Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
File: si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft (raw, json)
Hash identifier: VYtxqHU1UXls3m5+QjBk9rXnrX16PSWUj1m67qI7/Tc=
Subject key identifier: A3:76:92:7B:D8:3C:52:F3:D3:5F:6F:00:4A:45:80:4B:3F:24:71:2A
Authority key identifier: B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
Certificate issuer: /CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Certificate serial: 019771511C89B22441FB101824E107E8DA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
Manifest number: 0361
Signing time: Sun 15 Jun 2025 02:00:30 +0000
Manifest this update: Sun 15 Jun 2025 02:00:30 +0000
Manifest next update: Mon 16 Jun 2025 02:00:30 +0000
Files and hashes: 1: Ol4H0Ofe0seTJhjp23zwbv14mcA.roa (hash: h0M7hTbR8JXwLU22tU4Fw/p8crplmJ6JisUg1rjxv0k=)
2: si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl (hash: kxNovA8StF1B/oRsQ99mYKY+0nVhXWY0RXXJDDoAShw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:1c:89:b2:24:41:fb:10:18:24:e1:07:e8:da:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Validity
Not Before: Jun 15 02:00:30 2025 GMT
Not After : Jun 16 02:00:30 2025 GMT
Subject: CN=a376927bd83c52f3d35f6f004a45804b3f24712a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:85:e0:5d:9c:06:94:a9:25:37:2b:e8:36:
12:e6:65:27:f8:30:f6:70:58:72:8d:57:1b:06:12:
b3:20:9d:06:3d:e4:0d:86:af:17:ad:1e:3d:71:4f:
e8:df:df:21:1e:10:ff:cb:05:5a:94:83:71:e9:c9:
fd:cd:c0:78:f0:ff:f6:35:12:10:00:83:6a:9c:39:
ab:a5:64:29:e3:bc:65:8b:8d:b9:4d:87:87:25:e5:
ae:63:d9:a8:b4:28:70:de:86:a5:90:92:5b:be:3c:
95:f0:3f:7f:4a:e0:b7:60:72:68:60:f4:bd:30:f0:
4c:91:eb:65:d7:59:bb:ad:6a:58:cb:78:c6:dd:dd:
e8:e2:f5:4f:91:dd:67:1f:fa:90:13:ce:8a:6b:fe:
0f:c0:36:5e:31:74:ce:10:dc:db:25:a6:db:07:7a:
8a:e8:98:f5:58:3f:50:36:7d:aa:f9:0f:fa:58:b4:
27:e9:94:5a:32:8d:54:df:7d:d9:41:5b:60:69:39:
b8:b3:df:34:e2:26:f6:a3:e4:d2:61:d2:3e:cb:0e:
37:74:2f:ba:08:c0:9b:ec:ac:76:87:3e:80:cb:de:
31:1f:75:e6:fb:23:bf:2f:0a:9c:98:d3:a7:6c:b0:
ba:23:76:f7:55:29:13:d4:be:83:96:39:59:75:8f:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:76:92:7B:D8:3C:52:F3:D3:5F:6F:00:4A:45:80:4B:3F:24:71:2A
X509v3 Authority Key Identifier:
keyid:B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f8:73:a0:d6:c6:08:c6:fe:15:9e:00:ad:6b:94:1e:d1:c2:
2e:a6:44:69:c6:40:6f:3e:f7:c9:ea:12:74:e0:28:57:2a:da:
95:f7:2e:32:71:ca:f3:ff:2b:60:99:f6:cd:6e:06:6c:e6:f7:
e8:f0:af:34:00:ce:82:64:ac:c5:4e:11:39:27:df:c6:15:25:
10:6a:8b:f7:78:e8:23:84:45:7b:34:07:4c:af:e1:6d:53:be:
35:dc:9b:e9:5d:61:5a:f0:5d:fc:38:4c:f8:f6:16:8e:29:a4:
05:4a:e1:7f:94:0d:91:07:47:22:23:97:58:77:bd:e6:03:9c:
47:ab:bb:55:14:28:64:2c:4c:f6:50:f6:0b:b0:5f:95:d3:e3:
4e:c4:44:87:94:93:e6:66:16:c4:4b:86:e4:a6:5d:ca:f3:38:
cb:0f:ef:4c:c0:81:a2:bf:ce:73:86:81:3b:6d:31:10:6f:c2:
0e:8c:64:33:18:76:cb:36:f1:89:f0:de:f8:aa:0a:55:cf:8d:
72:37:fb:e5:4b:53:06:ea:fe:ac:a5:be:0d:4b:f5:fe:be:14:
57:63:ce:50:06:91:24:10:e1:7b:fa:9c:34:71:8d:98:15:d4:
52:8c:a8:d3:67:93:42:05:a4:a7:05:95:02:68:c3:d3:69:ff:
65:1a:5e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:28:50 2025 by rpki-client