Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
File: Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft (raw, json)
Hash identifier: 5VXyilvLtpQXOSVuuZ7fRSM5ZXj27SiNT/z/SO/8zu4=
Subject key identifier: 20:9C:AD:56:3F:11:B6:67:E0:5D:F6:93:8B:28:BD:F6:67:FA:09:47
Authority key identifier: 32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E
Certificate issuer: /CN=32ad7f7d838485a19e00279968a9b98683a4c56e
Certificate serial: 01976D069982BFCF93CE6228760A0846C51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 06:00:38 +0000
Manifest this update: Sat 14 Jun 2025 06:00:38 +0000
Manifest next update: Sun 15 Jun 2025 06:00:38 +0000
Files and hashes: 1: Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl (hash: amkdNehn0+p6DD446HSCZ/gsaI3MGT7ZuvSUg8da32g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:99:82:bf:cf:93:ce:62:28:76:0a:08:46:c5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ad7f7d838485a19e00279968a9b98683a4c56e
Validity
Not Before: Jun 14 06:00:38 2025 GMT
Not After : Jun 15 06:00:38 2025 GMT
Subject: CN=209cad563f11b667e05df6938b28bdf667fa0947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:5a:52:3c:d3:2f:58:db:4e:1e:ee:43:ab:
0e:80:5e:03:16:ec:09:55:e3:dc:be:fb:56:f2:72:
a8:c5:84:98:87:e3:72:87:4f:4f:7c:10:2e:75:96:
0f:e4:bf:92:7a:7f:05:9c:8a:60:27:c9:03:aa:6e:
88:ea:5c:7f:21:92:ef:e8:25:5e:11:d2:59:b5:41:
aa:ce:bd:24:0e:d8:2c:e3:bb:fe:cb:d8:3d:e2:f6:
d8:5c:6e:29:29:42:8c:a6:64:55:dd:95:75:65:0a:
26:95:c4:4b:e1:85:c0:a9:b0:fe:d9:01:c5:b5:73:
b2:53:81:c8:28:45:64:3f:18:58:57:56:f9:00:f4:
46:8b:1f:8a:79:b0:6d:0c:24:14:40:68:42:c0:70:
b2:57:09:78:74:fb:06:7a:78:61:47:d8:2f:05:a3:
19:88:47:88:51:2d:87:54:7b:b1:9f:f7:4f:aa:ca:
13:5f:40:af:42:a8:b8:bd:a8:da:a1:23:b4:9e:48:
9e:dc:1f:d9:91:3f:61:1f:e6:8f:3b:4b:0e:2c:65:
ad:86:4d:ef:86:32:1a:99:97:2e:07:19:0f:79:de:
e0:49:ed:6e:0f:7d:79:98:92:37:62:ec:4a:37:32:
fb:f0:4f:0d:19:64:91:c6:14:df:3a:8b:29:0c:25:
79:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9C:AD:56:3F:11:B6:67:E0:5D:F6:93:8B:28:BD:F6:67:FA:09:47
X509v3 Authority Key Identifier:
keyid:32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:39:a6:0f:36:b7:90:e6:44:7b:8d:6c:54:1e:ed:74:9c:e6:
0a:a2:5b:94:4a:f4:f3:1c:7b:de:14:b7:a8:8f:b6:33:9e:70:
40:bb:4d:e8:f1:ea:73:4c:fc:ad:21:8a:fe:c0:24:ac:5d:f0:
b1:18:5d:d2:dd:d6:59:85:38:a6:e7:f9:2c:91:10:fc:5e:e3:
bf:a0:08:ee:11:79:2c:b8:e5:f1:dc:f5:39:d4:8a:88:b5:a6:
17:f4:68:f0:86:0c:d7:87:aa:23:e8:64:57:56:8c:17:66:b8:
30:14:b0:0f:a2:96:03:3c:71:68:77:c5:7b:4b:0c:32:43:5e:
69:b7:6d:39:f0:44:bf:da:38:75:ba:8d:33:9f:98:5d:59:74:
6e:ed:be:30:ae:a2:b1:de:8b:df:8c:be:96:f4:33:96:ea:8c:
06:92:f0:76:88:0d:8d:82:d4:37:0e:fd:93:ab:71:be:39:9f:
fe:e2:13:1f:83:e1:f9:b2:07:a6:47:12:ba:39:9f:99:67:12:
20:eb:d3:ad:ff:d5:78:12:47:04:1b:6a:c6:c8:32:81:f4:81:
55:c3:83:e1:33:ce:88:c4:9a:a6:6b:1a:0f:14:72:bc:66:2b:
4a:cf:f6:77:e2:ec:65:3b:e5:60:c6:64:f3:dd:3d:da:4a:6e:
2c:41:5f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:55:00 2025 by rpki-client