Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
File: RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft (raw, json)
Hash identifier: 3gdRQUJ/5QE5EMeIoaE2zf6+x4elzKfU+sC+prXrIk0=
Subject key identifier: C7:51:02:30:DF:B4:89:3B:EE:93:02:8A:8F:9A:F6:6B:0D:CD:AE:37
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 0197884701C9F5C10FAFD88A5C2A1564BA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
Manifest number: 0D88
Signing time: Thu 19 Jun 2025 13:00:44 +0000
Manifest this update: Thu 19 Jun 2025 13:00:44 +0000
Manifest next update: Fri 20 Jun 2025 13:00:44 +0000
Files and hashes: 1: RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl (hash: x0N9dVKx4SmyUuXeh9UiS3suxvVV1Yd07/YD9Dl44js=)
2: bdbKzGuhzcfiVqYcyUjbwWvnE0w.roa (hash: EoIpsT1HmNm7h0aLpOdMeI8Ad8kT8sfcfHIMZV0nTSQ=)
3: sayECznhSIzMnJpVagOHebCR_x0.roa (hash: hUIe0JVfYeAbZr+iALwcU4dqSjQhm3L+k0UihQEwCkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:47:01:c9:f5:c1:0f:af:d8:8a:5c:2a:15:64:ba:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Jun 19 13:00:44 2025 GMT
Not After : Jun 20 13:00:44 2025 GMT
Subject: CN=c7510230dfb4893bee93028a8f9af66b0dcdae37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:94:71:52:fd:96:62:9c:b4:c0:14:0e:6c:
00:c6:21:96:ed:3f:01:86:20:96:f2:e2:7d:b9:9c:
98:68:43:f6:37:46:54:08:2d:27:85:1a:4b:65:45:
83:ec:40:f8:23:30:37:c6:89:07:44:91:89:3e:3c:
b9:d2:7a:54:c8:33:27:63:7a:b9:86:0a:be:14:5d:
d2:a9:96:a5:46:1b:86:b4:bc:c2:f0:f3:b8:66:65:
17:ec:b0:ae:b0:01:67:8a:47:63:ca:5d:69:d1:1a:
42:12:40:a9:6e:2b:88:78:2a:05:a0:c0:e9:3e:ee:
3f:22:4e:c7:63:61:4d:16:9d:f4:78:fb:46:cd:31:
18:fa:05:a2:77:4d:32:03:40:28:48:78:44:35:29:
85:72:db:d3:06:10:4a:d7:bb:a9:67:39:d8:95:d7:
66:0a:37:25:23:d4:2d:c4:7c:ea:9b:62:cd:db:68:
d9:1a:05:c0:ea:d2:a2:5b:f4:4a:3f:0f:2e:60:2e:
11:32:eb:dc:72:19:86:0c:2e:6a:25:b9:dc:41:b4:
ec:9c:c4:39:de:59:69:95:3f:bb:cf:92:8f:87:5f:
e8:4d:c7:3e:69:64:4a:4a:1b:2a:8a:3e:f7:5c:59:
8c:5b:60:ae:d0:b9:41:50:fa:09:83:32:d1:b6:37:
48:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:51:02:30:DF:B4:89:3B:EE:93:02:8A:8F:9A:F6:6B:0D:CD:AE:37
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ce:61:1e:bb:f4:c9:23:19:f2:3e:c9:bb:c9:83:3a:df:06:
d0:49:90:2b:c2:58:42:a8:c7:e2:55:36:8e:6e:ba:9f:37:1c:
86:a3:fd:cb:2e:e2:03:12:a6:29:10:39:89:ba:39:35:40:dd:
02:0b:b6:7f:44:7a:7a:81:7a:fa:41:f8:69:fa:95:ef:99:e3:
80:d6:8d:6a:1c:35:6c:2a:67:67:c0:93:8d:ad:0f:58:53:d2:
45:b7:d3:66:96:23:95:08:e8:fd:04:14:7c:57:ce:3c:09:7d:
bb:f5:5d:85:d1:70:ee:47:58:e2:7d:a1:34:0d:07:8c:3f:5e:
3b:be:9a:08:8b:b3:73:e0:c0:18:6e:03:fb:d3:eb:36:c1:30:
bc:56:f0:95:03:e6:80:51:dd:17:51:28:a5:b5:7c:44:f5:c5:
68:19:15:68:66:df:db:90:b6:cb:89:61:af:80:94:12:46:1c:
2d:99:c3:c8:be:43:f1:a6:8e:4b:9a:d2:11:0e:91:13:3f:ea:
be:eb:8b:65:51:cb:2c:d9:a5:d0:1f:6e:dc:ac:b1:98:87:99:
c0:9c:24:ea:4d:8f:7f:94:bb:bb:9b:4c:42:d9:60:0e:6a:04:
8d:1b:e8:4a:d7:ec:79:8a:51:10:1a:38:d1:79:b8:b1:38:b1:
0f:fa:ce:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 18:33:03 2025 by rpki-client