Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
File: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft (raw, json)
Hash identifier: x0bAze+5HJvcg5emBaVhglb6eQ6XCHsdtX+/fHEddTc=
Subject key identifier: 51:E3:D1:AA:9E:CC:60:EA:E3:A1:0F:39:08:F9:63:86:1F:04:79:8D
Authority key identifier: 43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
Certificate issuer: /CN=43a3517606989eb352f699976f219faec8e350e7
Certificate serial: 01976D3E5973D1EE4230EECCF7C6D081E52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 07:01:32 +0000
Manifest this update: Sat 14 Jun 2025 07:01:32 +0000
Manifest next update: Sun 15 Jun 2025 07:01:32 +0000
Files and hashes: 1: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl (hash: VYHfIN91IN2ZxCOBn3WvZUWgbWLaXXBPSIBL4GM10iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:59:73:d1:ee:42:30:ee:cc:f7:c6:d0:81:e5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a3517606989eb352f699976f219faec8e350e7
Validity
Not Before: Jun 14 07:01:32 2025 GMT
Not After : Jun 15 07:01:32 2025 GMT
Subject: CN=51e3d1aa9ecc60eae3a10f3908f963861f04798d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:62:f6:76:24:2d:8e:b1:c1:5d:2d:94:7c:
84:25:9a:ff:24:55:4e:fa:f6:0e:f0:93:87:38:91:
02:07:9c:70:85:04:46:e1:21:4e:b7:b6:75:78:43:
f3:00:db:00:14:7e:3f:64:6d:c6:a5:14:89:60:15:
b2:07:57:2e:b9:29:53:a3:e8:83:7b:5b:fd:04:bd:
81:b6:ef:b6:07:28:42:ed:5e:50:b9:dc:ee:c2:d6:
b0:43:92:c5:47:0a:f0:16:36:3b:4a:a1:77:cd:d0:
2a:78:f9:dc:06:e7:4d:6f:84:3f:d8:b8:6f:85:97:
db:76:5b:c0:d0:bb:a3:89:62:15:17:61:80:0f:70:
fc:83:eb:14:d3:8e:23:f0:92:06:7e:7f:4b:5e:5f:
f9:1f:05:28:86:ab:c5:83:6b:2b:c3:45:19:93:a7:
03:54:15:5a:5b:60:4a:d6:11:ae:e8:8a:38:03:3b:
95:7c:72:2e:d4:e8:5d:89:bf:bd:61:e4:3d:15:e3:
ba:ef:3c:15:af:b0:15:32:7a:e7:7b:04:77:66:41:
58:d7:33:72:f7:e1:da:69:1a:bf:d2:9d:8a:3f:76:
b0:74:34:59:5e:87:7d:13:dd:91:7b:f8:2d:c7:e2:
9e:8f:f3:e4:52:20:09:fd:55:f0:97:32:02:31:e1:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E3:D1:AA:9E:CC:60:EA:E3:A1:0F:39:08:F9:63:86:1F:04:79:8D
X509v3 Authority Key Identifier:
keyid:43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d0:a2:35:7a:7d:21:55:49:df:63:db:26:e8:ec:44:e6:ff:
5d:69:0a:ef:cb:6e:51:13:04:8e:2c:ce:72:6a:a2:fc:5d:df:
15:05:69:66:a2:e3:89:3b:8f:46:bd:f0:53:67:86:79:74:1b:
19:64:e5:c9:15:5a:fe:69:2c:6c:8a:fc:2e:e3:96:4f:61:ca:
0f:20:5f:fc:2c:9e:ad:05:91:94:87:c0:ae:83:be:b0:9e:10:
9c:4f:91:1a:93:0e:c3:4f:1a:6f:00:d1:0d:bb:5a:d3:9b:f6:
32:f1:8d:40:e0:be:30:30:ad:60:1d:b1:5f:ea:dd:30:64:9d:
a0:d8:de:0b:ed:bb:6e:65:93:98:90:44:29:75:2b:24:9e:4d:
df:86:24:66:a8:13:b7:ee:09:91:c4:6f:4f:44:cc:0d:92:27:
5b:e5:f2:36:20:9d:c1:c7:4e:1c:de:47:7a:d4:c0:15:e5:91:
84:10:fa:b9:08:b4:26:6d:f3:8e:b1:91:bc:e2:e8:2a:2e:65:
97:b7:f6:17:9b:1f:54:0e:e7:ee:a6:0d:07:a9:c3:91:ba:df:
0e:6e:5b:e3:a9:75:f9:11:37:e7:52:16:ba:d8:37:cd:82:39:
0a:7a:17:0c:a2:cd:f1:f2:e6:71:a8:57:24:85:f9:bd:b7:ad:
b9:4e:09:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:57:09 2025 by rpki-client