Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
File: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json)
Hash identifier: MmvOwx3qykvotZj/w7WMImKakSL+t3WB1nONPXMFJdM=
Subject key identifier: 42:89:D7:3E:AB:4B:7C:2D:A9:19:A8:E0:91:49:36:43:BD:6F:22:38
Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944
Certificate serial: 0196D062189262869D066D847C73A979D98B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
Manifest number: 1489
Signing time: Wed 14 May 2025 20:00:11 +0000
Manifest this update: Wed 14 May 2025 20:00:11 +0000
Manifest next update: Thu 15 May 2025 20:00:11 +0000
Files and hashes: 1: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: sc9SI6CH4sRFQK91UpUs6uyZC+bRrMEu9aSf1XV/h98=)
2: xkuriOxhH9L4osrYS3niaHQqN-k.roa (hash: K/CvJAstY6jQItpyuZ+KxEg8C5FknWg2U5h6YOrdb90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:62:18:92:62:86:9d:06:6d:84:7c:73:a9:79:d9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944
Validity
Not Before: May 14 20:00:11 2025 GMT
Not After : May 15 20:00:11 2025 GMT
Subject: CN=4289d73eab4b7c2da919a8e091493643bd6f2238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:2d:40:cd:a8:5c:79:58:03:f0:3b:f0:a0:
1e:1b:ad:09:b2:88:4c:8c:f1:7a:d6:c1:2f:a3:c6:
fb:6c:f5:e6:ac:96:43:77:da:57:9f:e1:19:95:cf:
4c:21:75:da:b4:54:a0:a0:12:5b:d3:4d:1b:fc:e6:
cb:77:c3:b9:ee:d2:62:ee:e8:2c:68:b6:cd:91:ab:
a0:17:e4:38:cc:22:32:f3:5b:b1:5e:53:ef:65:6f:
28:c3:f0:6b:94:0d:30:18:9f:f8:0b:00:0a:8a:e6:
27:ce:09:8a:77:b3:e6:31:43:ea:7b:bf:0c:5e:96:
b9:bb:71:5b:15:41:4a:fc:7c:08:49:e8:9f:97:f0:
e8:34:eb:ea:9a:3d:2d:12:5e:1e:1f:61:f5:e4:6c:
84:27:2a:16:c1:24:55:37:1d:f1:a7:5b:53:1e:74:
f4:ef:5b:dd:97:91:7a:60:22:6e:89:3c:d3:91:b8:
2e:23:e3:80:c1:aa:44:7c:7c:29:16:df:4d:81:6a:
7c:8c:73:0f:34:a6:70:76:65:cd:17:2e:07:18:10:
78:89:d0:75:97:93:1d:9a:c4:5a:57:51:a0:53:08:
90:6e:92:4f:a2:4d:bf:1f:b0:29:75:d7:cc:ee:ed:
cc:87:66:b4:22:4c:5d:3d:99:3e:ab:7f:28:37:94:
6c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:89:D7:3E:AB:4B:7C:2D:A9:19:A8:E0:91:49:36:43:BD:6F:22:38
X509v3 Authority Key Identifier:
keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cf:f8:e8:9c:ae:d5:15:e3:06:b4:e8:10:48:c8:f0:37:86:
06:bb:62:11:a3:e4:01:d1:b7:92:c0:91:85:56:7b:a6:45:de:
6f:41:d2:ce:76:ba:60:ed:33:bc:71:22:0b:44:f8:91:44:a8:
f0:47:dc:87:e5:84:3d:7c:e2:8d:e1:7d:2b:64:97:0f:86:80:
ec:2c:59:fc:c6:28:93:7b:60:c0:e6:98:18:1d:16:1c:58:22:
d7:5e:cc:6e:24:2b:f4:f6:8c:b2:0a:d6:a7:30:23:2c:c0:5d:
fa:d4:5a:96:f1:db:86:83:10:da:c6:ab:3b:ca:52:5a:61:21:
e6:0c:03:e9:b0:9e:3f:32:6b:b1:6c:0a:3d:3e:2f:de:70:f0:
c2:d6:ce:ae:e7:aa:64:fb:16:ad:25:e6:62:68:c2:80:87:85:
6f:19:6b:c1:c3:5a:b4:86:a4:ab:68:ac:9c:d1:6b:3c:8c:02:
9e:ad:9e:ff:2f:1f:36:e6:50:18:f0:ea:c0:57:c9:47:37:35:
d4:48:96:f5:27:65:b8:45:df:12:34:c0:82:5c:b0:13:a1:61:
d2:5f:c4:73:6f:6a:c2:04:ea:5c:e7:79:a3:20:da:67:ce:86:
15:0a:77:24:c8:0e:ed:fa:ef:dd:72:fd:dd:1a:7e:44:e8:84:
bd:cb:32:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:13:47 2025 by rpki-client