Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier: AqvbtllIpINmXlAuJzDLVzm7XYgZjCqDKALZQiuhh6c=
Subject key identifier: A0:B4:F9:BC:FD:32:E4:40:AC:A3:B5:61:C8:EE:7F:49:70:7D:61:96
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 01969DF6150883650F0AAFBC855E532951AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 01:01:12 +0000
Manifest this update: Mon 05 May 2025 01:01:12 +0000
Manifest next update: Tue 06 May 2025 01:01:12 +0000
Files and hashes: 1: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: 1HVyCnwq/56pTe0n8Wi2Ja5LyUu8Omr9RivCs29WS68=)
2: OvLZjS7E5MX30NZkLK9jxh8KFhU.roa (hash: cImSpb6PHoLXLcMRtEaZwDR7QJdikTFbgChlslLA778=)
3: SoN9k2cqGxyy_rsm3ydDmcCibzo.roa (hash: ajQGIB+pruVAaKn9625joYHZDBPfoDRUv7Hz6Vm4jnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f6:15:08:83:65:0f:0a:af:bc:85:5e:53:29:51:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: May 5 01:01:12 2025 GMT
Not After : May 6 01:01:12 2025 GMT
Subject: CN=a0b4f9bcfd32e440aca3b561c8ee7f49707d6196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:6e:c7:3d:11:55:76:e4:80:40:66:0b:a7:
40:e1:dd:a4:97:e1:2d:f7:ea:2d:79:5d:fd:38:40:
77:72:38:67:c6:4d:d3:71:8d:11:39:27:57:88:10:
0b:f5:bc:0b:f5:c2:f2:58:ed:a8:60:b2:45:7b:e8:
07:9c:8f:c2:fa:34:0f:0c:e6:1c:8d:a2:42:d3:13:
e9:7b:ec:40:25:36:0a:88:ee:18:46:b5:57:ae:96:
8c:f3:ed:89:c0:57:79:d1:b9:82:3a:90:af:17:d8:
b4:4e:e2:02:8b:50:ce:b7:d5:86:eb:21:96:0f:1d:
dc:4a:c1:a5:bd:90:88:f8:e9:a5:41:a9:0a:6c:38:
fe:b0:8c:c1:10:f5:e0:d0:49:92:9f:b5:6a:3b:c6:
f1:af:f9:04:2c:f1:cd:24:b5:0e:53:c0:b8:6e:5d:
00:85:4f:f8:75:68:d8:85:a1:a3:97:0d:07:20:f0:
41:bb:40:8d:37:23:fc:17:99:52:48:ba:d1:f7:48:
30:dc:be:af:46:2c:bb:92:35:56:48:8b:fa:85:5b:
8b:cd:5c:55:de:97:e4:f8:27:60:f0:fa:2c:ad:28:
9d:f4:b8:a5:e4:95:d4:75:5d:d2:53:5d:6b:0a:0a:
0e:67:eb:0c:c7:ff:9d:f5:34:ff:ff:3d:db:97:e6:
89:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B4:F9:BC:FD:32:E4:40:AC:A3:B5:61:C8:EE:7F:49:70:7D:61:96
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:15:92:52:98:b4:dc:33:a7:5e:6c:65:b2:a6:55:cb:24:d2:
9b:3f:58:d6:ce:45:06:19:18:2a:c6:36:66:2a:fb:71:87:5e:
15:69:19:8d:b2:94:dd:f3:b8:2f:64:c5:fc:70:b4:7d:e6:72:
34:52:2c:e5:55:7a:c3:97:2f:24:a3:56:5c:9b:f2:81:d7:20:
9e:7a:ae:ba:32:69:32:38:e5:f2:c0:f0:54:91:e3:28:80:a1:
e3:e5:15:59:db:be:a1:b9:ff:43:8e:90:f5:c6:09:ad:ca:71:
f1:1d:10:0a:8a:48:3c:ff:b6:0b:a4:93:05:04:47:15:a2:56:
cb:9d:f8:c7:3a:32:1d:3e:b4:bd:df:ca:4d:db:95:7a:71:6f:
c0:d0:66:3b:47:77:4f:4f:37:01:38:0c:90:8b:0f:84:04:12:
db:c8:25:ff:72:bc:d9:aa:37:9f:c8:0a:a1:4f:a8:9a:2d:5d:
38:5a:e1:a4:a9:ae:66:97:7e:02:bc:d8:5e:00:82:5e:d4:2f:
3b:f5:31:6a:2a:99:d1:6a:ae:05:2a:19:20:e5:36:ea:90:b8:
cd:e2:00:f6:7d:90:2e:16:fc:84:9f:05:a2:11:28:c5:f4:ed:
11:fb:ae:fd:61:25:15:47:b1:d4:21:e2:ce:b0:19:f1:82:b5:
a5:b8:72:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:17:13 2025 by rpki-client