Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: lFT3m/fSxQC8sYra1qnwXDkgXPWlBOJhGsCM9manI9I=
Subject key identifier: E9:7D:1F:8F:AE:B0:5B:63:5B:B7:EC:73:13:22:F6:00:BC:D0:F7:9E
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 01976BF404D2FCAB1D735E77B4AAF83FC19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 1516
Signing time: Sat 14 Jun 2025 01:00:43 +0000
Manifest this update: Sat 14 Jun 2025 01:00:43 +0000
Manifest next update: Sun 15 Jun 2025 01:00:43 +0000
Files and hashes: 1: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: xk5QUD54+vgqQvasSFEX9nKw6RXV3mYpdKdHm7EPtNk=)
2: Qp2Zm0LEpJDMsLodusVyq9g9MYg.roa (hash: jJeE6L6slkKko4q8jcPSzjO62uXdvaJJCBizVLQKBjk=)
3: YEwBGJwVFMVG4n9Uv5C8kaKbP_Y.roa (hash: 71JCVJhZ0PYDS413IRMGeXcUCfZfAR4EomHNNgUpftE=)
4: yd2Ai214QL8GroiQskFrUfMO6Kc.roa (hash: +L6jAlDJgy+4YPDRYuSYnnpI4dCj403915WXULQVYBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:04:d2:fc:ab:1d:73:5e:77:b4:aa:f8:3f:c1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Jun 14 01:00:43 2025 GMT
Not After : Jun 15 01:00:43 2025 GMT
Subject: CN=e97d1f8faeb05b635bb7ec731322f600bcd0f79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:b5:11:e9:22:c3:4e:77:ba:83:da:40:03:
c3:2e:99:af:1c:7a:9a:dd:39:61:25:b4:18:91:a3:
2e:62:6c:42:c8:c3:e6:d9:8e:07:bc:16:aa:e8:77:
e0:8d:eb:d0:d6:ca:bc:89:3d:c1:22:3d:20:c8:da:
2b:0a:a1:f8:e4:20:ff:81:21:8c:06:80:ea:d9:bc:
4b:f5:d5:91:e3:76:1a:80:83:02:cd:67:24:fa:d1:
83:4a:2f:69:7c:f2:0a:77:21:87:da:82:7c:da:51:
5d:2c:f6:f9:a5:d9:ce:29:c9:e9:f7:6b:2e:9c:83:
6e:7b:39:b4:e6:c9:75:63:ef:17:9c:ad:94:76:4d:
40:62:ce:62:b5:5f:f7:9e:94:4b:63:6f:ea:ff:fa:
12:f7:0f:9c:ed:d1:72:a5:0d:5b:f6:b1:03:3d:33:
72:7d:88:b1:44:75:c0:e9:52:f4:0c:cb:03:79:83:
8c:b7:85:d3:b5:00:b4:2c:f9:03:c8:12:f4:6d:70:
94:0f:0e:c3:2f:90:bf:de:a3:df:3f:5c:f8:05:54:
84:e1:7c:49:ec:cc:83:10:cc:0c:c9:ef:61:58:65:
ab:14:13:ea:93:27:73:cd:88:6d:6f:9d:6a:fc:c9:
3a:e7:34:37:24:11:5b:5c:6c:5f:96:6a:fb:7e:6f:
52:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7D:1F:8F:AE:B0:5B:63:5B:B7:EC:73:13:22:F6:00:BC:D0:F7:9E
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d8:de:31:32:0d:26:49:1d:44:ea:c0:08:79:40:fc:66:c5:
a7:df:eb:ac:32:76:98:64:bd:94:66:e5:04:f8:28:42:9c:9b:
0a:87:b1:95:b1:71:11:b0:17:af:92:08:8e:7e:0c:d1:cc:82:
94:53:a2:70:0e:70:95:be:d4:dc:85:94:04:f4:c5:d2:34:e0:
f6:52:f2:ca:5f:01:a9:20:f5:84:6b:b5:55:d3:24:2f:f6:28:
e6:5a:bc:2d:97:b4:a4:b4:f8:18:c8:c1:9b:1a:b9:8f:b8:88:
5f:a3:61:df:e9:91:ac:1b:e5:07:d9:99:4f:c2:98:ad:18:74:
a6:82:1a:3f:1f:1f:be:3b:04:34:8b:8a:45:1f:89:cd:b6:d5:
12:3b:72:98:95:83:aa:eb:9f:c9:e6:c3:33:3f:64:2a:d1:db:
0c:86:37:05:b0:45:2b:e4:45:94:7c:7c:6c:0e:54:e0:74:db:
3e:e1:78:43:c6:cc:fd:ac:ac:3f:59:a2:b0:ba:75:4b:53:41:
53:05:ac:bc:04:a8:eb:24:64:bf:44:5f:07:d6:01:b5:f0:94:
03:f6:60:61:76:1d:3c:88:8f:87:33:4c:86:b8:70:35:c6:0c:
73:94:63:0f:a8:cf:08:c2:51:bb:db:c6:b2:03:e6:22:02:1c:
5e:72:81:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:45:50 2025 by rpki-client