Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
File: Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft (raw, json)
Hash identifier: VpygGcqvWWieH9YI3Rg0wYSiIH4gs3Io3S1C32G+ydE=
Subject key identifier: 32:0C:C7:AE:54:A5:4E:B0:1B:00:34:07:72:3C:D5:BF:52:49:8A:02
Authority key identifier: 43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
Certificate issuer: /CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Certificate serial: 01976F99C5B05D4E3F646C83983AEDF46357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
Manifest number: 1237
Signing time: Sat 14 Jun 2025 18:00:37 +0000
Manifest this update: Sat 14 Jun 2025 18:00:37 +0000
Manifest next update: Sun 15 Jun 2025 18:00:37 +0000
Files and hashes: 1: FIyTe6Z5c9SlUs06XwKmTie5dUo.roa (hash: uOWoCbldz8pcJx7RQheZzjsLIzs/KJyulSs2wwLgbgk=)
2: Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl (hash: p6ypcj5zKLskN5D+4H18+mlT0GE0UITz5amTDxzmHb8=)
3: odf_RloZld2f_C46K0BxlJYlBTY.roa (hash: EYo1H2ZwWe4UAQYrwYPYwqTrp1mcr6TNxmVLEo1rbg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:c5:b0:5d:4e:3f:64:6c:83:98:3a:ed:f4:63:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Validity
Not Before: Jun 14 18:00:37 2025 GMT
Not After : Jun 15 18:00:37 2025 GMT
Subject: CN=320cc7ae54a54eb01b003407723cd5bf52498a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:cb:4e:c0:5b:a3:79:94:05:84:1e:66:e0:
3d:28:3a:3c:d2:ca:27:81:6c:37:b3:71:c5:db:fb:
77:a0:dd:7f:8c:a7:26:20:f9:27:06:e7:24:19:f7:
9a:21:de:46:20:37:57:fe:0a:61:76:98:e2:b2:7a:
88:87:d0:f6:4a:08:3a:93:5c:c2:8f:d8:58:54:84:
ed:e9:b5:16:c7:15:63:17:39:24:7f:9b:79:a9:64:
23:c5:d4:f4:56:4b:8c:04:4a:0c:7b:c5:ef:51:18:
31:56:b6:af:d4:53:2d:97:dc:f4:67:9a:96:87:69:
20:26:c1:d9:d3:74:41:25:26:b0:fb:a8:c9:61:88:
4a:5d:cf:90:b8:9d:27:c7:f1:93:7f:93:bb:fd:de:
19:58:8f:21:50:20:5e:2d:74:3f:c0:7e:dd:13:8e:
5e:ea:66:56:13:49:6a:5b:2b:09:8c:7f:e3:78:51:
64:b0:f9:3d:99:11:03:84:57:fd:46:99:56:65:3c:
1a:19:84:64:a7:00:94:2a:19:cf:df:5e:be:36:0b:
10:94:41:cf:b6:51:c9:91:39:d4:c0:a0:92:88:07:
cc:73:da:6c:4e:1c:ce:77:54:81:42:79:fe:bb:a2:
21:fc:18:09:56:a3:a2:f1:f2:dd:09:17:08:1a:36:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0C:C7:AE:54:A5:4E:B0:1B:00:34:07:72:3C:D5:BF:52:49:8A:02
X509v3 Authority Key Identifier:
keyid:43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:99:a9:64:40:51:57:c5:37:31:0c:38:03:36:15:a6:57:aa:
32:c0:75:87:6c:d5:0c:72:ca:ec:5d:96:69:28:77:7b:46:54:
89:bb:6b:3d:1b:ca:21:9a:0b:e2:92:5f:64:90:07:44:5e:15:
6c:e2:de:a5:1c:3d:b1:55:f3:bb:14:a9:e0:cb:8e:25:69:69:
f4:f9:65:2b:19:47:43:f3:2b:1d:64:c0:b0:68:81:f8:63:e2:
fe:10:f1:fd:cc:97:65:f6:63:34:b3:a2:e4:7a:4f:a5:42:03:
84:83:dc:17:e3:ff:69:07:85:2c:54:73:38:94:0c:82:c5:6c:
e6:c9:6c:4a:07:64:2c:02:8f:5f:3a:08:60:ed:b7:52:69:8f:
f8:3b:97:d5:08:26:c6:59:c6:c6:9e:27:0c:64:fc:48:60:fb:
3d:01:d5:0a:9e:17:dd:7f:35:2e:fd:55:7f:20:88:04:22:3c:
7c:69:f3:7d:a7:1a:9a:34:f7:34:69:7b:c7:6e:d9:0f:7f:a6:
c1:cb:f1:c6:00:e0:9c:f8:1c:2d:c5:37:46:e6:57:db:02:c5:
cb:70:f6:8b:03:0d:7d:c0:de:93:bf:2e:38:66:a1:37:ee:88:
1f:0f:56:22:d9:69:81:c2:6c:63:c3:3c:d3:04:ea:65:2f:be:
b3:90:18:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:23:46 2025 by rpki-client