Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
File: Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft (raw, json)
Hash identifier: lEw/DOHiYt4YGdQwWUsKsHAQfjoA5KhSsE61zbjgvms=
Subject key identifier: A9:37:A3:5C:19:F9:8A:30:8B:A3:D6:7F:2B:9A:DB:3F:61:4C:F3:36
Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
Certificate issuer: /CN=43e0a364131841056d48b2d788ea00ca4b91db56
Certificate serial: 0197C6EFE69FDDD5D0CCA8FF0487601AD2CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
Manifest number: 15C3
Signing time: Tue 01 Jul 2025 17:01:40 +0000
Manifest this update: Tue 01 Jul 2025 17:01:40 +0000
Manifest next update: Wed 02 Jul 2025 17:01:40 +0000
Files and hashes: 1: Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl (hash: Oifm2/S2NKSaMMb7qDCJ0ZZ9hGJdGgHYxiN4skrX6Sk=)
2: ymSnyZ91fxVC39LRAlSHciRZ46Y.roa (hash: 9upse4LtnCnU7pMyWCgkPTtYXe3IQqerCyozn8qome0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ef:e6:9f:dd:d5:d0:cc:a8:ff:04:87:60:1a:d2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56
Validity
Not Before: Jul 1 17:01:40 2025 GMT
Not After : Jul 2 17:01:40 2025 GMT
Subject: CN=a937a35c19f98a308ba3d67f2b9adb3f614cf336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:78:cb:74:86:ca:fb:e0:24:bc:17:24:a6:
16:5c:9d:cc:35:89:71:b8:66:70:47:0c:7d:94:8f:
af:ea:b3:7e:92:d2:f1:30:3d:3c:e0:d0:ec:8c:8e:
c1:e2:f1:70:9b:76:1f:a8:1e:fd:0d:41:10:2b:0b:
a7:45:c5:87:94:15:d3:ea:99:f6:dc:0d:8a:f7:18:
8c:f7:bf:55:04:86:a1:ae:d6:8c:47:5e:28:7e:74:
00:27:35:13:2d:04:af:5e:4d:6d:83:ca:73:da:ca:
b7:b9:d8:d0:8f:9a:55:db:ce:9b:a4:bf:13:08:a5:
58:84:29:74:09:a2:bb:19:c6:65:c9:fc:81:1c:60:
1b:3a:6c:61:ca:3b:37:16:4c:0c:22:c2:89:21:8d:
12:db:e4:5d:a9:14:45:96:a3:8f:d5:fc:74:06:ef:
70:0f:01:d0:3e:6d:cd:37:a7:dd:30:77:32:32:85:
f8:9f:ae:0b:99:d1:8d:54:1a:00:1e:9f:78:29:74:
41:72:ad:e2:8c:0b:96:c1:1c:43:73:e9:93:84:0d:
3a:eb:1b:3b:c4:79:1d:e5:34:30:fd:b1:0a:a8:07:
66:ff:3e:60:b2:00:d8:9d:f5:a2:e1:05:94:7b:35:
e6:f6:9f:a7:be:20:b5:9d:b7:50:a6:4c:c4:27:69:
17:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:37:A3:5C:19:F9:8A:30:8B:A3:D6:7F:2B:9A:DB:3F:61:4C:F3:36
X509v3 Authority Key Identifier:
keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d5:23:41:96:a3:84:85:6f:73:9c:74:41:e8:6e:6f:44:38:
8b:ad:e0:a1:4f:8c:90:91:19:66:3d:d8:57:da:90:13:fc:52:
21:c4:fe:df:1e:94:1c:14:e9:2e:8c:35:68:f0:dc:44:59:87:
bd:6c:dd:e7:ee:c7:f9:5c:b2:9b:ed:78:5f:85:60:68:87:05:
48:73:0b:58:5c:41:99:08:2a:62:d2:eb:b1:45:a9:ec:f5:1d:
94:e2:a4:c2:24:8b:da:11:f3:af:2a:59:d4:e7:e7:79:a3:6c:
18:ea:2f:2c:8f:28:6d:2d:ec:f4:ba:e5:8a:8a:65:ff:d8:f3:
b0:5f:6a:c0:cd:f6:75:08:7c:77:c3:28:d1:fb:39:3b:5f:cd:
fe:d1:fb:60:b5:04:94:d1:89:a6:58:99:4c:65:6f:1d:6c:78:
b9:29:6d:e0:96:df:7c:f4:ce:a7:d8:36:c0:5d:ae:8f:82:0e:
a4:78:dc:8e:2a:68:e8:75:7f:19:6a:b7:2a:70:ca:a2:42:4e:
f9:e4:15:09:bc:cd:d5:a9:00:2e:7b:5d:fa:58:e5:bc:78:9c:
99:c2:c2:90:39:96:b3:34:7e:55:30:89:8d:c6:f6:61:30:16:
95:36:c1:67:7a:95:e0:73:9f:32:17:58:cd:bf:51:92:9a:50:
9d:e6:46:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:39:46 2025 by rpki-client