Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
File: Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft (raw, json)
Hash identifier: eFyGEcFdPC4jdA3iDTmeoenynmqgahimQcv7MAf65zQ=
Subject key identifier: 12:9C:F0:D5:C8:20:3F:2E:13:D2:EA:75:C4:DE:0D:C6:95:74:33:8E
Authority key identifier: 43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
Certificate issuer: /CN=4398f624d57f4613c0bf651161c756c316659ab9
Certificate serial: 01976F2C0AB7EF22A9568365DCD73FB1A1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 16:00:46 +0000
Manifest this update: Sat 14 Jun 2025 16:00:46 +0000
Manifest next update: Sun 15 Jun 2025 16:00:46 +0000
Files and hashes: 1: Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl (hash: ysKE5N5mIvuAeXOdrT6tgM0pUhgzEcdD2Whzoq5D9wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:0a:b7:ef:22:a9:56:83:65:dc:d7:3f:b1:a1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398f624d57f4613c0bf651161c756c316659ab9
Validity
Not Before: Jun 14 16:00:46 2025 GMT
Not After : Jun 15 16:00:46 2025 GMT
Subject: CN=129cf0d5c8203f2e13d2ea75c4de0dc69574338e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:33:44:00:39:42:fb:20:37:70:21:f8:55:
11:67:43:f7:14:a3:1b:cb:66:c6:34:76:15:38:04:
91:28:c7:c6:d5:04:57:86:d8:4a:d2:63:92:86:2e:
08:bb:79:20:ce:66:be:47:2d:3a:b4:f4:91:5d:75:
b4:bc:5f:1a:a7:56:76:a5:e4:1c:cb:19:c1:f9:f1:
b4:ce:c6:08:3a:88:1b:c4:6d:bf:96:be:95:e7:27:
a5:f8:75:f6:00:72:7a:41:e0:83:5b:44:96:2b:3d:
b7:dd:54:25:c4:53:19:29:7e:ae:5e:bf:06:75:ee:
c7:e0:1c:53:2f:cd:85:ed:51:13:da:00:48:df:20:
3b:84:49:42:cc:ab:28:0c:09:9f:09:7a:95:7d:4e:
1f:84:25:02:19:ca:a1:b5:af:64:02:5c:bd:fc:c7:
67:64:47:e5:d1:a6:3c:a1:7f:ca:6f:21:ef:5f:3f:
cc:cd:ca:10:d5:af:b8:1a:6e:29:ab:b8:e7:7d:98:
0c:4e:19:4c:c2:1b:9a:96:c3:4f:75:68:86:ae:62:
c3:3e:e9:1e:ff:9b:d1:96:dc:4c:11:c4:5a:b2:2f:
13:4c:76:8f:74:49:dc:91:7c:fc:c3:95:a4:53:e2:
f7:7c:f7:58:d0:f4:49:99:c7:73:e3:51:0e:21:cd:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9C:F0:D5:C8:20:3F:2E:13:D2:EA:75:C4:DE:0D:C6:95:74:33:8E
X509v3 Authority Key Identifier:
keyid:43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0a:e1:df:bf:62:5c:00:88:1a:ce:ed:78:f2:a7:28:71:13:
f3:bf:0b:e9:a9:33:03:7f:a5:d1:3c:b2:8e:75:48:5d:8b:10:
4c:4e:6b:8c:3f:d6:3e:96:9a:bb:06:e5:94:1d:1c:c6:45:c3:
39:4a:5c:b8:0d:37:3a:e3:28:f1:a3:58:1d:5a:d5:e8:31:5e:
00:f5:29:e2:82:1b:fb:5a:03:20:36:c9:28:07:c1:43:d0:1a:
35:c4:2b:e7:0f:0a:65:cf:24:f7:e8:47:a6:ad:8f:38:8f:f0:
b9:d4:ca:de:10:9f:fb:5c:f7:ee:55:ca:f7:8b:8c:ff:73:cd:
84:2e:ab:4d:1d:ae:8b:7f:40:dc:c5:04:0a:0b:bb:e4:3b:be:
5a:f0:1f:9c:9e:c2:8d:3d:0d:27:c9:6c:12:f3:ab:7f:13:ad:
db:b8:47:68:92:34:46:e0:06:06:db:bd:9e:ef:00:18:71:8f:
26:f2:e9:7b:45:e6:b0:40:14:db:2d:af:98:82:f4:72:7a:55:
6a:8a:ae:3d:ec:dd:59:2f:4a:ba:7a:82:27:52:38:e4:eb:0a:
5b:7f:77:66:00:e6:3b:26:30:30:b1:25:ea:7d:ad:cf:e4:a1:
91:4c:ce:46:86:96:ea:05:75:d7:9a:51:a0:40:84:3b:02:43:
e2:c3:b2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:17:43 2025 by rpki-client