Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
File: Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft (raw, json)
Hash identifier: KoyzLicbVxRwP1NF8NFYD1jGEbMKuXMGMUwx8l7p1oc=
Subject key identifier: 20:15:F3:59:DA:00:22:65:C9:EF:CA:66:36:06:B1:1F:D7:79:74:8C
Authority key identifier: 43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
Certificate issuer: /CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Certificate serial: 0197B6A1D3DDC2EA487922FAA06DE90051A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
Manifest number: 0573
Signing time: Sat 28 Jun 2025 13:02:28 +0000
Manifest this update: Sat 28 Jun 2025 13:02:28 +0000
Manifest next update: Sun 29 Jun 2025 13:02:28 +0000
Files and hashes: 1: Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl (hash: d1BmSOPqAtrWclMjZuLGbdA8iDXX1iLCkvsGIecXkoA=)
2: fiGpYaULVSGddPa40kO95drtEI4.roa (hash: hSGW2kYFHKKsMMUOHTMd5Mel06lDgF+QorDCIkRAx3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d3:dd:c2:ea:48:79:22:fa:a0:6d:e9:00:51:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Validity
Not Before: Jun 28 13:02:28 2025 GMT
Not After : Jun 29 13:02:28 2025 GMT
Subject: CN=2015f359da002265c9efca663606b11fd779748c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7d:01:b7:ae:6a:8e:2f:d6:fd:fe:b7:8d:0d:
b9:92:3d:d5:08:a6:ce:ff:7c:26:99:e7:66:b0:28:
2c:78:ae:97:13:80:a7:07:15:88:ab:3a:d7:80:ff:
93:88:df:9f:f1:7a:b6:c6:aa:c7:4d:41:3c:70:b7:
d4:ca:a4:30:44:4e:7c:69:08:0d:17:d7:5a:64:4f:
9e:17:c9:ed:d7:32:55:34:10:3a:f5:a4:ed:36:69:
46:67:13:aa:f4:47:75:6e:9b:fa:ce:0e:10:ff:3e:
25:8d:2d:90:e0:30:d3:98:18:13:1c:f1:2d:11:ff:
c4:c0:01:7c:ab:41:7b:c4:70:31:4a:48:2b:d2:e3:
12:e5:10:09:a9:bf:4e:83:67:e9:82:84:c6:01:5d:
1d:f8:21:ff:e6:14:74:7c:b1:e5:0d:f8:47:6d:e4:
c8:4e:69:82:74:9c:5c:4a:80:cf:fb:64:64:c4:66:
2c:7a:58:fe:a4:76:46:54:29:13:c6:dc:30:6f:c7:
9f:d6:06:9f:7b:d8:01:f0:3e:ff:c4:99:91:53:c5:
dd:86:1c:15:a8:a3:c7:0a:ca:af:a3:33:87:d1:ae:
0c:dc:82:e1:b5:fb:9f:69:3f:f3:57:83:52:b7:33:
2c:01:c0:00:a5:7d:b9:f3:b3:be:32:b8:91:38:f1:
a1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:15:F3:59:DA:00:22:65:C9:EF:CA:66:36:06:B1:1F:D7:79:74:8C
X509v3 Authority Key Identifier:
keyid:43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:99:87:06:00:24:fb:a8:4a:96:64:3c:ed:d3:17:45:ae:e0:
78:00:c6:22:b9:d7:15:6c:8b:f3:ee:01:06:b5:6e:20:9f:7a:
5e:ff:02:57:08:ff:63:18:c2:5f:13:6b:1e:35:6d:cb:64:0c:
d3:42:4c:03:99:a1:c3:8a:6d:48:a9:42:b4:ab:9e:55:36:e8:
5a:52:14:05:0b:c9:cf:14:2c:75:7e:da:aa:20:7c:75:7f:44:
98:9a:c0:7f:23:d0:85:93:e2:b6:6b:55:ba:9c:93:ba:44:06:
50:ab:e9:60:bc:f4:63:66:a6:a9:02:16:52:cd:12:49:4b:a7:
25:8d:4d:4c:be:35:21:63:96:e1:1e:38:e1:f1:ac:06:12:ee:
50:50:6b:63:14:bc:0a:d6:85:23:81:65:07:f5:4b:d2:e6:4f:
70:b6:8a:81:c1:bd:d2:80:2b:d0:86:2e:79:76:9d:82:6f:20:
60:74:e6:5e:cc:b9:a2:b1:3a:48:bc:05:6c:ea:37:b5:69:7b:
3f:fa:3a:40:ea:a1:dd:e9:45:9c:a5:9b:3f:59:16:89:15:dd:
86:e0:34:02:24:56:dd:e9:e8:dc:6a:79:7c:82:f5:1d:9c:a1:
0d:d2:6d:c4:25:41:bf:c7:65:50:92:73:5f:17:58:03:8d:f9:
8b:5b:e0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:17 2025 by rpki-client