Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: MznmKLwABZ+xA6c2eKldJa32bnA5fcVlemfSUoqS/68=
Subject key identifier: 0F:E7:92:37:57:08:74:C8:3F:65:EA:1B:6F:C8:5C:4E:1C:80:0A:38
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 01976DABF6386DBFAC324C6C7692FA34EEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 09:01:15 +0000
Manifest this update: Sat 14 Jun 2025 09:01:15 +0000
Manifest next update: Sun 15 Jun 2025 09:01:15 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: 7GzSkqiS63fWnQGiazP4pwn24QNm5wMuiUgPQQ3SpkE=)
2: 4v0g_DeTqNJGOHL4ln9WhvFfDRU.roa (hash: sBcYkkYKQotMu1+q9bGq7Q8bcGlDCzRATiIZUTpTc8U=)
3: 5hSlWSeMSPQw8CT6h_sMd93nETk.roa (hash: wYDeOrdNcouRFYTYjjyBK+NX7iDJV9WRiz3yP1Z5BdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:f6:38:6d:bf:ac:32:4c:6c:76:92:fa:34:ee:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Jun 14 09:01:15 2025 GMT
Not After : Jun 15 09:01:15 2025 GMT
Subject: CN=0fe79237570874c83f65ea1b6fc85c4e1c800a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:fc:6b:94:a9:72:d2:18:fa:3e:2a:35:2e:
b9:49:27:70:3b:54:38:2a:55:e7:83:73:e9:f6:c9:
97:9d:af:6d:09:0d:e0:fd:70:7c:10:aa:32:8b:64:
cf:e9:32:0f:cf:b8:c5:bb:e9:cb:f9:11:54:15:98:
52:a0:be:e8:33:29:94:59:3c:69:07:4b:f1:a0:82:
d6:f9:3a:d6:8f:2a:a7:90:3d:f7:9a:11:2f:5d:73:
ae:1a:e6:10:b5:65:d7:e4:8f:a8:f5:8c:8f:33:96:
88:04:c1:aa:28:fe:b6:51:15:fc:75:d7:bf:70:8a:
e6:4c:17:81:63:0f:46:ec:43:48:76:40:10:bd:2a:
25:8c:82:a2:92:09:df:40:80:74:6b:68:f1:55:de:
f9:af:2f:0c:18:2a:4d:e1:45:b7:cf:42:b5:81:50:
d1:dd:d8:79:85:83:88:da:35:4f:63:06:d8:c5:48:
f1:10:57:8c:a8:6d:84:0a:6a:f1:22:9a:fb:c9:fa:
97:c7:83:9e:45:74:fa:64:b2:36:35:ef:3f:ce:6e:
6c:4e:bf:b3:29:2c:c2:65:34:ed:09:04:4b:73:e7:
f8:81:bb:0b:54:f5:a8:d1:b4:1c:c6:c0:38:61:f8:
32:d3:f3:23:b4:f8:4a:b8:52:04:45:74:69:3b:2f:
6a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E7:92:37:57:08:74:C8:3F:65:EA:1B:6F:C8:5C:4E:1C:80:0A:38
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:41:03:f0:9a:b5:a6:d0:81:dc:66:13:ac:b4:86:e5:60:46:
c0:53:82:9e:79:89:39:5a:7a:78:96:9c:20:cd:7b:bf:d7:6d:
8d:c3:71:64:20:0d:f2:e3:a1:1c:32:12:71:4b:42:c0:0d:3e:
e1:fd:9e:54:b6:90:36:85:9a:82:81:25:8d:57:2a:e0:2c:d5:
d2:33:9b:f4:89:f6:0a:0d:ff:07:70:66:03:ce:b2:77:21:44:
60:4c:38:b0:70:02:99:33:f2:d2:a7:6a:4b:48:4d:53:05:52:
51:a9:7d:3c:d8:82:68:e9:bf:bd:ea:24:0a:37:7b:9d:73:5e:
d3:49:2e:cc:5c:8f:ed:75:57:e5:42:90:5f:2b:ef:04:f3:ea:
b0:c3:87:63:79:42:b5:55:00:b0:87:94:ca:b6:d9:d7:63:21:
5e:61:7f:4c:be:a3:20:02:24:f8:a4:80:ac:cf:d4:a6:1b:bb:
d3:4a:14:6c:ee:05:ee:ac:4a:cd:8f:62:e0:9f:52:40:3a:b3:
3d:3f:78:3b:78:64:8c:4c:73:ad:f4:45:b7:7b:b6:2b:16:61:
82:dc:94:70:0f:17:19:56:4f:5d:a8:c5:4a:52:3e:0e:02:2e:
5d:72:55:2a:ef:8c:15:8d:3d:00:4a:42:13:45:a4:32:19:d4:
98:df:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:12:01 2025 by rpki-client