Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
File: Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft (raw, json)
Hash identifier: SJW+BUlWO0wDRB5V/PLIjr8mT12u09BmZdDH3HblAJY=
Subject key identifier: 08:11:E1:AE:74:E5:20:B0:A5:9B:75:FB:17:87:FC:AE:A3:08:B7:E1
Authority key identifier: 43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
Certificate issuer: /CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Certificate serial: 0196C34B74AAD09E2740690C18D85E3E461D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
Manifest number: 054B
Signing time: Mon 12 May 2025 07:00:24 +0000
Manifest this update: Mon 12 May 2025 07:00:24 +0000
Manifest next update: Tue 13 May 2025 07:00:24 +0000
Files and hashes: 1: Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl (hash: kAUrGAqRUzAPjsVXCXen2J1fhemXAqbReSSA5zytLzY=)
2: VMxe0uGWpSo7MC38AuPyARm4ELw.roa (hash: tdke4bTnyhBCQowtj7hvI4mzPoyXG8N51jhjgyuQaj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:74:aa:d0:9e:27:40:69:0c:18:d8:5e:3e:46:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Validity
Not Before: May 12 07:00:24 2025 GMT
Not After : May 13 07:00:24 2025 GMT
Subject: CN=0811e1ae74e520b0a59b75fb1787fcaea308b7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e4:92:59:ac:4f:c2:9e:8c:50:35:07:ae:3b:
e4:b7:bc:4d:a4:32:2f:fe:31:97:f8:97:9e:9d:f0:
da:32:0d:5a:7b:cb:ea:85:8a:32:3a:55:12:38:01:
ea:57:6a:fa:9b:2b:03:51:83:1b:b8:4c:87:a1:8c:
86:86:99:f3:82:59:ec:69:1e:c4:65:c0:0f:ae:60:
4c:0c:e1:33:a3:1d:4c:75:6c:ec:50:dc:2c:d3:45:
3e:cf:22:1c:14:30:6a:e1:c3:91:bd:3e:6d:68:39:
d8:b6:02:04:d9:15:f4:2a:d7:f4:2d:bb:36:15:ae:
ad:de:79:04:38:93:28:45:c3:46:7c:4d:06:ca:0c:
4a:87:3c:d0:33:91:c4:bb:74:68:90:70:0c:39:1d:
f4:9c:d7:d0:ba:b2:71:51:ab:da:25:4a:e8:de:16:
18:dc:7e:98:a2:7a:89:57:7f:8e:fb:c5:56:3e:dd:
48:6b:14:47:60:7f:6b:32:38:b2:a7:46:3a:1e:93:
c7:3d:b2:c6:ad:a9:6f:bb:4b:77:c4:26:a6:f2:b8:
23:a8:8b:db:ff:8b:93:32:01:55:f3:b2:27:f8:c7:
6f:11:3a:cd:12:2d:2c:b6:f7:bf:77:b3:5d:60:f9:
18:1f:43:2b:6c:e8:a2:bc:81:b9:fb:f0:e9:4e:62:
f5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:11:E1:AE:74:E5:20:B0:A5:9B:75:FB:17:87:FC:AE:A3:08:B7:E1
X509v3 Authority Key Identifier:
keyid:43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3a:25:6e:73:d9:97:ca:5e:44:2e:71:12:17:3e:ae:72:2e:
9b:9a:14:e5:7b:90:53:33:94:ab:56:4e:f8:d1:de:76:11:0b:
27:31:5f:eb:b5:1c:f5:f6:68:81:2b:98:b0:a0:d3:af:fc:9d:
40:ac:a3:0f:4c:6d:31:11:af:f3:23:b8:18:34:5f:9d:e5:17:
62:a1:39:6b:c5:0d:e3:82:33:94:38:47:ff:e8:43:fb:0c:32:
e3:83:38:d8:42:46:ac:86:50:13:b2:61:4c:8b:99:1a:46:69:
0a:61:ea:67:c5:d0:0f:4f:cd:f6:b6:0d:a7:8a:33:84:fa:d5:
35:c1:56:51:a5:f7:02:7a:74:08:1e:42:bc:d9:4c:b4:0e:6b:
ad:ac:f4:3f:1b:89:03:2f:08:55:8d:38:56:8c:ea:b2:36:8c:
38:b9:4d:94:99:98:ea:91:17:55:30:37:69:49:26:b8:2a:bf:
4b:4d:d5:5b:34:0d:4c:83:92:6c:8f:e5:89:7c:83:63:0d:5d:
b2:9a:73:7c:60:c3:4b:09:63:34:8d:f6:0f:25:fa:b5:f6:9b:
ed:df:61:2a:57:70:2d:b5:78:c2:37:04:98:c3:4c:d6:e4:0b:
00:9b:2b:4d:e1:79:a3:c8:65:a2:3e:a9:eb:52:e5:c4:e5:f3:
e7:52:ad:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:13:47 2025 by rpki-client