Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier: xsDlKYSOL81vAVQXjj6n62BJrX98WXTkhyMpePrCfF0=
Subject key identifier: 95:0B:0E:F2:93:A5:0F:23:A0:C8:8F:C9:5A:AC:6C:88:1A:99:32:B8
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial: 01976BF451F427BE268921A294D32B0ABDDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number: 0753
Signing time: Sat 14 Jun 2025 01:01:03 +0000
Manifest this update: Sat 14 Jun 2025 01:01:03 +0000
Manifest next update: Sun 15 Jun 2025 01:01:03 +0000
Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: j5akTpp+XrMWG58Ii8MVw9FC0y9tvakht0Jm3hoUWZc=)
2: z1aZ7-bmH6l6J7mLCP5moL6leU0.roa (hash: yKL3bhklKR6G8Kxo3AuOxdxqmVoJuUJSKeF/iJ4ql/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:51:f4:27:be:26:89:21:a2:94:d3:2b:0a:bd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Validity
Not Before: Jun 14 01:01:03 2025 GMT
Not After : Jun 15 01:01:03 2025 GMT
Subject: CN=950b0ef293a50f23a0c88fc95aac6c881a9932b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5e:2f:30:3e:0b:ad:f1:a2:82:ce:4d:1d:31:
ab:ec:50:8a:31:ee:9e:a1:22:9a:90:b4:22:da:8c:
b1:22:58:6f:92:2d:fe:f2:8b:c7:ce:b1:e9:10:e1:
22:a0:a8:eb:2d:eb:24:10:5b:0b:40:c4:2d:c6:71:
88:4c:00:33:36:10:c0:91:67:b9:e6:90:9b:b3:ac:
85:2e:a1:5b:75:5c:f1:20:02:f1:85:2d:55:21:de:
98:69:65:ab:e7:c7:e2:76:a9:f4:0c:33:1e:17:75:
79:9a:55:a2:dc:b7:32:a3:79:be:1e:85:e0:c8:7c:
d1:b9:41:64:5a:a1:77:a7:04:8f:7e:63:ba:10:33:
84:40:41:b4:cb:77:88:86:4c:73:12:a7:e6:5f:22:
f0:58:14:50:92:e0:a9:69:77:3e:79:6f:81:85:34:
02:d8:a2:1b:14:66:2b:b9:6d:ba:e3:0f:58:10:c1:
b7:5b:ab:c3:5b:18:35:ad:f1:1c:ea:a9:6c:82:a6:
ef:e4:af:d0:67:65:e3:c8:38:60:08:cd:94:84:60:
5b:b1:db:ad:48:0d:5b:cf:a0:26:b9:ca:26:0c:f3:
0c:1b:87:d2:6e:c0:c3:be:c8:bd:63:b9:31:d6:5c:
a9:c9:d9:fc:50:15:f7:80:39:b5:1d:3b:3a:0b:03:
6f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0B:0E:F2:93:A5:0F:23:A0:C8:8F:C9:5A:AC:6C:88:1A:99:32:B8
X509v3 Authority Key Identifier:
keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:f6:60:a3:1b:c1:4b:a0:9c:43:d1:16:20:ff:9e:5c:3c:9c:
f0:ee:c0:60:8e:14:fb:5c:7c:28:05:79:96:fa:5b:57:0d:c2:
c7:ab:ac:47:46:7e:43:21:ca:50:5a:10:9e:10:c2:e2:b8:b2:
87:4e:93:1d:ce:15:3a:c5:61:fa:10:5c:c3:fd:67:2d:75:9f:
36:b2:72:55:e1:75:0c:3c:61:b0:a9:60:aa:44:1d:ca:60:14:
cc:91:47:6a:dc:bc:c0:17:ca:b6:93:14:53:3c:15:45:fd:7f:
08:f1:04:fb:30:ad:48:9a:45:ae:2f:c7:8d:6e:15:6d:87:31:
e7:6f:a7:32:a1:88:2f:bd:be:68:88:48:4b:15:64:08:d9:c5:
c0:10:2f:e8:fc:f4:d5:1d:f0:7f:c7:c3:9c:3f:56:b7:f9:dd:
24:e6:32:1c:b0:79:12:86:a2:87:1a:c7:6b:80:f5:4e:64:37:
d4:df:b9:6c:d2:35:98:89:2f:fb:06:87:83:c6:54:f5:7b:64:
7b:d7:8a:5f:7c:98:7d:12:aa:38:ac:38:74:8a:ca:75:78:c1:
4c:78:9d:0b:f9:74:7a:98:34:bf:e1:b8:81:8e:de:0c:33:c3:
67:52:61:3c:84:36:cb:9d:fa:15:7f:0d:5e:50:fd:78:df:f4:
40:82:6f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:20:16 2025 by rpki-client