Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
File: Mq_f-s-cNpjvejay5gvne4DmLQE.mft (raw, json)
Hash identifier: FRZzk3akESbvMxpuGwt8FtNWf73rpBxnUDBTgIR6LUQ=
Subject key identifier: 26:DB:E7:25:0F:A9:69:28:F0:49:53:44:F6:62:87:F1:1B:D4:B9:01
Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
Certificate issuer: /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Certificate serial: 01976D06E4611579050FB0554CA46599FF3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 06:00:57 +0000
Manifest this update: Sat 14 Jun 2025 06:00:57 +0000
Manifest next update: Sun 15 Jun 2025 06:00:57 +0000
Files and hashes: 1: Mq_f-s-cNpjvejay5gvne4DmLQE.crl (hash: zjEvzyN7QUPkik48bzIZC0jUfgemdhxnmHaxMOAdwCE=)
2: m-mgeij2s-izZmoG2EJOGobZRbs.roa (hash: 50Vl722SlJE3RG+BG14L6AWHGFv4OwGxsav/vScZL0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:e4:61:15:79:05:0f:b0:55:4c:a4:65:99:ff:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Validity
Not Before: Jun 14 06:00:57 2025 GMT
Not After : Jun 15 06:00:57 2025 GMT
Subject: CN=26dbe7250fa96928f0495344f66287f11bd4b901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:38:20:48:b0:77:95:e8:89:24:bd:f7:04:92:
d6:e1:0a:03:40:d0:e5:c9:1c:01:80:59:b1:2f:93:
01:a4:8b:9e:c5:d9:3f:7c:14:ed:37:c0:db:b3:54:
9b:f9:9a:e2:82:2a:1d:71:20:81:eb:e0:75:5c:27:
dc:ea:fc:8c:e2:f9:31:78:cd:62:6c:1b:48:bd:ac:
0d:0c:84:1a:06:a9:19:c0:30:30:e4:37:0f:ca:90:
2c:fd:e5:40:6f:f7:ba:f9:51:f8:56:8b:33:dd:41:
df:92:30:12:08:cf:10:f5:fb:9f:77:5b:8a:a5:78:
8c:94:4a:6a:63:68:ce:aa:86:e9:bc:91:03:d0:3d:
f4:5e:fa:ae:d1:35:0d:e9:6b:a0:12:0d:f3:4f:66:
83:72:87:58:30:95:f8:07:a9:12:dd:f3:8d:54:c1:
b5:49:86:53:86:8a:f1:c8:ed:93:86:53:f3:bc:e0:
e8:b1:da:a1:14:2b:aa:1a:9d:b4:b6:8a:8b:57:9a:
ad:b8:3e:dd:97:b7:55:9d:c7:e2:ef:4f:a8:ba:0e:
9f:6e:6d:28:56:62:fb:d6:6f:d1:5e:4a:71:19:0e:
0b:03:df:bb:d6:ab:37:4b:20:93:dc:0c:25:ac:3b:
2a:43:03:43:6d:e3:12:d7:ed:4c:ac:da:75:53:7d:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DB:E7:25:0F:A9:69:28:F0:49:53:44:F6:62:87:F1:1B:D4:B9:01
X509v3 Authority Key Identifier:
keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:cc:41:2a:af:6f:d9:64:85:0b:f4:9e:2a:c5:03:8e:92:2b:
fa:8e:f2:2b:56:aa:b3:ae:37:b2:d2:88:4c:d9:66:46:e2:0f:
f8:42:61:2d:ae:f3:8a:8b:ac:84:9e:4d:d6:d8:0f:fc:b0:13:
1e:83:fb:ae:59:f7:a0:56:79:16:ac:19:f1:e1:d1:86:ca:85:
5b:eb:f8:8a:21:63:2e:00:b7:67:f0:d4:03:01:fb:25:01:4a:
86:9a:87:95:22:c4:df:2e:d5:b9:64:3c:5a:ab:70:a2:3b:0a:
d3:c3:32:0f:46:41:5d:f0:93:df:64:de:c4:59:8d:f9:f2:c7:
15:67:9e:db:9f:ae:83:95:f4:42:84:06:29:3d:33:8b:14:a6:
73:c2:5a:2b:48:e5:01:db:7f:ec:69:d4:43:9f:fc:71:fa:03:
23:9f:0c:fb:60:ff:ee:2f:c2:33:26:b0:fc:7a:29:4f:83:86:
49:cd:b0:32:c9:26:cf:9d:03:8b:78:23:2b:b7:19:9d:fc:e1:
8d:9f:06:84:44:f8:41:9d:3a:ff:21:a4:69:96:b4:9c:ab:98:
43:d5:40:44:a7:2d:01:8d:0c:23:fd:e5:a4:85:e0:72:7b:c0:
dc:a4:a8:bc:46:c1:2a:a7:2c:d0:b1:73:0a:67:f8:1f:38:99:
7a:11:0b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:09 2025 by rpki-client