Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft
File: Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft (raw, json)
Hash identifier: 41ow60cFZ27g6/vgTy8JFEeJ39kf/f7QYPER/Hmi+JM=
Subject key identifier: 56:87:37:CE:4E:3E:44:88:66:BA:63:C5:6C:5A:E1:A3:D9:4A:28:FF
Authority key identifier: 43:66:84:74:E7:BB:3D:BD:B2:6A:DC:01:83:8C:E7:06:2D:70:C4:98
Certificate issuer: /CN=43668474e7bb3dbdb26adc01838ce7062d70c498
Certificate serial: 0197868F564ACB9E4EB5CCC1F14E7F95E388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2aEdOe7Pb2yatwBg4znBi1wxJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft
Manifest number: 159E
Signing time: Thu 19 Jun 2025 05:00:30 +0000
Manifest this update: Thu 19 Jun 2025 05:00:30 +0000
Manifest next update: Fri 20 Jun 2025 05:00:30 +0000
Files and hashes: 1: Q2aEdOe7Pb2yatwBg4znBi1wxJg.crl (hash: OZDzMeucv7olJxI7BnnJllbpLXZlCrqeB7IuuJ2/ahc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2aEdOe7Pb2yatwBg4znBi1wxJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:8f:56:4a:cb:9e:4e:b5:cc:c1:f1:4e:7f:95:e3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43668474e7bb3dbdb26adc01838ce7062d70c498
Validity
Not Before: Jun 19 05:00:30 2025 GMT
Not After : Jun 20 05:00:30 2025 GMT
Subject: CN=568737ce4e3e448866ba63c56c5ae1a3d94a28ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:a8:13:4d:c1:f7:72:6b:51:63:1d:54:43:
97:24:06:c3:08:42:6b:26:80:5d:16:d8:1f:02:3c:
56:65:6e:5b:44:64:b2:31:73:a7:7e:4e:b7:b5:27:
08:0f:3b:b9:0a:2c:87:bb:5a:c4:48:8d:1e:ee:11:
02:5d:22:e1:21:af:ad:12:5f:84:14:70:88:1e:88:
52:92:5f:93:5d:0c:72:a4:39:74:8e:bb:3b:99:50:
f6:1b:82:4d:09:a0:9c:6a:44:63:75:8a:7f:27:31:
b2:a8:29:52:cc:5d:ef:4c:d0:c6:9a:36:65:7e:97:
53:1b:36:0c:a8:b7:b8:6e:9a:2b:59:09:72:dd:fd:
fb:57:f8:aa:ad:ab:f0:d1:58:da:17:83:7c:d9:1f:
84:d3:7f:ec:ab:c9:2f:38:86:9b:25:0a:f2:20:0f:
e9:86:d7:a2:d2:0d:c9:d1:1b:58:ce:e0:9d:d3:a2:
36:66:4a:5b:43:41:33:56:08:c1:6e:c2:d0:b2:1a:
6a:10:63:66:fc:aa:9f:f9:85:97:a8:59:92:e3:ce:
f9:0f:da:b6:3b:40:52:30:93:f6:8b:bd:2e:03:23:
85:d4:6f:a0:1f:cc:3b:1f:5b:ce:a7:1c:6c:fc:50:
3e:90:87:28:8d:38:dc:bf:55:86:36:89:37:57:bd:
d5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:87:37:CE:4E:3E:44:88:66:BA:63:C5:6C:5A:E1:A3:D9:4A:28:FF
X509v3 Authority Key Identifier:
keyid:43:66:84:74:E7:BB:3D:BD:B2:6A:DC:01:83:8C:E7:06:2D:70:C4:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2aEdOe7Pb2yatwBg4znBi1wxJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0e:40:4a:a6:c8:a0:50:0b:98:c9:78:99:7d:98:a2:6a:8d:
c4:56:33:92:c0:b1:77:c8:e6:43:be:51:73:16:d4:e6:05:d6:
c4:f0:53:23:06:dc:75:c0:da:4f:14:98:36:85:de:a2:2a:64:
b7:ba:96:15:0b:29:37:e0:e5:89:1e:a0:05:85:c4:3d:74:da:
2f:f0:87:c1:85:01:9c:ac:fb:cd:10:7f:5c:6d:d1:7e:4f:9d:
52:76:62:54:80:83:1d:c1:b1:4c:8f:ea:b5:06:d2:cf:d9:9b:
1d:52:58:77:de:73:0b:db:ba:c5:7e:4a:3e:c4:0c:85:57:52:
c3:0b:1f:b4:32:81:df:81:93:8d:cd:0e:74:70:0c:01:40:6c:
94:78:8a:16:01:3a:2e:6d:bd:cd:c2:8c:0f:1f:c3:67:fb:f7:
b3:10:73:eb:ab:db:78:cf:a2:61:12:5f:01:b5:80:50:ae:35:
67:4b:f5:95:39:db:86:1c:e7:08:45:30:3b:9b:c1:52:3b:54:
0c:ef:1b:2b:26:f1:eb:78:8f:5e:ec:72:12:43:9d:6c:19:ce:
fa:3a:15:7b:9e:91:ba:d2:55:27:69:d2:01:a0:34:9b:11:da:
06:44:9a:94:ca:3f:b1:f2:5c:cc:47:2c:7e:35:a7:2e:c7:72:
d1:ca:27:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:22:35 2025 by rpki-client