Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: //cUQAK/+x8s9wMj6e8VnIrILzs12Xz0vhE6UiR00Po=
Subject key identifier: 8D:12:4C:9F:E5:F1:94:A2:09:74:9A:81:5A:64:E0:0F:8A:2E:13:57
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 0196BF37CE76012E673A3071AA19A532AB92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 12:00:27 +0000
Manifest this update: Sun 11 May 2025 12:00:27 +0000
Manifest next update: Mon 12 May 2025 12:00:27 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: /OVeakJ463LoNOZYUkeSquSmGaad2gdXE0C8xm/keg4=)
2: jNyaGdXh72CU4r0BXdX9NFKAwCI.roa (hash: KWU48qyL5wzO3wv8boVqiKFZ7+HfPReZF5Tc1JfbGeU=)
3: rU-a1L62W9yvQkesfV9xmSsuDH0.roa (hash: TGk/DUYw8VVmGx/evhfxGKscBfdKDMhClJqHTZwdFIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:ce:76:01:2e:67:3a:30:71:aa:19:a5:32:ab:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: May 11 12:00:27 2025 GMT
Not After : May 12 12:00:27 2025 GMT
Subject: CN=8d124c9fe5f194a209749a815a64e00f8a2e1357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:da:cb:b9:c6:86:c1:4e:dd:08:1c:c0:65:
f6:35:6d:f1:fa:42:4e:ed:5d:96:9d:fe:42:1a:c7:
5a:c2:9f:05:16:b1:e6:a6:8b:a8:99:a1:c2:50:e1:
75:3d:03:ea:85:1e:61:5f:4d:d1:3a:53:d1:c8:48:
ad:20:da:9a:ef:13:77:b5:41:0d:3e:e4:59:c7:cb:
59:30:d6:b8:86:62:e0:71:b0:1d:fa:d2:fb:f8:89:
ca:dd:7f:07:b1:ed:2b:3a:99:09:ac:65:07:8d:be:
69:4e:77:1e:e3:3b:c7:fd:7e:1c:2d:4d:81:02:6f:
f0:5c:43:01:f5:71:31:2c:e7:19:a1:53:bb:2e:69:
d2:4f:26:e6:6e:ff:56:39:76:c5:1a:e6:66:06:2f:
54:5f:43:eb:dc:d6:cf:02:fa:50:6e:8e:7b:41:ca:
90:29:86:f3:e3:5a:89:0d:d9:19:30:b0:37:38:91:
5d:08:47:e9:cd:05:33:a3:d3:80:26:64:e7:49:4d:
e5:57:51:de:32:a7:65:1f:90:56:da:62:1b:c9:51:
cb:73:68:37:10:10:5f:ac:d4:77:99:e4:3b:ec:9c:
e5:f2:e8:3d:28:b3:70:b6:0d:98:3c:17:d8:47:be:
3b:dd:ca:9e:cf:3c:c5:9c:d6:04:c2:9a:78:da:30:
90:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:12:4C:9F:E5:F1:94:A2:09:74:9A:81:5A:64:E0:0F:8A:2E:13:57
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a5:fd:d3:e9:e0:a5:7d:5b:41:01:59:48:5d:4b:54:67:cb:
dc:c9:64:88:a3:52:c9:2f:cb:9b:ca:1c:4d:2c:b1:e5:20:98:
97:af:f1:a5:5a:97:ec:23:5b:a8:ef:5c:d0:30:22:59:14:2b:
25:ba:c2:f8:32:fd:ef:31:6b:91:fe:2a:15:d7:57:2e:37:49:
2b:bf:59:09:ee:22:e3:07:ae:96:69:1b:11:29:92:da:1f:ba:
07:49:68:8e:df:94:62:42:0f:d7:83:c9:eb:50:09:55:41:85:
f8:a8:c1:ba:1d:73:90:0d:25:b8:35:71:f6:46:c3:82:42:fe:
1c:73:55:32:04:16:95:ba:ce:27:c1:f7:cb:d9:21:67:8c:01:
17:75:df:32:1e:2c:39:2f:26:6e:24:bb:11:cb:0f:9c:49:ff:
66:8c:b2:b8:f0:7a:f9:d5:07:8c:1d:1b:8b:1c:a9:ba:83:f8:
39:68:15:98:e5:c4:b5:a3:ca:91:ed:1e:6b:1a:32:41:83:8b:
d9:18:09:62:66:f6:c5:ee:a4:10:6d:38:72:c4:40:76:55:dd:
e3:65:9c:ff:c9:64:96:19:8a:e8:e8:30:d6:62:2a:54:d7:3e:
ab:d3:d5:5b:fc:39:75:68:f6:16:39:98:dd:6d:29:f0:ea:85:
8b:90:ce:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:27:12 2025 by rpki-client