Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier: +hxdgn0jwOGscC6xyLEjUWCNxB2AzCSM8Ewm0ozhVxw=
Subject key identifier: EA:EE:07:DE:F5:DA:9B:22:6B:46:26:E6:6C:23:6E:20:99:1B:77:92
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial: 0197B70E62FBF6096E8DD265A20B5B52714B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number: 021A
Signing time: Sat 28 Jun 2025 15:01:02 +0000
Manifest this update: Sat 28 Jun 2025 15:01:02 +0000
Manifest next update: Sun 29 Jun 2025 15:01:02 +0000
Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: FT5SalcLcV3TKY0KMop1dprHVMyclYzIqPcJAKtSp7Q=)
2: nNbHw-B9ovJEjkk8hXq6L72QjEA.roa (hash: gipZmwcUyYZU1rfrC2SjuA4uq7CTXt+ZJKoz6Ec8OnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:62:fb:f6:09:6e:8d:d2:65:a2:0b:5b:52:71:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Validity
Not Before: Jun 28 15:01:02 2025 GMT
Not After : Jun 29 15:01:02 2025 GMT
Subject: CN=eaee07def5da9b226b4626e66c236e20991b7792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5b:23:8f:c8:8c:18:c5:bc:03:3e:aa:25:f4:
f1:1b:f1:c7:2b:5d:8d:dd:ed:e7:e4:3d:68:d5:5c:
90:22:95:d3:8e:76:6c:5a:04:c8:37:94:ac:95:b0:
b6:46:d7:2a:15:77:64:6f:35:1a:60:9e:8f:3a:db:
6b:f8:a2:c7:d3:f0:a6:a1:9d:f6:9f:e9:79:49:36:
fa:5e:19:b2:f9:10:98:ec:7b:7b:60:c6:56:78:78:
97:4c:8b:0b:1d:16:04:6a:9f:95:0e:8d:9b:12:fc:
16:97:ea:88:9b:71:97:23:70:59:64:66:b4:49:c3:
2a:be:92:6a:5d:c3:2d:de:e1:8d:0b:b4:29:85:60:
72:91:95:cd:3c:bc:05:e7:42:5d:f2:d5:9f:fc:51:
14:53:ee:35:a4:fa:83:db:b5:84:3d:9f:07:4c:f9:
5c:95:8e:42:34:b4:78:27:ae:24:f0:1d:03:f1:e7:
dd:03:07:e0:60:88:1a:e5:c0:d0:1f:40:50:5a:cb:
15:30:e4:02:09:15:81:37:98:7a:46:d0:d6:09:ee:
c7:fc:de:10:ba:88:e4:3e:d0:f4:84:a5:a6:db:cb:
26:89:be:87:9f:3e:79:80:17:a7:06:62:4c:11:2e:
ee:80:9c:20:d6:b0:14:ae:15:bd:d9:6d:7a:b7:ea:
a9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EE:07:DE:F5:DA:9B:22:6B:46:26:E6:6C:23:6E:20:99:1B:77:92
X509v3 Authority Key Identifier:
keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:92:d6:75:45:97:f6:9f:04:27:bd:87:0f:36:c5:8b:01:3b:
0e:bc:31:42:9b:b3:59:f5:74:48:d2:ab:66:d1:74:7c:d4:07:
99:b7:a9:64:88:33:99:82:de:0f:f6:3c:92:79:dd:bd:b5:4f:
07:ed:d8:c6:58:c9:57:0f:b8:45:2c:37:f0:20:ea:91:68:1c:
de:6c:ca:68:18:c6:59:0f:b5:92:5f:dd:3f:2b:08:31:5b:89:
cd:b4:22:88:a3:0a:80:e4:8f:23:b6:0e:8e:b2:50:25:09:57:
23:7f:11:19:25:70:f7:b8:99:d2:e2:0a:05:1a:94:94:34:73:
f2:31:83:2f:a6:c4:5b:56:17:f6:85:b7:2a:b0:eb:b2:4b:26:
a0:b2:ce:1f:98:3c:77:1c:11:22:af:e0:d4:5b:90:db:4c:90:
18:24:d0:43:5a:65:16:c4:6d:03:4a:37:b6:fb:17:8c:3c:65:
fa:5a:54:19:51:85:9c:15:a4:b9:f3:5a:1b:e1:64:6e:3c:c0:
61:02:79:4b:f6:e2:34:d1:35:bd:90:26:22:c0:cc:b8:ae:0c:
84:14:ce:5c:30:db:4b:d1:63:23:a5:e1:43:08:b8:20:29:1f:
96:31:ce:de:0f:12:1a:45:81:99:26:e0:12:ef:f8:7d:6b:bc:
88:c9:6c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:20 2025 by rpki-client