Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: JOHBFhLdtm4dnB7h4Sy+t2WCuQE30Bi7+g+XbG0sxn4=
Subject key identifier: 3B:1F:A1:2B:8A:98:55:72:2C:8A:29:99:63:8D:17:E6:35:ED:38:C9
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 01977263DECEBDEF42E21FCCC1EA2E1409F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 0A73
Signing time: Sun 15 Jun 2025 07:00:37 +0000
Manifest this update: Sun 15 Jun 2025 07:00:37 +0000
Manifest next update: Mon 16 Jun 2025 07:00:37 +0000
Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: 4yxTIjRBuiKtkCFn2/mUHl+ZW2UXSqq4uXQMXTTBwLo=)
2: qM0zHnDHmCB87MJblo3SPkQV0l8.roa (hash: ghiuWVRz4dZZF/5w9C3wckrnenvE19FZlWa9Xg0iyUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:63:de:ce:bd:ef:42:e2:1f:cc:c1:ea:2e:14:09:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Jun 15 07:00:37 2025 GMT
Not After : Jun 16 07:00:37 2025 GMT
Subject: CN=3b1fa12b8a9855722c8a2999638d17e635ed38c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:09:1a:40:15:92:c2:1a:6a:5f:f4:d3:72:
85:ed:6e:7d:ac:a0:78:69:e7:7a:d6:bc:c4:f4:e9:
b4:79:86:ad:45:e9:ed:06:0e:20:b2:c8:b5:e6:27:
56:1e:11:2a:09:87:4c:9d:fe:4e:6f:c5:78:06:b2:
6a:88:27:31:ea:02:fb:21:e7:53:da:8a:4d:53:25:
8d:c2:9f:d1:18:ad:33:c3:34:07:05:7b:3f:22:4d:
fd:82:d2:14:5a:67:25:e8:24:f8:9c:88:5b:97:61:
b2:ab:f9:00:96:0c:b0:8e:dd:9b:55:5c:7b:6c:b3:
2e:aa:25:a1:8b:ec:2c:04:4f:cc:7a:68:6c:d8:a0:
17:97:f1:06:af:5d:9d:c5:22:1d:2c:e5:09:1c:26:
31:b7:e9:90:15:89:76:53:08:33:e3:b8:65:b3:de:
c4:0a:5f:23:5e:68:d0:2b:56:81:27:5e:ca:6b:b4:
7f:10:3c:98:69:b1:ec:e2:35:9b:8c:e5:a8:8c:7f:
74:19:1c:76:7a:35:b8:b5:da:21:fc:44:0a:f5:96:
bf:7a:89:15:fd:d8:f8:7d:11:ba:74:b8:d7:1c:8b:
ec:70:92:6c:44:3f:78:02:f6:24:c6:cb:98:28:c8:
09:19:7a:8f:d7:b7:10:bd:d6:9c:8e:85:a3:a8:05:
03:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1F:A1:2B:8A:98:55:72:2C:8A:29:99:63:8D:17:E6:35:ED:38:C9
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2d:ad:32:40:06:25:41:21:b9:ff:6a:3b:22:2d:57:b5:e3:
3c:b0:ac:21:c4:c5:1f:6c:b9:d4:4f:6b:99:2d:a3:fb:1e:24:
d7:c5:a3:6b:8d:1e:8e:4e:d2:97:2c:fd:19:73:74:54:b0:70:
1f:c7:49:e6:da:6d:08:0d:60:e2:e9:65:4a:f6:9c:08:64:b6:
b4:d4:55:54:89:54:20:81:ee:5e:df:87:4c:a8:0e:b2:9a:38:
39:0b:04:79:ea:47:b6:00:33:3f:87:b9:b0:84:65:ea:1d:d8:
59:b9:3b:93:48:1c:11:fc:57:a3:58:03:ef:c8:0f:9e:e0:ef:
a2:f5:80:02:41:d2:99:f4:11:c6:01:4b:fd:45:59:90:59:c2:
b0:99:17:db:fa:72:26:d8:a0:90:e3:8d:c5:ef:85:da:11:b1:
45:6f:9c:2c:50:bf:b8:29:4b:32:8c:4d:81:4a:a0:cf:fe:8f:
6e:fe:e4:9a:01:94:00:66:f1:91:64:c6:5b:80:b0:3e:e7:c2:
d0:e2:79:87:ea:f4:d0:2d:24:b6:66:5f:b3:fc:ef:ff:b4:38:
58:1d:22:a0:87:df:fe:a3:32:fc:f0:55:cf:7a:95:fd:3c:b5:
6b:be:75:c5:d9:e3:60:fb:40:2c:49:b8:94:2e:fc:43:a0:15:
36:71:a5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:19:06 2025 by rpki-client