Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: iYizKdyFtRpsaf+z920LBHLXTZpYolxfJvEmqvaE0yQ=
Subject key identifier: 52:B3:41:FD:E7:71:07:01:D2:ED:EB:0C:6C:2E:4C:7D:27:D6:95:3A
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 0197895985DC7AA73C3975EA239C41C8D3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 13EC
Signing time: Thu 19 Jun 2025 18:00:34 +0000
Manifest this update: Thu 19 Jun 2025 18:00:34 +0000
Manifest next update: Fri 20 Jun 2025 18:00:34 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: cYXAsKFo3uhmhKWjAv66315p8yTSxxGLbCRmM4es704=)
2: cIo_z6M4iUgSv6Rq-GH3zvKNA-E.roa (hash: uuzfvafFMiGynhqFG/8GblYil9CuUOOslH5kMNYMbzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:59:85:dc:7a:a7:3c:39:75:ea:23:9c:41:c8:d3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Jun 19 18:00:34 2025 GMT
Not After : Jun 20 18:00:34 2025 GMT
Subject: CN=52b341fde7710701d2edeb0c6c2e4c7d27d6953a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:46:8c:e0:91:0b:39:37:ff:5c:c2:98:e5:
6f:2b:00:0d:65:96:f8:d8:f8:d7:36:49:ff:3f:fc:
4f:5a:d1:df:6a:48:e9:21:3e:d1:1e:5c:79:d8:08:
a3:41:19:5b:2f:e2:f8:3c:09:16:4a:66:4e:87:e5:
c3:14:c8:3a:65:99:26:0e:79:7c:7d:5c:07:19:ba:
0a:b7:39:ef:ce:e4:98:cf:61:9f:4e:cb:ed:95:c5:
d8:95:05:9e:c2:84:ca:23:f8:52:84:45:4b:67:43:
e0:e2:15:13:00:da:6f:93:ad:57:9c:f6:c9:40:38:
76:81:d6:bb:6c:2b:e5:e0:72:ad:30:a5:d9:bb:a3:
14:a0:7c:72:0e:cd:5a:02:e5:4c:a7:94:4e:bc:e3:
0c:36:e2:81:10:2b:38:a4:a4:76:2f:b8:47:3b:3c:
c0:bc:7c:d2:13:ee:a8:d2:2a:68:af:33:0f:c3:fd:
bc:35:b4:dd:6f:b2:c0:30:2c:62:db:fb:a9:50:18:
46:3f:0f:ed:52:2f:a4:6b:0e:a9:f4:a9:55:ca:64:
b7:06:91:7b:f5:0c:96:7d:d0:f5:d5:42:29:1e:34:
9d:61:0e:ab:45:7d:8d:0c:ea:6d:55:18:03:2c:af:
a0:ca:1a:12:22:c6:9f:9b:b0:c8:6c:60:0a:69:1d:
c6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B3:41:FD:E7:71:07:01:D2:ED:EB:0C:6C:2E:4C:7D:27:D6:95:3A
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6a:d6:d8:8e:cf:4f:9e:95:41:0e:ae:0e:0b:14:4e:7f:04:
53:e0:1e:a8:98:9a:a2:b0:8e:3c:b8:9d:27:37:68:39:13:de:
19:90:58:48:8c:2c:0e:04:4e:97:22:87:c2:1a:70:37:9f:3f:
45:d0:ab:f2:a1:97:27:db:f3:65:c2:81:97:34:ac:3f:70:e1:
2a:39:0d:9a:e5:61:56:64:7d:5c:58:cd:72:18:a6:69:99:36:
7c:d2:45:2d:7b:6c:20:55:44:c6:33:95:b2:4f:86:43:b9:6d:
be:d7:18:ca:dd:2f:fe:8e:d2:83:92:dd:27:86:bd:bf:6d:92:
18:05:08:6b:ba:0a:20:b8:0e:e4:63:66:00:14:18:36:0e:b0:
fe:8d:a8:c7:09:ad:28:7f:de:c6:20:7a:52:5a:50:80:c1:27:
86:bc:93:09:36:b7:99:23:93:9e:c0:f1:73:31:70:38:c5:d3:
0f:a2:c8:2f:4a:c9:b1:df:49:23:89:7b:f3:8c:9e:a4:70:4a:
cd:6e:cd:7a:cf:df:57:da:cc:c0:57:a3:49:44:75:1b:75:0a:
b6:b8:7f:30:ea:93:de:aa:f3:03:12:d8:d5:45:b7:32:dc:19:
56:31:4f:78:49:6d:f5:a3:c3:8a:4a:f8:3d:4a:56:77:d1:d2:
b0:f1:6e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 00:49:58 2025 by rpki-client