80:9a:78:16:da:50:03:6c:0c:e6:9a:8c:57:
ec:6c:b5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:04:02 2025 by rpki-client