Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
File: Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft (raw, json)
Hash identifier: zcq0++N/EiFY0P61V0hpRSTkJv/wo3m5JlGF9BBlBio=
Subject key identifier: 1E:8A:FF:3F:F7:F6:1D:CF:BC:E0:A6:EB:48:C3:BF:96:9C:40:99:4F
Authority key identifier: 43:7F:16:6A:FB:3F:10:2F:B1:25:43:B9:27:09:7C:96:B6:BA:9D:C2
Certificate issuer: /CN=437f166afb3f102fb12543b927097c96b6ba9dc2
Certificate serial: 019770AC8EEC98E32EBA68CD14D557E4F40B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
Manifest number: 21
Signing time: Sat 14 Jun 2025 23:00:46 +0000
Manifest this update: Sat 14 Jun 2025 23:00:46 +0000
Manifest next update: Sun 15 Jun 2025 23:00:46 +0000
Files and hashes: 1: Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl (hash: P5G/acY/mxJK+2oAoXjUm0Fu0Fzync5TurV4TcC0NUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:8e:ec:98:e3:2e:ba:68:cd:14:d5:57:e4:f4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437f166afb3f102fb12543b927097c96b6ba9dc2
Validity
Not Before: Jun 14 23:00:46 2025 GMT
Not After : Jun 15 23:00:46 2025 GMT
Subject: CN=1e8aff3ff7f61dcfbce0a6eb48c3bf969c40994f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cd:7d:4f:b0:c7:d5:99:38:d1:61:66:d5:a4:
3b:74:1d:ef:7c:c9:44:1c:d2:a0:03:81:47:bd:74:
f7:e1:1d:d1:08:c9:6e:5e:96:a2:a6:43:16:b9:b7:
3d:6a:2d:c3:86:60:33:0c:e0:d8:9a:af:98:8b:c7:
0e:a3:5f:d1:63:21:b0:d7:16:49:b8:02:76:6d:49:
d9:ff:da:38:5b:4f:d8:66:f3:c0:e9:65:aa:9d:0f:
3e:15:d3:62:21:1f:93:d2:38:3c:e7:74:07:63:3d:
17:38:5b:08:22:70:87:64:4b:a6:87:fb:1f:89:12:
0f:39:fb:0b:3c:1b:b2:f6:d3:a7:a0:43:3c:50:44:
1a:7e:06:12:54:5f:ca:c2:3a:20:ba:6f:b2:63:b1:
28:68:2b:b5:4f:65:c3:b6:81:43:1b:1f:29:de:f2:
a0:19:23:79:94:07:00:cd:c8:2b:89:2a:7f:2c:0b:
e6:22:d8:ee:44:fc:4b:e4:14:9b:48:9e:2c:5b:5f:
3e:0b:10:78:af:c5:16:85:62:c5:e4:40:57:87:9e:
76:9e:9e:ed:b2:3e:e7:04:a9:3e:15:8e:18:83:9e:
41:99:2d:3b:04:ad:da:0e:ec:ef:e7:5f:06:67:3f:
85:45:bd:cf:dc:2e:38:a4:6f:b0:e3:30:a9:96:38:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8A:FF:3F:F7:F6:1D:CF:BC:E0:A6:EB:48:C3:BF:96:9C:40:99:4F
X509v3 Authority Key Identifier:
keyid:43:7F:16:6A:FB:3F:10:2F:B1:25:43:B9:27:09:7C:96:B6:BA:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:af:0a:69:32:2f:0c:29:63:18:1a:c5:89:19:ac:ce:59:c1:
af:d5:fd:6d:b2:92:ce:1d:10:fe:b6:c1:49:2e:5d:81:03:c2:
7e:1c:bb:ed:26:1f:18:62:72:2e:21:e2:1e:d9:b9:2b:a0:f3:
b4:25:f4:69:33:8c:62:14:46:31:6c:d7:4a:19:ad:ce:e9:d2:
25:9c:40:06:3c:3f:a8:70:4e:a0:db:80:9b:5a:22:d0:a4:4a:
db:5f:1c:57:a8:39:42:7d:3f:d2:30:14:b9:e7:e3:26:a3:b4:
9f:9b:01:8e:35:00:27:c3:f4:f4:54:8a:0d:de:2c:57:d8:ce:
03:cc:67:9f:f5:66:70:b0:85:03:78:4a:26:a3:74:12:ab:91:
fc:9b:39:28:ad:dd:74:e1:1f:eb:7b:35:fd:f8:d1:94:46:6f:
15:78:32:04:a4:8e:bf:3c:77:26:be:9c:07:84:ab:be:7a:63:
5e:69:6e:e5:5c:61:86:8d:4c:4f:37:c3:e1:41:91:d5:66:f4:
e4:a3:2f:a5:30:4a:6b:dd:e5:f0:45:5b:fb:9d:6e:2f:6e:b3:
cd:f6:ce:db:4d:27:54:97:61:41:08:bf:c7:80:e1:f7:ae:e7:
fa:71:15:6c:11:b8:65:11:6c:e0:34:21:43:ae:f7:66:09:ea:
7c:88:e1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:13:36 2025 by rpki-client