Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: VXpnubJnnsaHnjlNaz1I48QzV704svwJW2RmFJxzza0=
Subject key identifier: 59:C1:35:77:18:24:28:70:27:A8:92:5D:2F:4A:D3:CC:84:E9:51:98
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 0196B82322E86AEEABE91DE2E0191528D1B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 1539
Signing time: Sat 10 May 2025 03:00:32 +0000
Manifest this update: Sat 10 May 2025 03:00:32 +0000
Manifest next update: Sun 11 May 2025 03:00:32 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: UcjiFtnLyX0HVUoPmo3rCKDw4qyfF/cIlBLIxrEudpQ=)
2: mC6qnnktw8ocqw8es0LfRst29xw.roa (hash: ppmb2PFwvp6zlS01nCp0DE/SrZFmg3TuLccALf3DpFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:22:e8:6a:ee:ab:e9:1d:e2:e0:19:15:28:d1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: May 10 03:00:32 2025 GMT
Not After : May 11 03:00:32 2025 GMT
Subject: CN=59c135771824287027a8925d2f4ad3cc84e95198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a5:82:e5:7d:d0:6c:c8:91:c6:ab:51:4f:20:
eb:e3:b7:38:16:f4:f4:86:6d:95:8d:0a:fb:75:2a:
08:6d:da:f6:f3:94:a1:ba:8b:94:33:88:c6:d3:4f:
b1:d2:ea:35:d2:ab:16:35:35:e3:f4:f6:4f:02:dd:
79:3c:63:45:f7:bf:1c:5d:48:9b:76:f4:36:6f:06:
e0:8a:1e:23:62:fc:42:56:e5:8e:d1:d6:bd:c5:1d:
d3:c2:f0:92:ef:a2:c5:4e:17:ef:0a:3e:e6:5d:9a:
33:71:15:b4:d0:7b:8a:39:71:95:b9:dc:23:28:01:
ee:d1:2e:03:18:da:7f:13:9b:66:4b:92:da:de:3c:
e7:73:db:8a:05:9f:a0:a3:c1:11:97:3f:13:c9:56:
e0:b2:98:f7:e1:b3:36:25:2c:85:3e:79:c3:2c:96:
ed:db:dc:83:82:9f:b4:cb:81:23:d7:a3:67:26:d4:
f5:06:45:be:08:dd:8a:d2:09:18:be:67:14:e5:04:
5d:18:be:1e:08:7a:54:a6:80:66:14:60:3d:50:15:
5b:09:73:70:1d:46:37:8c:b5:ed:56:2b:1c:f0:49:
dc:bc:8e:8d:f8:c6:25:41:90:dc:a6:a2:fa:00:15:
c1:d7:22:ba:1e:73:33:7e:ed:98:56:5f:83:dd:b5:
b5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C1:35:77:18:24:28:70:27:A8:92:5D:2F:4A:D3:CC:84:E9:51:98
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ad:47:27:55:3c:ec:c4:cc:b2:f4:aa:47:b9:d9:3a:6a:45:
a9:c4:ab:4d:94:84:e6:2b:40:15:be:02:12:19:17:23:1f:eb:
92:db:1e:4f:e9:a3:f1:da:07:34:a6:b2:9f:da:2f:bd:e8:7d:
b4:4f:d4:e4:30:57:c7:5c:ad:b0:91:cc:91:41:e1:ce:91:20:
c6:c0:41:bc:8d:df:8d:10:ac:1a:86:d8:9f:28:6c:be:94:2e:
76:3f:d5:70:57:06:d1:4b:c9:c3:a3:1b:33:72:ac:4b:e9:04:
18:6a:d3:dd:bc:d1:66:f9:fc:c0:0c:49:75:69:bc:28:15:af:
e8:97:2d:c7:44:1b:38:18:f6:38:54:3b:3c:32:be:0b:e2:5c:
7a:73:29:13:62:40:0f:46:06:93:04:ef:cd:b9:2d:3c:39:24:
49:5f:63:77:95:ce:98:cc:59:92:df:01:8b:53:28:a9:4d:8e:
7a:76:55:34:84:94:69:df:f5:36:b7:c0:6b:93:57:0b:1b:1e:
d3:eb:b0:ee:29:5e:0d:af:be:a9:bd:2c:6a:01:d1:0b:6f:65:
56:f4:34:d6:3b:0e:2f:8a:30:ac:52:83:9f:20:5e:0f:c4:a5:
06:07:f7:ae:e2:dc:18:3b:fd:a0:08:37:8a:14:5f:bb:c8:7c:
45:d8:47:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:36:38 2025 by rpki-client