Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
File: rQVANtrTLReoyRbcLfuzzoo2RSw.mft (raw, json)
Hash identifier: hSSAFxgjirAp55MQk811J2ICyUfsravCrOJvbUkJXJA=
Subject key identifier: 7D:4B:60:C3:D8:9F:48:03:72:4E:D4:A6:D8:B9:EE:C2:29:9D:C8:AB
Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Certificate issuer: /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Certificate serial: 019774F76FB9AB5329A0A3EE08B43FEB6422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 19:01:02 +0000
Manifest this update: Sun 15 Jun 2025 19:01:02 +0000
Manifest next update: Mon 16 Jun 2025 19:01:02 +0000
Files and hashes: 1: V1VyWKK4g97snYUaOwHJAFP_MdQ.roa (hash: IhL8EIfC6sBImzV34O7y77KJDpidcr5em23zVj3USMQ=)
2: rQVANtrTLReoyRbcLfuzzoo2RSw.crl (hash: xDRN74OEtqciT8EpKjTrFUHe4gQeWsyvY8nmg+5OijU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:6f:b9:ab:53:29:a0:a3:ee:08:b4:3f:eb:64:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Validity
Not Before: Jun 15 19:01:02 2025 GMT
Not After : Jun 16 19:01:02 2025 GMT
Subject: CN=7d4b60c3d89f4803724ed4a6d8b9eec2299dc8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:55:af:ee:73:2e:1c:4a:96:65:d2:13:f6:
4c:cb:f1:ce:31:aa:44:6a:d4:9e:2e:a0:1d:53:95:
6a:b7:25:78:19:46:ed:fd:53:d3:cd:49:1e:db:c2:
c3:ba:58:f3:95:95:ad:29:8a:5d:b7:22:8e:48:51:
80:93:18:cb:ea:b7:3d:2a:c7:bb:f3:4b:43:52:db:
e9:64:4c:f0:93:70:79:26:46:14:8d:07:e3:ae:83:
28:61:d6:69:a6:54:f9:47:f9:97:08:41:45:34:20:
fa:7b:05:dd:e7:cd:d2:f1:82:3c:e8:7d:37:70:f8:
2d:3b:3f:70:31:2b:9d:04:06:b0:9f:42:26:62:09:
a0:69:0d:e6:bc:2a:98:ba:53:b6:e7:c7:51:b2:a3:
46:69:e2:02:dc:87:13:2e:dd:37:f2:50:e3:69:67:
bd:16:f8:21:77:01:f7:98:9c:b5:33:c3:96:94:17:
8b:f0:a8:13:55:95:2b:89:ff:01:ff:4a:0e:6d:11:
53:f9:7b:c9:ec:6f:57:6a:bd:8e:bb:52:3a:68:7b:
e3:84:18:97:62:33:7a:fe:8d:e5:fa:7e:ff:1a:03:
d4:6f:01:fa:8e:9a:cd:9f:7c:29:fa:0e:24:b3:40:
6e:61:21:9f:71:cd:fa:5b:a4:23:21:5d:96:25:ce:
20:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4B:60:C3:D8:9F:48:03:72:4E:D4:A6:D8:B9:EE:C2:29:9D:C8:AB
X509v3 Authority Key Identifier:
keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5b:ff:d0:79:ff:36:19:b9:84:f2:e5:c8:11:f9:5b:5b:ee:
65:d7:29:0d:36:bf:87:0d:28:b8:db:12:d1:6e:16:fb:e8:0b:
c3:08:bc:d9:61:58:80:5d:33:39:83:eb:65:e2:f1:a4:38:2c:
97:7b:c1:04:54:f2:e6:eb:bf:34:45:9a:fa:e5:2c:d9:9b:17:
52:29:3e:1c:e5:e7:02:fd:7e:de:ed:c2:ae:6f:de:4a:68:a7:
40:48:65:aa:c2:84:c7:8d:cc:1e:ac:2e:63:7a:3f:13:c7:83:
52:8a:9d:60:69:4c:98:86:1e:10:64:8c:da:74:a8:d2:fb:1c:
57:58:4a:28:4d:40:e4:e7:68:33:89:cc:f2:f7:c6:f2:ac:49:
da:7c:5e:a9:1b:e6:a2:76:ca:96:83:b7:5f:be:fb:6b:62:f1:
46:76:ac:3b:b2:5f:10:32:75:15:9e:e1:b0:1e:b3:88:b1:57:
be:7c:0c:99:bb:9b:5a:0d:04:fa:e5:00:a8:8e:9e:98:67:55:
41:fd:f9:60:27:d3:ee:13:d6:f0:d5:92:d2:3b:3c:a5:71:6f:
8b:00:95:e6:bf:dc:1c:41:a8:67:32:ac:35:78:32:19:b9:c4:
62:24:3d:cb:9d:3f:2d:12:ee:53:61:52:98:20:c9:29:10:0d:
15:31:f5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:57:17 2025 by rpki-client