Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: TawUywJt6qzCkb3mTdebJ2EGG3p8VA5+uFM2BlBEk3w=
Subject key identifier: 4F:35:6C:AE:4A:A5:79:DB:75:8E:26:4E:06:13:3C:7E:37:EE:EC:10
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 01976B865A770B12B806BE80E83758FDBB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 0724
Signing time: Fri 13 Jun 2025 23:00:56 +0000
Manifest this update: Fri 13 Jun 2025 23:00:56 +0000
Manifest next update: Sat 14 Jun 2025 23:00:56 +0000
Files and hashes: 1: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: R32g7z+KYVjKXtBAshxOjQN04O4GyF3UpUeiWYLC254=)
2: s-6iu0euq8mwctWc84gynbP4Gz8.roa (hash: ix817uYIHKTbd4XoAS5Yf6A1NltjL0SfzgZQTYUowKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:5a:77:0b:12:b8:06:be:80:e8:37:58:fd:bb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Jun 13 23:00:56 2025 GMT
Not After : Jun 14 23:00:56 2025 GMT
Subject: CN=4f356cae4aa579db758e264e06133c7e37eeec10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:bf:c9:56:17:da:94:3a:ae:49:23:30:58:
3f:3d:91:4c:98:89:4b:64:10:3c:7a:85:b4:85:f4:
67:08:1f:31:09:18:f2:84:41:e7:f2:d8:5e:db:e9:
d3:ef:5e:ca:ac:7e:3a:71:37:31:a4:a6:44:80:9c:
60:8a:f1:c8:ef:7a:ef:47:e9:cf:65:1d:19:c9:ed:
a1:7e:c0:36:08:2d:95:70:e7:21:35:7c:e3:a0:3d:
db:e5:2d:54:5a:4c:a9:58:17:30:8d:a4:6c:27:39:
a2:11:60:ad:63:52:44:a3:4e:b5:4e:13:c7:40:48:
0b:b0:36:0d:10:c9:ec:21:45:3a:a4:f3:23:d9:89:
c1:50:4f:f6:f5:ad:26:6a:7c:d9:60:05:f7:ba:16:
2c:45:15:74:17:c9:7d:2e:7b:40:3d:27:3c:e9:83:
07:d8:ac:58:e4:81:88:16:40:03:0b:6d:55:f2:74:
c6:f9:ea:53:dc:ff:1b:5b:84:37:06:07:05:45:25:
3e:bc:7c:3f:38:70:6d:d6:95:c4:bd:2c:90:c6:27:
bb:26:34:00:da:6f:0d:f2:18:b5:fb:81:de:73:b4:
1c:a9:99:c7:fd:63:07:b0:a4:47:f0:72:ac:3c:8f:
e7:7b:61:ab:12:27:04:33:89:ec:e5:35:75:78:00:
de:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:35:6C:AE:4A:A5:79:DB:75:8E:26:4E:06:13:3C:7E:37:EE:EC:10
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:85:20:e4:d4:2b:67:19:54:5f:17:d0:1a:c5:c6:f8:6f:93:
2d:1b:9a:a0:53:52:98:b2:ab:01:de:bb:79:95:80:36:88:f0:
7b:e2:69:62:44:72:9b:ca:69:2d:b6:25:cd:34:82:fc:23:d6:
1d:62:c2:96:69:a6:0f:aa:9c:42:d5:88:5a:89:ba:84:fc:fd:
bd:18:35:62:a1:28:31:c5:49:81:30:bc:9f:76:0b:c4:7b:1a:
9c:fb:3a:d0:4e:2c:92:97:73:f4:8c:8f:0d:a1:a5:1c:fc:37:
a1:19:cf:ac:9b:d9:48:58:bd:fe:ce:1e:dc:27:e8:64:be:ae:
45:17:ee:08:40:35:9d:5d:7f:aa:d7:3b:82:5c:5b:3b:8a:79:
6a:ba:e5:7f:e6:a5:ff:51:52:d8:13:ae:69:f7:3b:6e:21:32:
b3:0a:f0:c7:d8:b4:ac:4c:ae:53:d5:5f:22:9b:83:af:8c:1c:
15:c8:fb:84:3c:15:bb:b1:a6:71:79:41:de:f4:84:98:64:93:
ff:cb:b9:36:17:22:15:43:52:0e:01:9c:63:88:b6:0e:6f:b6:
be:06:c4:66:03:cb:a4:e5:45:cd:14:9a:ca:0c:fa:0d:65:5c:
9b:1b:84:f5:fb:67:b9:0a:e1:59:f4:78:bf:c9:53:84:6f:72:
ad:cd:4a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:40:48 2025 by rpki-client