Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
File: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft (raw, json)
Hash identifier: D/omd8b3mWL5/qAWBsQHSe575vdhmYiL2hecCjweaOI=
Subject key identifier: 28:6C:75:04:73:C6:06:E1:BC:B6:D9:29:1B:1F:0E:76:44:A0:3D:06
Authority key identifier: FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF
Certificate issuer: /CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
Certificate serial: 01976961B3707F0B6C706408E74E012047C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 13:01:39 +0000
Manifest this update: Fri 13 Jun 2025 13:01:39 +0000
Manifest next update: Sat 14 Jun 2025 13:01:39 +0000
Files and hashes: 1: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl (hash: oDIIJkhQAfmFKScqd6VXW7zWlvTq2X30ZoRk3GLKH9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:b3:70:7f:0b:6c:70:64:08:e7:4e:01:20:47:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
Validity
Not Before: Jun 13 13:01:39 2025 GMT
Not After : Jun 14 13:01:39 2025 GMT
Subject: CN=286c750473c606e1bcb6d9291b1f0e7644a03d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:16:7f:69:bd:26:71:73:a9:80:8e:0d:66:
b3:f3:78:5e:f2:e2:87:94:c3:53:7b:59:fe:06:4a:
13:ac:30:5e:94:a4:b6:9a:b4:c0:06:80:f2:79:d0:
6e:8b:52:a2:f3:28:94:88:b4:ba:95:6d:72:dd:92:
06:0d:13:ef:11:4e:c1:92:58:37:7e:bb:a4:64:39:
4d:3f:65:0d:84:e1:9c:fa:ef:6f:4b:4c:7a:a9:e1:
53:4a:9a:d9:a6:bc:56:fe:3d:e5:a2:00:47:48:51:
68:c9:27:a6:80:35:e3:e5:1c:85:2d:25:32:40:4c:
79:d8:2a:eb:22:54:45:93:5f:ac:4e:bc:e2:f3:41:
df:a4:d8:18:a9:cf:83:82:d3:1b:94:82:1c:2b:db:
65:0d:3d:ac:03:6e:53:1a:6c:f3:26:ee:0a:27:9a:
7b:0b:d2:d6:2a:5e:ac:69:c3:48:42:e5:ce:1f:60:
74:b6:42:ce:15:85:58:ee:7d:6f:7f:94:1b:d5:ec:
39:ae:3d:e4:52:0b:f5:35:3f:57:38:c5:f0:aa:36:
d8:78:d5:bf:bd:cf:db:22:2a:41:4d:4b:b6:2e:a0:
b6:64:ff:d0:d4:e4:d4:78:0e:ee:a8:32:43:76:9b:
fd:44:35:68:96:9d:87:a8:7e:82:a4:9f:49:9d:bf:
84:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6C:75:04:73:C6:06:E1:BC:B6:D9:29:1B:1F:0E:76:44:A0:3D:06
X509v3 Authority Key Identifier:
keyid:FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5c:72:d7:1b:84:bf:3f:3d:73:d3:dd:5b:15:e4:1a:c0:f1:
af:5d:48:51:aa:ff:48:d8:d1:14:43:49:77:5c:0a:c6:15:24:
5a:7a:c7:94:54:65:98:cd:de:48:63:7a:00:ab:a1:82:2c:32:
63:db:04:53:e0:97:ca:a2:2b:10:53:a0:f9:ea:31:b1:41:dc:
d1:fd:fe:fd:33:27:f6:38:35:43:77:db:85:87:b7:4d:87:bf:
78:bb:05:d8:8a:4f:10:cc:97:e8:eb:e9:b3:6f:b4:2b:3e:bf:
ad:de:5f:8b:85:ef:01:59:f0:b1:4b:2f:34:99:d4:b7:b3:26:
b9:46:64:fc:ed:86:c8:02:b8:bd:12:d6:19:e6:d7:03:47:c7:
bc:15:0e:8a:f3:61:7e:0c:56:ea:ff:2e:61:f1:3b:15:1b:7d:
bd:16:9c:4b:88:a3:0b:5d:e3:5b:02:34:78:fe:04:2f:c7:17:
7d:44:b3:81:9f:9e:74:d6:6f:50:5f:fc:6e:31:18:61:50:93:
fa:0f:07:0e:21:19:63:bf:2d:02:3c:97:b7:7c:a6:f8:9c:97:
04:f2:a5:f0:9d:f4:db:c7:bd:10:6a:9c:42:da:2c:85:5f:c0:
c3:2f:26:20:0d:cf:49:c8:05:01:56:e8:6b:b6:06:bb:79:05:
8f:aa:d9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:48 2025 by rpki-client