Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
File: Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft (raw, json)
Hash identifier: EzIU38Cze1lhNZ8ggLOYq1hxRvWwDrop760XKs4k2O0=
Subject key identifier: 07:4A:C9:A7:30:AC:6F:F7:0B:C6:D1:12:51:8A:E2:7B:0F:23:7F:27
Authority key identifier: 43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
Certificate issuer: /CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Certificate serial: 01977E9F8ACB126D9F51B3F29D700E07CA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
Manifest number: 0556
Signing time: Tue 17 Jun 2025 16:01:14 +0000
Manifest this update: Tue 17 Jun 2025 16:01:14 +0000
Manifest next update: Wed 18 Jun 2025 16:01:14 +0000
Files and hashes: 1: Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl (hash: QJWrpkD7GwDY9U1aY+qL1sHOH8/QGfIgIHo39gshCf4=)
2: fiGpYaULVSGddPa40kO95drtEI4.roa (hash: hSGW2kYFHKKsMMUOHTMd5Mel06lDgF+QorDCIkRAx3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:9f:8a:cb:12:6d:9f:51:b3:f2:9d:70:0e:07:ca:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Validity
Not Before: Jun 17 16:01:14 2025 GMT
Not After : Jun 18 16:01:14 2025 GMT
Subject: CN=074ac9a730ac6ff70bc6d112518ae27b0f237f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:98:47:af:33:a2:6e:c6:6d:63:7c:b8:27:
97:ed:90:90:b3:2a:c4:5d:56:28:db:90:f4:b4:e3:
4c:8f:5c:c0:b7:0b:29:41:df:1a:14:83:f5:56:51:
a8:b4:0b:57:16:64:b7:83:09:1a:bc:a5:94:4b:17:
f8:37:bc:da:31:ee:59:e1:4c:83:93:eb:85:17:5f:
92:17:d5:be:51:b0:1c:0b:80:7a:f2:ad:0c:4e:8c:
34:1a:d9:e6:60:43:34:a7:74:7a:1e:08:9f:97:db:
4f:c4:74:cf:03:e5:13:58:a2:4f:f9:95:94:28:53:
c1:fa:ea:5b:70:06:2c:f5:5d:fb:6b:cc:f7:3c:33:
2e:a7:f8:0a:60:ed:49:51:74:1f:21:e5:75:87:40:
23:79:ce:c3:74:b8:ce:46:95:e3:bc:98:fe:e6:f6:
eb:a7:87:66:78:94:ad:9f:8e:34:24:5e:a6:f6:d2:
58:f1:80:2c:32:53:1a:31:27:61:14:8f:43:7d:dc:
2d:7f:32:4d:4f:c8:db:45:20:44:fc:b9:42:4e:ff:
16:f5:f9:07:fd:c4:b9:0c:e6:55:31:6c:c2:be:18:
1f:15:b0:0f:4e:a3:2e:a8:ea:09:62:a7:47:51:a2:
54:f7:62:6a:97:46:f7:d1:f2:0e:12:e4:1d:4e:63:
e0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4A:C9:A7:30:AC:6F:F7:0B:C6:D1:12:51:8A:E2:7B:0F:23:7F:27
X509v3 Authority Key Identifier:
keyid:43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:12:35:6b:04:f5:aa:a4:88:cb:ef:62:51:fc:93:87:82:77:
4b:81:99:6a:b3:2f:ca:69:5a:74:fd:1a:19:28:3b:61:1e:b7:
a5:ad:b5:5a:cb:08:a3:7e:f5:11:a1:ba:cc:72:2a:b6:7d:35:
c0:2f:1e:63:44:7e:47:de:5d:d0:d8:a4:ce:4c:3e:32:1e:13:
69:c9:d5:05:49:f9:7c:37:01:00:8b:79:9f:04:99:75:fd:25:
1e:be:e3:21:0d:b0:cd:ed:0b:fc:9e:69:a9:fb:56:6f:1a:1f:
71:f2:f5:1a:23:00:68:f0:b4:11:32:16:2f:3a:63:bf:61:36:
86:c9:4e:8a:ea:a9:1b:94:e7:d4:ea:a8:be:9a:0f:a5:9f:9b:
d2:9e:2e:5c:fd:77:ab:30:e8:48:bf:4d:31:91:2f:d5:b4:75:
22:d0:91:0b:03:cc:ef:5a:eb:51:9e:24:fa:83:8e:74:0d:3c:
e8:23:bb:48:8e:cc:1d:70:14:3b:7d:b1:a3:2c:b6:52:71:c6:
4d:76:5e:9b:d0:f3:89:5b:82:07:0a:47:3f:1d:73:29:f1:32:
4c:85:d3:8a:47:bc:d6:d1:7c:68:90:ef:f9:f4:60:d3:91:ca:
c6:6f:77:d3:20:9a:77:72:84:1e:9a:6b:b6:12:f0:23:68:0b:
d1:96:75:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:54:42 2025 by rpki-client