Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: dxXR8YkCw7XZYIJ8rw8nXlQikLLu1OQkv1kC2iFqEKc=
Subject key identifier: 04:1D:D1:9E:59:7D:27:E3:8B:AB:75:C3:88:BF:39:4B:DE:07:C7:23
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 0197B77C73DC723417E87CAB5816D7ED6A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 1254
Signing time: Sat 28 Jun 2025 17:01:16 +0000
Manifest this update: Sat 28 Jun 2025 17:01:16 +0000
Manifest next update: Sun 29 Jun 2025 17:01:16 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: lOkG2mdhIP6pLewFbsscoKKRoRV8Iy7CXlpCFAspneY=)
2: mF8H3prBEeFw8vv0-wYmE8_MtFk.roa (hash: k6q/MJjxt2Tjd0EikWZoheIRBqYjVQryjlZ0eCvLYRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:73:dc:72:34:17:e8:7c:ab:58:16:d7:ed:6a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Jun 28 17:01:16 2025 GMT
Not After : Jun 29 17:01:16 2025 GMT
Subject: CN=041dd19e597d27e38bab75c388bf394bde07c723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:52:8f:08:ea:f4:95:7f:26:26:a7:89:8e:
6c:e7:75:47:0d:8b:10:f3:ff:59:a1:02:5b:4c:1a:
21:49:e5:40:40:8b:a4:ec:c6:d3:a6:fb:8d:70:23:
2d:62:9a:cf:5f:e3:52:7d:b6:96:fa:24:16:e0:c1:
0b:9c:09:ab:1d:55:a2:bc:f0:1a:6b:99:b1:9c:27:
48:4a:3d:3a:02:90:e3:3c:ae:ba:8d:b6:6b:2b:b6:
07:49:ea:cb:e5:6b:ad:fe:3b:a4:8d:b2:4d:41:80:
17:69:1a:aa:df:fd:2e:a6:c1:12:69:2b:18:f8:a3:
93:c9:0d:4a:d3:fe:b5:ca:1a:7d:9d:24:24:e8:3b:
83:50:40:a1:7c:cc:df:4a:c0:e2:6e:df:02:dd:1e:
a8:93:c4:34:42:ca:7f:37:b8:ca:5a:ed:48:5a:58:
60:68:52:e9:ff:0d:1b:01:bc:9b:da:9a:47:25:26:
64:b1:85:c3:4c:d5:f3:b1:20:6c:fb:f8:96:30:85:
ca:4e:7c:ab:bf:b1:f2:4b:2c:1c:b3:4c:ff:c5:51:
7a:c9:36:c1:a4:54:bd:43:2a:8f:f0:13:1a:85:9b:
7f:4e:1e:5b:75:fb:c0:5c:31:5d:75:44:c1:c8:1b:
25:1e:d1:d7:d5:68:ae:46:f4:e8:a5:43:5a:ca:2f:
cb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1D:D1:9E:59:7D:27:E3:8B:AB:75:C3:88:BF:39:4B:DE:07:C7:23
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e6:01:c2:32:97:b1:d1:27:51:49:e4:54:1c:94:26:98:06:
96:ef:9d:ef:f2:50:f2:b8:34:a9:30:27:c2:92:50:73:1f:6f:
ff:30:d2:51:29:06:66:d4:00:4e:eb:93:ad:d6:84:68:83:89:
14:b0:a5:30:31:42:f4:ad:c1:63:e2:55:cd:d0:4a:3c:ef:2e:
f3:5b:60:0f:9e:d2:e3:bc:f1:ee:a5:6a:45:ab:44:11:0b:3c:
55:83:08:eb:e5:28:0e:70:16:4a:5e:fc:5f:bf:00:c1:d7:a9:
f5:d1:b8:e6:93:ef:a3:1a:07:aa:76:98:26:0a:45:d8:0d:31:
63:4c:c4:c6:7d:c4:1f:02:30:fd:7e:ce:37:1d:bb:72:4b:7a:
c7:91:c1:68:eb:9f:53:6c:75:84:f9:a9:66:bc:b3:9f:93:ab:
dd:45:51:4d:a6:38:63:46:f4:ab:37:e3:7c:b0:f4:63:b8:76:
9a:d9:48:4f:09:5e:46:16:49:44:5f:87:30:d7:2e:82:58:ad:
ed:20:84:81:01:86:92:95:ab:c1:d3:a8:a6:dc:b8:86:ab:70:
e8:5e:54:8e:50:cf:68:4f:ca:e0:03:06:27:78:a2:00:d6:bb:
e0:21:34:6c:10:92:ae:04:77:73:25:72:99:47:9f:2d:b9:f0:
10:fd:4d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:23 2025 by rpki-client