Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File: 22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier: jviLT+vCKsCeh0OXnKz+5VwWBOVC4v6DPUN0D8Iwh8I=
Subject key identifier: CC:66:45:B7:97:8A:7C:EB:DA:74:87:E6:A4:68:A9:C5:6E:48:8B:01
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 019770E3C89FF8701E6BB3327DC6F0599B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 00:01:05 +0000
Manifest this update: Sun 15 Jun 2025 00:01:05 +0000
Manifest next update: Mon 16 Jun 2025 00:01:05 +0000
Files and hashes: 1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: BgNnRYcIvUFf6+QCtOLmRX6igS7m4lgEgXRPC9TARN4=)
2: 825nFrz3u6HGU-YZ6CH8LLOr_XE.roa (hash: jl6qorIEanDMcWiaTBA0q+h0ZRVRtDHwIH2xPi3aeGw=)
3: 8mzSvC4v5Ni41t8FB8aiAfYjJcI.roa (hash: QyI7qjDJOZQBTsa2Xsr+TTNwnCK4F/pFTnriXbmvjf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:c8:9f:f8:70:1e:6b:b3:32:7d:c6:f0:59:9b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Jun 15 00:01:05 2025 GMT
Not After : Jun 16 00:01:05 2025 GMT
Subject: CN=cc6645b7978a7cebda7487e6a468a9c56e488b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:e5:d9:df:71:ed:09:b2:df:14:97:92:8c:
d3:a0:b0:4a:ee:4f:21:ca:e8:b7:70:6f:2d:37:2e:
2a:7e:6a:2e:05:e3:10:5a:4e:32:90:ab:5e:6b:61:
fe:02:cf:ad:f6:20:de:5b:2d:55:77:8a:5a:af:00:
0c:3f:15:9a:1d:df:82:07:a6:24:7c:f0:6c:10:d5:
c2:42:2b:21:f3:ff:7d:84:31:76:d3:17:bc:3f:40:
dd:3e:bb:dd:2a:33:0e:4e:a7:5d:b4:79:2e:90:2a:
01:f1:c4:d0:b0:ef:b8:fd:9d:1d:ba:57:03:84:bb:
0b:7d:26:e5:07:8d:f7:8e:34:1f:eb:b6:0c:bd:6d:
18:fe:fa:76:db:b8:d7:f0:05:67:a3:af:44:95:99:
94:66:39:8f:1a:93:83:2f:76:65:d8:5f:25:28:af:
37:c6:df:88:cf:37:89:2e:a5:59:a9:19:89:b3:30:
ef:4a:b6:2e:5e:df:d7:96:65:09:81:ad:0c:88:e3:
b1:a2:49:47:06:e6:58:3d:d7:4f:df:c6:dc:b8:97:
2e:7d:3b:01:dc:03:ce:a4:f6:8a:19:45:2a:3d:61:
b2:e7:e8:ab:3b:46:15:ec:29:84:df:93:18:03:0d:
11:0d:63:62:28:b8:02:69:00:af:cf:b0:46:b5:85:
6c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:66:45:B7:97:8A:7C:EB:DA:74:87:E6:A4:68:A9:C5:6E:48:8B:01
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:17:03:3d:5d:a1:32:f5:8a:13:bb:40:49:cb:f6:f5:62:81:
64:6e:e3:80:70:c1:65:a4:dd:be:e0:9c:76:20:b6:19:08:97:
20:c6:26:ba:67:a3:eb:8a:8f:2e:6e:e4:c6:d6:bc:bf:4d:5e:
64:ff:3e:a0:aa:83:33:1d:4f:9a:4f:7f:86:0e:2f:d6:c1:5d:
16:4e:96:bd:5d:a0:ba:e3:0c:c8:d3:e4:42:0c:45:c6:d2:61:
52:96:a9:22:d2:e2:46:88:a2:dc:e8:fb:87:a2:c3:c8:3b:00:
ff:67:98:c8:15:7a:1c:8a:cb:b9:55:2b:da:e7:3a:3e:a2:91:
df:47:82:32:bb:93:e4:a4:79:f4:5a:75:e8:23:9c:40:0f:4f:
0c:44:c2:f8:be:58:d2:58:a1:b7:f7:2a:0a:da:17:ec:75:13:
8b:0a:80:e7:87:58:d8:de:f5:2b:66:21:27:e9:98:32:62:d3:
4b:78:0d:fe:0d:b2:70:82:47:8b:9f:7a:a1:30:24:e3:73:18:
24:b9:ba:62:00:34:cb:e1:d2:59:ea:b1:31:8c:69:cd:fb:de:
df:79:77:4a:78:49:ca:2c:3f:d3:62:eb:f1:ec:62:b2:85:77:
0b:e0:98:18:10:62:b4:e3:aa:bf:ce:f7:7a:7d:f5:61:46:c2:
13:5d:81:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:06:50 2025 by rpki-client