Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
File: Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft (raw, json)
Hash identifier: TpWzRHkPWytab5AQJTRSpE7CP4ne4bUj9/ZsgctjMe8=
Subject key identifier: 2F:43:04:02:E0:66:77:D1:67:1A:C9:BA:14:CE:B3:E4:09:75:99:A0
Authority key identifier: 43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2
Certificate issuer: /CN=438f8ed121ba3081cfb215faab50ae145b590dd2
Certificate serial: 0197B88F72B9A53B65B0E488370CCB62D2EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
Manifest number: 0E9D
Signing time: Sat 28 Jun 2025 22:01:38 +0000
Manifest this update: Sat 28 Jun 2025 22:01:38 +0000
Manifest next update: Sun 29 Jun 2025 22:01:38 +0000
Files and hashes: 1: Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl (hash: UekUeWA07Zlk/raiZioHQhPqUercH0OvOnlaP/gRlYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:72:b9:a5:3b:65:b0:e4:88:37:0c:cb:62:d2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438f8ed121ba3081cfb215faab50ae145b590dd2
Validity
Not Before: Jun 28 22:01:38 2025 GMT
Not After : Jun 29 22:01:38 2025 GMT
Subject: CN=2f430402e06677d1671ac9ba14ceb3e4097599a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:0c:19:e6:f2:7e:ca:1c:e0:a6:c3:6a:8d:
fc:71:32:87:e3:d7:81:3a:77:f6:02:63:c4:59:8f:
ea:7e:e4:a3:cb:53:18:dd:2a:21:a9:9a:2e:f3:81:
3e:c8:60:f0:16:e1:61:c4:d3:22:4f:01:6f:6a:8a:
4c:2b:1f:14:ce:2b:51:b7:61:7b:e9:f8:82:b6:9c:
bc:9c:68:b3:36:86:54:ee:3c:57:93:63:2c:7b:d5:
ee:30:a1:57:03:44:3b:82:4c:a1:20:b0:d5:89:ad:
56:da:5f:57:47:ce:77:6c:12:92:d4:2e:3c:0a:75:
0a:f1:29:e3:ac:3c:cd:d8:90:eb:32:56:d8:68:98:
af:d8:5b:54:3e:84:52:25:2f:9a:ad:43:c3:05:23:
a9:1c:81:ba:a3:9a:a1:31:3c:91:84:7e:4e:1a:a4:
79:dd:c6:5a:ca:27:52:e5:79:d3:b4:a4:d9:d5:49:
64:c0:b1:a2:0a:ae:60:21:94:af:77:8e:c6:91:e9:
9b:8a:1e:15:27:18:9f:92:57:ea:75:1f:a7:4e:22:
26:6c:08:f1:b8:ca:24:fe:e0:b0:61:c9:8f:bd:cf:
d8:ea:d4:ab:e8:b3:c0:4e:e1:e0:df:01:7f:ed:fa:
5c:cf:74:6a:bd:62:dc:f3:7a:ea:08:e4:1d:2d:1b:
66:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:43:04:02:E0:66:77:D1:67:1A:C9:BA:14:CE:B3:E4:09:75:99:A0
X509v3 Authority Key Identifier:
keyid:43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:27:90:b8:01:4f:33:84:bb:5e:63:75:3f:7f:34:df:0c:e1:
09:a0:4d:b1:75:e3:cc:08:5e:9e:88:81:fb:7e:25:c8:36:47:
d6:93:79:e9:fb:6e:09:51:df:3a:e1:2f:7c:1f:de:76:4b:4c:
7f:a3:d5:5d:a3:80:8c:7e:c1:35:1a:f6:09:9a:44:55:b4:f7:
ed:00:24:17:b5:e6:e9:65:21:6d:88:cf:f8:fa:eb:f7:83:14:
b9:ea:05:f6:c5:2e:63:5e:7e:5e:80:53:81:5e:b5:68:f4:16:
e3:de:b9:6e:b4:d5:4e:68:b3:14:e9:6a:8e:fc:72:4a:75:41:
64:6a:5e:a2:4e:f3:d9:04:2d:f4:1e:a0:35:3d:24:a3:f3:89:
92:47:35:37:92:ae:32:db:aa:0d:72:ae:70:ea:b0:c9:c0:40:
0d:11:98:50:ec:f8:4d:57:e6:94:d3:8e:d6:45:ac:af:ad:fc:
0b:d1:7c:34:7d:cf:6f:df:73:bd:cd:16:93:27:ac:35:0e:02:
22:0b:8e:cf:e4:5e:92:96:09:de:21:da:49:2d:76:9a:47:a8:
44:0e:cf:02:21:e4:6e:83:51:29:79:18:c7:f0:0e:ef:d9:af:
ca:bc:d2:6d:bc:49:f4:26:14:51:71:8f:67:a9:a0:74:41:84:
2d:e3:5c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:38:01 2025 by rpki-client