Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
File: q3ukNXZmdmStbymmZicOM1eDbxo.mft (raw, json)
Hash identifier: 31JwsOFcysNIyRbnGsWdyUnOuQaCrwxDK8ToTWAzk48=
Subject key identifier: 3D:B9:70:3E:6B:A4:22:63:CD:CD:25:45:49:3E:EE:DC:93:82:3E:F8
Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a
Certificate serial: 0197B77CE3DD644448534C184ADEB3ECD840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 17:01:44 +0000
Manifest this update: Sat 28 Jun 2025 17:01:44 +0000
Manifest next update: Sun 29 Jun 2025 17:01:44 +0000
Files and hashes: 1: q3ukNXZmdmStbymmZicOM1eDbxo.crl (hash: 9X1LsZUeJF5AWtUqZJ88PB5CE/xRUjV/3SC70XCk/mM=)
2: rFtQ52vnm-Gf2JN4L6yb0DTiUgw.roa (hash: U6PLdhl9fIkfcENijAv37MSFDTY2VRfS2bCNJb0dRIc=)
3: z4h6VOta7nlktuKCkK1-Zw-1S8Q.roa (hash: XA8aL+R7cIm6KIZ8pt2+mp6cPL138KkhjyZFmjM+7SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:e3:dd:64:44:48:53:4c:18:4a:de:b3:ec:d8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a
Validity
Not Before: Jun 28 17:01:44 2025 GMT
Not After : Jun 29 17:01:44 2025 GMT
Subject: CN=3db9703e6ba42263cdcd2545493eeedc93823ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:7c:f1:d4:05:d5:38:38:14:e2:11:05:fa:
45:8d:db:86:c5:8a:b7:44:a6:c6:24:55:0e:ed:81:
e3:3f:f3:47:6f:84:15:9e:96:56:0c:40:9c:35:63:
ec:bd:e8:d1:7e:16:e3:bc:77:65:71:bc:2e:7a:5e:
c9:48:a1:05:46:c5:9c:ee:39:11:56:3d:6c:61:4c:
ff:17:63:2a:70:8d:d7:f5:49:ce:76:23:b6:d3:56:
86:f5:0d:0e:08:25:bf:99:39:4a:66:3c:cd:d2:27:
42:d8:f6:30:96:3b:ec:5b:ac:ca:7f:6e:52:4c:06:
8b:f7:e2:60:da:98:4a:22:5b:4e:e6:12:48:13:2b:
31:51:db:0c:a4:5b:1b:d7:04:74:8d:40:ed:82:4f:
33:be:07:6e:e1:98:70:27:fe:43:dd:05:f9:08:6f:
fa:06:63:a5:d9:4e:40:79:b3:ac:ff:01:23:39:3f:
01:13:79:93:23:ef:a3:d2:7c:a2:50:4b:34:06:01:
2e:c3:ad:2d:04:70:e2:e7:0b:26:41:e2:6e:b6:0a:
54:d1:2b:db:b2:c9:5c:e5:6c:36:1a:7f:b5:f1:e3:
70:b9:bf:16:76:83:a1:f3:a7:58:48:70:14:8a:99:
30:f0:bb:61:ad:b0:2f:5d:3d:80:f3:52:04:c1:b0:
3f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B9:70:3E:6B:A4:22:63:CD:CD:25:45:49:3E:EE:DC:93:82:3E:F8
X509v3 Authority Key Identifier:
keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:dc:65:1a:5d:41:b6:c9:fe:74:7a:3a:3b:c4:8f:dd:09:b1:
27:1a:b5:56:fd:49:7c:03:fb:e6:1f:bf:53:b8:e3:56:8e:98:
5f:f5:c5:f6:03:71:1c:e3:23:41:67:0a:17:63:48:5c:36:f8:
50:7f:dc:d4:10:a0:93:d6:e6:42:32:97:9c:07:02:e6:5f:6c:
fc:05:88:1c:62:96:07:eb:02:3d:4b:54:eb:ee:55:df:12:56:
d7:89:ec:df:63:3d:64:52:b7:e5:8f:5a:b0:2c:9c:f6:d1:e3:
ff:9c:56:19:b6:f8:43:d9:53:da:1e:b9:84:ed:b9:47:ae:6e:
b3:27:f8:47:3e:f5:d4:c7:50:f0:de:f4:98:f4:31:f0:4b:2e:
ae:36:e0:af:d9:c2:15:72:79:5b:94:cc:99:b6:98:cb:0f:d0:
11:f9:fc:99:2b:cb:a7:a2:85:6a:07:79:61:65:f5:0d:45:66:
e4:d3:b8:d5:65:f3:32:26:3c:a3:62:b3:b0:9b:a7:94:a4:97:
2b:e3:04:64:38:30:cc:8d:ac:d6:a1:19:4a:cd:c2:97:89:70:
f2:5a:7c:42:5a:73:bd:00:8d:76:6b:65:ac:a2:47:aa:34:61:
a9:c7:8f:71:e3:b4:dc:63:64:f8:fc:33:8a:40:da:f7:7b:d4:
75:0b:a5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:08 2025 by rpki-client