Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: wHGRT9aKR71EokXEED0GW3dKdN1fcX6azocu0iZnxBc=
Subject key identifier: 78:13:11:73:0B:A4:FD:FA:F2:3F:6E:34:D4:DD:9F:AD:37:28:02:3C
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 0196C72902A13ECEA4BE8BDD343DCEA7886E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 01:01:15 +0000
Manifest this update: Tue 13 May 2025 01:01:15 +0000
Manifest next update: Wed 14 May 2025 01:01:15 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: T7wIT32uy3qwSNqTJI4cLfDvDDeWkRJiBdQjYptON7k=)
2: tktnNkqo-Ucay9gG5szDFherVRo.roa (hash: fENlsqvH8zzdUmZ9S6kxqqHzh2VPnW1ALr3bQ6F8fDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:29:02:a1:3e:ce:a4:be:8b:dd:34:3d:ce:a7:88:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: May 13 01:01:15 2025 GMT
Not After : May 14 01:01:15 2025 GMT
Subject: CN=781311730ba4fdfaf23f6e34d4dd9fad3728023c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ee:77:65:60:eb:8a:28:2b:79:7a:41:09:15:
33:3a:f7:40:8c:cb:72:36:d7:33:25:05:ac:39:f6:
fe:2f:47:ec:d5:fb:1d:6a:e9:dd:a2:e4:39:2e:4d:
21:6d:28:34:32:a0:79:54:0e:35:bf:44:fe:3e:5f:
1b:4d:15:de:41:96:b5:01:6d:24:3e:35:20:96:21:
a7:24:25:c6:01:54:5e:28:55:17:97:70:42:d9:e8:
e0:13:ef:7e:7a:34:70:84:03:f3:eb:78:eb:26:6d:
c7:c7:b3:df:71:32:de:2f:c0:9e:18:ad:80:9e:4e:
41:cf:20:36:56:03:1d:ca:2f:47:59:c1:5b:c5:12:
03:f4:80:1c:91:26:bc:2f:0a:ca:dd:57:2c:1a:63:
61:e5:b2:f3:ec:7f:9a:59:1b:7a:3e:50:3a:06:a5:
14:ef:aa:ce:cd:0b:ef:cb:c4:bd:c5:23:cc:29:78:
70:8d:ef:c4:c3:9f:c9:92:44:d4:9a:51:6d:5a:18:
44:3a:ee:8c:39:77:60:eb:db:bf:82:8f:48:2f:2b:
f4:b2:87:3f:36:ff:69:91:22:5b:d5:db:16:98:b3:
2e:0a:5e:a3:64:a6:c8:46:62:f6:b8:00:13:d0:86:
3a:4a:b0:45:c7:d0:a9:50:ae:fa:de:d3:59:40:5c:
22:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:13:11:73:0B:A4:FD:FA:F2:3F:6E:34:D4:DD:9F:AD:37:28:02:3C
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:21:f3:81:f5:ec:6a:6d:59:c5:68:ed:28:2b:c6:55:a7:67:
d5:77:83:0c:a1:35:45:5d:c8:eb:48:20:76:50:03:14:18:f9:
f7:0c:61:22:07:2f:97:1e:77:a5:7b:3d:83:fd:b5:bf:00:f1:
e3:7a:0f:d3:11:76:f1:60:37:bd:fe:8c:3d:38:a6:91:5e:af:
df:6d:03:80:78:a6:d6:41:b3:70:59:c8:6f:c5:1a:51:e3:d8:
7c:00:de:8e:ec:95:20:32:f9:55:8c:52:28:d1:d7:0f:bf:ba:
a6:4f:76:28:14:04:1b:37:b3:15:22:66:57:d2:10:74:3c:56:
fb:f3:34:f1:91:3e:cf:ba:b0:a8:1d:d7:52:5a:45:25:a8:b6:
ba:e8:27:43:80:04:25:4b:3a:cf:b1:22:63:b5:e3:58:dd:c1:
5a:27:fe:e7:76:1b:ea:48:3c:77:24:7a:b4:22:ab:1b:6f:c3:
af:ae:81:4a:bf:2c:54:5a:f2:af:53:16:8b:38:2c:dd:74:5f:
22:5d:c3:dd:48:95:b1:21:ee:65:ab:0a:b1:b1:f5:d2:e2:d0:
d6:43:0d:7b:23:0a:f8:86:ce:9a:30:1e:fb:11:58:48:1b:fb:
30:7d:4e:e3:ce:7a:23:67:6b:70:23:9c:c4:53:85:96:fc:2f:
d9:51:e4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:21:12 2025 by rpki-client