Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
File: V1qbLylkIBK0cD0kDrweyD5H030.mft (raw, json)
Hash identifier: 05j2rSnSB4WwGf2KhfHApgXGAo9vRnb6P8O68keSCFM=
Subject key identifier: 3C:4D:C9:75:7F:71:1B:40:DE:F8:F0:94:79:25:F9:51:18:03:E8:8F
Authority key identifier: 57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
Certificate issuer: /CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Certificate serial: 0197B88FA89857CAD03195F45665BA87F357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 22:01:51 +0000
Manifest this update: Sat 28 Jun 2025 22:01:51 +0000
Manifest next update: Sun 29 Jun 2025 22:01:51 +0000
Files and hashes: 1: V1qbLylkIBK0cD0kDrweyD5H030.crl (hash: GJHFd/knm9LRmaFmZu7Ul65Jps575jJ0ZwqMGuE0/QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:a8:98:57:ca:d0:31:95:f4:56:65:ba:87:f3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Validity
Not Before: Jun 28 22:01:51 2025 GMT
Not After : Jun 29 22:01:51 2025 GMT
Subject: CN=3c4dc9757f711b40def8f0947925f9511803e88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c6:42:1d:e4:1c:f0:aa:57:d8:6d:6f:50:a9:
1b:f3:e3:44:2f:35:30:3f:14:f0:04:ef:f3:ef:64:
f9:55:42:4e:39:99:66:6b:29:44:6f:13:8a:c4:3f:
7f:3a:d0:9a:d5:d8:1e:a0:2e:61:76:92:2f:95:a6:
e0:2e:b0:cb:29:6d:2d:06:ca:09:ab:be:77:2d:87:
52:83:95:68:57:9c:51:51:17:3d:7c:0b:dc:56:46:
cb:0c:2c:ee:4f:91:15:e0:c3:7d:2b:4b:5e:29:38:
da:ae:02:35:ca:48:b5:df:99:1f:2f:c9:b8:e5:a6:
55:dd:e7:d9:65:5e:df:c6:77:e8:ba:fc:cb:b2:8f:
99:cb:fa:29:cf:e7:6c:70:a0:09:36:d9:b6:a6:70:
2d:74:ab:97:be:b8:e2:ae:0b:15:77:b9:f3:2b:d6:
2a:28:7e:fa:14:96:23:4e:9e:87:62:1c:ca:19:6b:
19:0d:22:f8:5c:08:6c:f7:a5:09:0c:5d:da:91:b4:
49:c9:b9:00:7c:90:8c:d5:90:7c:1c:7c:a5:25:d3:
bb:6e:8e:8d:25:3c:d7:c0:86:d6:72:a1:4b:33:0d:
f4:57:4f:96:99:9c:3c:c9:e9:90:9f:cd:02:d5:fe:
78:36:97:d5:13:09:54:60:b8:92:3c:a1:f0:cd:95:
9e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4D:C9:75:7F:71:1B:40:DE:F8:F0:94:79:25:F9:51:18:03:E8:8F
X509v3 Authority Key Identifier:
keyid:57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:98:47:7d:6a:cc:31:71:89:85:c7:b6:36:e6:2a:92:3e:50:
2d:e1:19:85:9d:4c:43:01:c3:90:93:78:70:14:2d:f6:70:a9:
9e:c2:d5:85:cb:96:a9:88:e4:5d:30:e9:54:16:fc:d4:9d:46:
51:1f:cc:73:37:5f:eb:88:63:3b:fc:88:bc:84:78:ee:39:c7:
c4:ef:98:ad:3c:39:aa:c7:88:f4:7f:b3:f0:5e:58:7a:6d:e5:
72:51:86:2d:71:73:25:e5:eb:cc:de:87:0e:1a:0e:e7:38:3c:
9b:14:56:a9:c1:f7:f6:e1:83:4d:59:fb:7c:93:14:f5:5a:32:
a7:d8:f5:0a:d6:b8:96:6a:5c:e9:93:34:96:70:7e:22:4f:a0:
6c:52:36:8b:5f:3d:52:34:26:9b:3d:6b:11:8b:5c:02:06:c1:
3c:55:db:10:ce:9d:e6:39:d6:6a:52:e5:74:e7:bf:bc:2d:a1:
bc:ec:c5:3d:5c:54:79:0f:13:a7:cf:15:2a:12:fe:ab:d5:7e:
fc:a4:44:38:11:0e:1f:8d:40:40:40:ac:29:bb:f8:27:9c:3d:
bf:bc:fe:9a:5e:09:08:9b:dc:94:fe:9f:c5:07:3f:a8:23:f8:
51:4e:4f:00:f1:4d:a8:e5:d6:76:0a:3c:0d:42:6a:f6:57:47:
06:e0:2f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:47:17 2025 by rpki-client