Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
File: RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft (raw, json)
Hash identifier: Lq/hHx1bgOFUO3M7ilkODAFuLELhMI/g0CePpF8T5hk=
Subject key identifier: 91:E9:FF:96:58:AD:CD:E0:22:7D:1B:B0:A0:8E:24:98:D2:9E:88:CF
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 0196CEAB344152C3D67207C592F03E8FC239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
Manifest number: 0D28
Signing time: Wed 14 May 2025 12:00:48 +0000
Manifest this update: Wed 14 May 2025 12:00:48 +0000
Manifest next update: Thu 15 May 2025 12:00:48 +0000
Files and hashes: 1: RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl (hash: RcVhYgPdylIJo86dcQ6k2ROqLy+qiKzmkJC+rnc0Dw8=)
2: bdbKzGuhzcfiVqYcyUjbwWvnE0w.roa (hash: EoIpsT1HmNm7h0aLpOdMeI8Ad8kT8sfcfHIMZV0nTSQ=)
3: sayECznhSIzMnJpVagOHebCR_x0.roa (hash: hUIe0JVfYeAbZr+iALwcU4dqSjQhm3L+k0UihQEwCkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:ab:34:41:52:c3:d6:72:07:c5:92:f0:3e:8f:c2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: May 14 12:00:48 2025 GMT
Not After : May 15 12:00:48 2025 GMT
Subject: CN=91e9ff9658adcde0227d1bb0a08e2498d29e88cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:c9:10:fd:7e:bc:86:6f:89:1e:6f:2c:5e:
d6:7e:ca:87:1d:62:90:c3:ae:22:b5:82:40:62:45:
fa:0d:86:a7:7f:59:fa:36:d3:b8:af:73:91:30:c4:
c5:c0:76:48:04:ce:33:96:d2:a9:b9:70:d2:c2:c4:
9e:6d:9e:90:dc:46:60:c5:30:5f:c0:43:3f:99:97:
45:23:2d:24:a6:56:7c:cb:9d:ee:db:60:94:ea:f7:
aa:16:4f:49:ff:df:fb:6d:40:c8:a8:89:82:d3:67:
dd:17:88:bb:7b:96:59:10:c0:06:b5:1f:d2:b1:f0:
9a:2b:56:9f:83:d7:e7:2b:a0:e2:5c:c4:9a:b6:b7:
51:6f:c3:20:dd:80:0c:29:2f:b8:72:2c:cf:6b:5c:
1c:05:6d:71:2a:7e:12:71:39:2d:bc:6d:c4:cc:05:
2f:4c:87:41:d3:b6:2e:5a:eb:98:34:ed:8c:97:f5:
87:60:37:83:1e:c8:f2:e2:8a:30:e5:b6:5d:f3:d3:
e1:ac:14:4a:4e:33:17:e9:db:ef:c7:7f:08:f5:4e:
e3:42:9f:c8:1d:84:9b:25:b6:7a:06:4d:d9:6d:ce:
0e:91:32:6a:cb:d3:8d:dd:4f:ec:32:e1:2d:95:47:
cc:e0:3a:91:8b:66:ce:0c:f8:e5:e3:9d:2c:f6:04:
af:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E9:FF:96:58:AD:CD:E0:22:7D:1B:B0:A0:8E:24:98:D2:9E:88:CF
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:9a:14:7a:d3:35:35:56:8e:a3:76:18:05:15:37:63:5c:3c:
af:33:47:bf:ae:fd:f5:20:04:03:76:6f:28:fd:f3:9f:02:55:
b5:b4:15:41:5d:6c:33:c7:3e:f3:c6:3c:9e:f2:91:66:e4:e6:
ed:24:16:e5:82:33:f9:5e:c9:09:2b:30:3c:12:6d:51:18:05:
eb:d9:89:19:1c:14:c1:b7:df:c8:49:73:bb:0b:49:d3:7f:4a:
3e:af:15:35:67:7b:e3:a0:22:25:c0:87:88:56:ed:d6:26:15:
ac:43:5a:66:5e:9f:27:bd:c4:c3:cd:4b:da:a1:8b:00:e7:73:
b1:d3:ac:3f:58:b3:f5:99:8b:2f:77:5d:c0:a3:52:0b:23:df:
8c:d1:30:f0:bb:f2:4e:e4:02:a8:3d:76:83:46:24:6d:35:f4:
92:55:62:01:13:78:b0:00:c2:86:c0:ce:34:ed:25:cb:ee:d4:
65:c1:db:ae:ad:76:1f:c2:7c:99:2c:50:35:69:9d:7f:e9:90:
e5:1e:ef:0e:8a:9c:e1:f8:af:a8:78:18:2f:a5:dc:80:56:af:
e1:b4:ba:64:04:b6:b4:4c:21:2c:9c:4c:1d:3f:8c:6f:e5:7a:
3e:ed:63:4b:e0:b1:3e:5a:c1:84:89:48:24:b5:8d:aa:c2:19:
05:76:97:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:18:30 2025 by rpki-client