Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
File: qy5bZ_JcvYgspNAj0h75jUg3Nds.mft (raw, json)
Hash identifier: gIOkp9hmqnI54kubxXFJfhiFiANXXzuEK7fvYTjsySw=
Subject key identifier: 2D:34:AE:EC:56:11:B0:03:CE:22:F8:A0:00:5B:1C:B6:50:C2:81:39
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Certificate issuer: /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial: 0196BC6DC6C8BD80A2CE1F3219294BB98CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
Manifest number: 1538
Signing time: Sat 10 May 2025 23:00:32 +0000
Manifest this update: Sat 10 May 2025 23:00:32 +0000
Manifest next update: Sun 11 May 2025 23:00:32 +0000
Files and hashes: 1: K7Ga725J3x2RwbbwxIq7lR_PIPs.roa (hash: iDoa32FgeW+pTYDS/vRw8g8vbffEox0Tjj/f0H2pJ4o=)
2: USK3DF_MeFiqUsO5eyLbMIpRftM.roa (hash: EfIlwaa4+l/J+6WJ30e/f1BqrVRRkC35cUUZDfKg660=)
3: jtaR0UqVsAZLkY0kZNEVD_APhkw.roa (hash: mqg6f6CiSZ5djyLSZlp3pc+4PGWQ8YQjeu4DqnHw2+g=)
4: qy5bZ_JcvYgspNAj0h75jUg3Nds.crl (hash: xvxxoOIU2o4Hh3OS24eNF9FjGi/Le9U56A576ZLSEfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:c6:c8:bd:80:a2:ce:1f:32:19:29:4b:b9:8c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Validity
Not Before: May 10 23:00:32 2025 GMT
Not After : May 11 23:00:32 2025 GMT
Subject: CN=2d34aeec5611b003ce22f8a0005b1cb650c28139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:31:e5:00:f6:1d:5e:0f:ef:d2:36:da:1d:3b:
01:0b:71:f8:ea:ae:50:e8:20:33:e9:d9:6a:44:82:
4a:be:1b:ce:7b:2a:b1:fc:37:6c:77:c0:b1:c5:99:
64:3b:8a:ae:8e:76:b6:63:8e:3c:e6:bf:9e:1a:1b:
18:02:61:86:74:30:e1:31:8a:73:de:03:0d:2e:e5:
f0:be:07:1b:f9:de:11:c3:ef:58:00:5b:13:b3:52:
2d:cf:26:0f:66:b7:1c:58:94:4f:2b:69:e4:86:88:
77:8e:59:d5:20:34:71:f9:ab:e4:ba:ad:3e:e0:86:
37:77:ea:78:4b:a8:07:26:03:f0:3b:15:63:92:9b:
cc:85:43:fe:92:d7:9a:db:c8:dd:20:6e:ac:6c:39:
bf:ed:7a:ad:d0:e3:5d:20:f7:26:d4:0c:ff:25:3e:
cc:8a:83:ca:06:4c:d6:a5:ce:ab:a5:eb:92:43:e8:
60:70:73:83:64:da:0d:3c:5b:e1:0c:68:d3:88:fd:
cb:49:0d:5b:25:bd:bb:ff:5e:3c:d8:b4:a8:52:b0:
98:98:ac:42:cf:35:38:ff:96:91:23:92:c5:6d:cf:
36:81:60:aa:17:d5:fc:1a:82:62:c1:0f:b8:ee:0b:
3f:41:14:9f:76:79:76:3c:66:d0:98:3b:e5:2c:32:
06:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:34:AE:EC:56:11:B0:03:CE:22:F8:A0:00:5B:1C:B6:50:C2:81:39
X509v3 Authority Key Identifier:
keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d7:64:12:62:97:d3:47:ea:a3:c8:26:0a:3c:8f:7b:41:35:
da:28:0d:3d:31:2e:e6:ce:69:21:13:58:f7:3d:d9:a4:15:1d:
aa:41:b3:1d:c8:ef:ae:50:b1:e0:71:a9:4b:4a:c1:2f:ad:36:
03:63:a1:45:c9:cb:33:a1:37:7c:23:9b:98:9f:85:54:fd:be:
49:00:77:b8:cf:50:76:a9:1e:54:cf:33:94:60:7a:0f:48:83:
10:fb:73:6b:dd:f1:c3:46:48:0f:24:4b:ea:86:65:42:30:f2:
a8:e3:db:91:08:c4:74:08:4d:80:7f:ec:f8:5f:c5:b0:d0:82:
2c:e4:e4:43:3c:bb:64:dc:be:05:5d:38:97:28:97:8e:dc:a3:
8c:ba:1f:b2:d1:55:d2:19:94:50:7d:60:a1:26:0a:22:cc:19:
6b:d7:48:75:c3:a7:23:9c:65:4b:e4:77:21:28:53:4b:15:40:
aa:2a:ac:56:7c:e6:6b:0f:c5:5a:bd:16:b9:8a:8a:89:69:0d:
21:a9:30:69:70:5d:2d:95:34:33:36:09:57:3d:c2:e6:27:97:
6f:d1:d4:1f:fb:6d:c7:49:cf:5c:1e:0f:b3:37:7a:f6:91:80:
4c:82:43:50:9f:f6:a1:51:87:6d:45:48:79:d4:9f:fc:0d:15:
f7:0d:8e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:28:35 2025 by rpki-client