Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
File: q1wa2N15IqRaLMdIHv4B3UMwBsI.mft (raw, json)
Hash identifier: FXiS7yqRID7J58Y9yny/z8tRdDKDXJ0Msh2NHfus5lo=
Subject key identifier: 52:02:C9:5B:D1:17:4D:85:2D:73:FA:88:28:E5:F1:07:C1:DB:75:15
Authority key identifier: AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
Certificate issuer: /CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Certificate serial: 0197C615389097B2AB1523BAAF2CCE7C5CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
Manifest number: 0859
Signing time: Tue 01 Jul 2025 13:02:48 +0000
Manifest this update: Tue 01 Jul 2025 13:02:48 +0000
Manifest next update: Wed 02 Jul 2025 13:02:48 +0000
Files and hashes: 1: q1wa2N15IqRaLMdIHv4B3UMwBsI.crl (hash: RuqCdAr7naMu9a6U73Aune52EiD6iytCILru072fc5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:15:38:90:97:b2:ab:15:23:ba:af:2c:ce:7c:5c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Validity
Not Before: Jul 1 13:02:48 2025 GMT
Not After : Jul 2 13:02:48 2025 GMT
Subject: CN=5202c95bd1174d852d73fa8828e5f107c1db7515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:46:87:07:10:72:02:5a:8e:af:53:e6:f5:
a5:ac:92:3e:d3:7d:58:39:f6:ef:ce:d3:63:23:9d:
d0:f6:52:97:63:0e:d2:0c:91:4d:d0:98:1e:74:e2:
e9:94:b2:ca:c0:1d:26:30:35:1d:0f:ae:d4:0c:96:
71:38:41:97:8c:db:96:4c:40:3d:d5:45:c2:7e:17:
eb:13:f3:5b:ba:77:12:ef:59:6a:c5:00:ec:04:66:
7b:bc:d7:c1:0a:d2:79:9b:75:d8:cb:b7:56:8e:4f:
e6:2b:40:48:9f:21:c9:e2:d7:b1:db:4b:46:37:ff:
4e:6b:a3:94:b5:7b:04:c0:c7:62:62:c5:4d:a6:a7:
93:a1:df:5f:c6:97:de:7a:4f:ed:a2:ee:e8:9a:70:
72:d4:c4:a0:1f:eb:41:ff:b6:ee:0f:a2:f4:41:9f:
cb:59:1a:86:ab:80:dc:6c:82:66:52:72:2d:3e:dc:
fd:8b:14:77:f7:29:37:52:ef:a8:91:d9:2c:d9:de:
e0:c4:39:f4:02:e2:43:7f:65:8a:3b:47:ce:40:4f:
eb:4d:6d:9f:3b:e0:61:c9:6a:eb:e6:2b:59:d5:4a:
4a:eb:03:af:16:96:c4:ee:88:28:9c:8d:d8:89:2a:
ff:6d:d8:1b:3d:79:f4:62:d7:a3:77:fa:4f:15:19:
c5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:02:C9:5B:D1:17:4D:85:2D:73:FA:88:28:E5:F1:07:C1:DB:75:15
X509v3 Authority Key Identifier:
keyid:AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2c:fb:fe:49:ab:17:8c:0b:ae:3a:1e:19:5c:28:8e:89:d3:
6b:8a:5c:bf:05:b8:46:0e:b3:1b:f8:10:e0:7f:04:bd:82:37:
a1:ca:45:4d:16:05:f0:7a:1e:5e:1f:3b:db:8d:bb:c0:fc:eb:
15:0a:4e:0e:99:21:fd:4f:9c:b2:d9:39:bf:ba:f2:51:32:42:
d8:32:4b:d1:5f:e8:fe:22:ec:85:ff:ca:59:3a:14:60:68:c4:
d6:30:44:e9:bc:56:8c:df:26:20:cb:50:32:b8:3a:67:99:a5:
39:39:f5:2a:b5:eb:8c:17:ba:5b:8f:b8:cb:5d:c5:fc:0f:05:
50:18:81:22:eb:81:a9:56:48:c7:15:21:58:1c:d7:4f:f3:f3:
e5:6a:5a:2d:6f:3f:d1:df:e7:ad:5d:39:30:fd:f8:6a:ab:0a:
5a:24:40:99:99:d9:79:36:5c:03:34:8c:40:ed:df:8f:f7:fc:
9c:12:50:c8:bf:80:28:4e:63:f3:da:28:75:cd:9e:dc:92:14:
41:2a:ca:94:67:98:79:39:60:4e:87:2a:96:23:94:4b:a1:04:
3d:37:a6:c1:32:b9:03:2a:87:d3:b5:da:d9:9c:26:86:0c:9f:
e7:34:d0:a6:be:8b:09:84:03:39:b2:8e:c8:88:3b:bf:55:b9:
db:d9:3b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:33:31 2025 by rpki-client