Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
File: Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft (raw, json)
Hash identifier: SR9hY/UtW3oOsrkUTeIubSTFMcc1bKF1mflcSZdMZVA=
Subject key identifier: B9:1D:66:A4:84:0E:CA:65:1E:44:DD:7C:2F:66:12:B1:53:AE:A7:DA
Authority key identifier: 43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
Certificate issuer: /CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Certificate serial: 0197703F0F6AFF20ABD31B4495C1F992A7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
Manifest number: 03C9
Signing time: Sat 14 Jun 2025 21:01:10 +0000
Manifest this update: Sat 14 Jun 2025 21:01:10 +0000
Manifest next update: Sun 15 Jun 2025 21:01:10 +0000
Files and hashes: 1: Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl (hash: oeBAQ49XwDXbsOKnXdvHP9vVedVSkMG6EeX4LS2vdD4=)
2: oskd316tBTAUTSHf0wsKURHXyDc.roa (hash: IsLUQsw+ev9Voy8iNeiPun8V5Wlg4SPwA/B548IB55M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3f:0f:6a:ff:20:ab:d3:1b:44:95:c1:f9:92:a7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Validity
Not Before: Jun 14 21:01:10 2025 GMT
Not After : Jun 15 21:01:10 2025 GMT
Subject: CN=b91d66a4840eca651e44dd7c2f6612b153aea7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:a6:7c:bb:10:52:60:28:bd:5f:aa:d6:46:
5a:b6:03:53:d0:0f:fa:77:cd:18:c4:8d:5c:11:63:
d3:52:6f:19:be:23:82:65:a3:be:f4:6a:7f:fe:3f:
46:66:af:1e:1d:77:76:9b:84:88:69:81:75:68:b4:
fc:0b:a5:fb:e9:27:00:46:c5:b5:42:62:23:12:3f:
d1:b6:c7:5f:d4:1f:fb:19:e5:d7:af:29:3c:eb:69:
20:35:fa:7f:42:9d:e1:fd:bc:c0:5f:d4:64:18:4d:
ea:ea:24:c8:f9:e0:48:b3:68:ff:7a:a3:49:02:f9:
d2:9d:4a:af:68:67:2c:87:3f:d9:98:b7:3a:fd:e9:
18:75:89:f2:36:fd:52:67:49:b6:77:7d:3f:8d:72:
60:f8:31:da:d7:55:22:7e:9f:de:83:1a:69:42:5c:
bb:fd:36:69:c5:03:26:be:62:6d:73:a2:94:42:3b:
90:65:fd:dd:1d:82:f3:46:23:e6:17:a3:73:8c:4a:
85:b4:c4:bf:56:d8:2a:cf:8b:1e:ed:95:95:dd:4f:
03:ab:3d:40:3c:d0:92:18:90:5f:9a:bf:c4:f1:8e:
6c:c9:6c:0f:a1:ca:1d:60:d7:05:6f:ef:c9:03:7f:
03:02:75:fd:4f:ba:c6:2f:e0:2d:a5:e4:27:3c:b4:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1D:66:A4:84:0E:CA:65:1E:44:DD:7C:2F:66:12:B1:53:AE:A7:DA
X509v3 Authority Key Identifier:
keyid:43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ad:90:f3:55:01:54:d6:10:fa:f3:ae:b1:59:d9:4a:34:0a:
ff:2e:3e:a5:ff:92:65:8a:c6:6b:4e:54:45:9d:f6:8c:67:b5:
a8:22:2d:60:aa:23:cd:2b:65:2a:fd:09:e3:8e:1c:30:4a:16:
c3:f6:1d:e0:56:4f:4a:97:a7:b9:81:c9:41:78:a3:dc:72:be:
5f:00:2e:88:6d:a3:a0:95:be:24:a4:09:c7:53:e7:1b:eb:16:
77:62:ce:01:06:b3:82:9e:54:ff:07:04:d0:bd:dd:e7:1f:cb:
24:8a:74:aa:7c:47:e7:b4:c9:cb:93:40:62:d0:24:e8:70:97:
93:8e:7c:66:b5:5c:e2:89:90:f8:59:b7:da:c8:c4:59:75:4b:
22:bd:5d:40:27:a6:27:10:de:48:ce:9e:da:c1:56:44:9b:c5:
66:0c:93:f0:df:a6:fc:d4:61:23:59:45:0e:07:1a:00:b3:6c:
ef:c8:45:42:52:a2:1d:e5:16:e4:ff:b9:70:83:6d:1a:83:f4:
8d:a9:89:46:d1:f2:27:f8:1b:8e:5c:dc:58:ff:30:a5:83:2c:
2b:6a:86:ea:36:9b:53:10:29:af:77:87:ce:64:77:1d:a3:78:
76:e9:e9:87:cf:8e:03:73:88:66:95:44:56:03:d2:d7:6f:d1:
6a:cf:4b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:13:52 2025 by rpki-client