Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier: us5YqK3OW6Dqy31NXWJTzNwWIRtzo4/fAIdDmYeKn1s=
Subject key identifier: 32:7B:85:36:B9:6A:EF:E5:F5:63:83:7A:60:5D:35:E5:78:24:2B:07
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 0197B820C6BB1E17AFFA60346F0F7BA22628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number: 0D43
Signing time: Sat 28 Jun 2025 20:00:45 +0000
Manifest this update: Sat 28 Jun 2025 20:00:45 +0000
Manifest next update: Sun 29 Jun 2025 20:00:45 +0000
Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: QyRo42/ntCJYBpApy2cXe+cTdnrDC4g+DDs5NeRIc1Q=)
2: 2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa (hash: Ox67FMktxFvYuYpHVpuT5WkOs/dH1k6Q6zB500ivOTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:c6:bb:1e:17:af:fa:60:34:6f:0f:7b:a2:26:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Jun 28 20:00:45 2025 GMT
Not After : Jun 29 20:00:45 2025 GMT
Subject: CN=327b8536b96aefe5f563837a605d35e578242b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:6c:5c:51:2a:71:47:89:11:0f:40:84:a7:
34:5a:54:99:c1:01:9f:54:f2:e5:7c:cd:d8:1f:b2:
6c:3f:f5:94:23:07:5c:03:84:94:3f:e5:29:12:ab:
18:79:30:6f:a2:8a:bc:f1:1d:74:c5:d5:3b:ca:21:
cb:68:39:4b:1a:b8:97:9e:8b:fd:15:20:e8:eb:d6:
f6:c4:36:c1:e9:aa:d3:6b:5a:15:65:3c:f4:1b:b1:
cd:a7:a9:4f:35:24:72:04:7d:4d:5a:c2:ae:52:45:
c0:93:f9:53:f0:61:50:85:b3:3c:0f:ad:37:25:22:
fc:f0:19:71:c2:f6:eb:85:f1:14:b5:e7:88:d1:dd:
29:c9:9f:b0:a6:a0:50:70:10:36:6d:e3:2a:ec:85:
0a:7e:56:ea:b0:ad:7e:c2:22:62:49:a8:92:d1:07:
c0:91:e7:1e:cc:24:e4:c8:d6:92:ad:fd:27:fa:1c:
93:6d:8a:43:98:23:80:4e:c1:5e:2e:f9:1d:7c:1f:
d3:8d:69:18:a6:1f:3c:3d:24:39:60:40:e5:d6:ab:
30:a8:c3:0c:6c:a9:06:22:51:9a:e2:58:16:47:07:
ae:d0:41:44:6f:3b:e6:4b:ce:94:a3:6a:23:80:ad:
d0:20:02:92:df:a0:f9:38:99:b9:37:8c:cc:47:33:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7B:85:36:B9:6A:EF:E5:F5:63:83:7A:60:5D:35:E5:78:24:2B:07
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:bb:d9:7c:9c:f8:6e:90:2e:24:c5:54:9a:c8:6f:97:2c:91:
6e:e9:6d:0d:20:c6:f7:8e:85:b7:ed:13:8b:a9:29:2e:90:dc:
f7:da:d7:13:da:51:e9:1a:4a:66:a4:2a:63:6d:48:f2:43:5c:
85:af:75:44:c4:05:95:8c:27:44:68:fe:6b:3f:08:fd:a8:92:
e0:29:3c:58:b9:1d:cc:80:fc:73:58:fb:c4:e0:9e:b5:92:66:
92:b0:7d:ab:92:18:83:48:f6:5b:4d:32:f0:3a:b4:b5:3f:61:
5c:b5:88:91:96:d5:b0:07:3b:62:69:92:3d:0d:51:d6:c1:fd:
90:b8:2e:e4:7d:fa:7f:13:a2:69:a5:43:87:c8:39:4f:22:b0:
c4:42:cb:d8:c2:64:8e:79:eb:b4:b4:06:e5:80:99:ab:85:98:
bb:fe:9e:18:66:78:f1:0b:90:13:d9:2d:70:83:25:90:70:9e:
3b:34:60:a6:86:4e:a7:d1:a9:7e:38:7b:c2:45:33:91:df:14:
ec:9c:39:85:4b:23:a1:95:c9:85:da:cd:e1:bf:62:9b:90:5d:
f7:ee:e4:42:41:cb:06:51:be:bf:3a:d1:9d:d0:d6:90:12:94:
cd:53:7d:3b:5a:d7:f0:2f:09:67:50:47:fc:fd:bb:d8:50:7e:
01:2d:8c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:28:28 2025 by rpki-client