Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: 3Yiyhqj3lar6hFEB/0tPyA88Dc71tSPyf+pn3mmFpOg=
Subject key identifier: 4A:DE:DA:01:F3:78:85:46:83:DF:2F:57:D9:B1:65:FD:76:DC:06:35
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 0196C539DED2EBF8D673B841CEDAE4D1D0EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 03E1
Signing time: Mon 12 May 2025 16:00:26 +0000
Manifest this update: Mon 12 May 2025 16:00:26 +0000
Manifest next update: Tue 13 May 2025 16:00:26 +0000
Files and hashes: 1: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: hio0cKIDOznlJziR6+czY1DK6WFyw00o740LnZwirVw=)
2: YjwHZ-U8mcXCH0aU6JQJG4PEKkA.roa (hash: AnaRhDa+1cCeJd4R7WSfA8EHeNFUa2CX4p8vAAGKzHM=)
3: ZSjK1k03bVh7IszUUplOg1a3fhc.roa (hash: ur9lsl4V/e4ObtEPnWIBtt1dkjYzJgol0eBWTC8If5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:39:de:d2:eb:f8:d6:73:b8:41:ce:da:e4:d1:d0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: May 12 16:00:26 2025 GMT
Not After : May 13 16:00:26 2025 GMT
Subject: CN=4adeda01f378854683df2f57d9b165fd76dc0635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:6c:4b:ea:63:f8:3c:6a:44:9c:65:18:a0:
b9:cf:79:32:29:04:eb:8c:1c:ae:c7:7f:23:eb:bf:
6c:70:1c:98:1d:50:0b:7d:d3:38:67:3f:4f:41:e6:
3d:bd:69:9c:aa:fd:75:a4:5f:4c:0c:c9:a0:6c:b3:
89:3b:66:5d:d0:90:e9:74:59:6e:16:f0:aa:7f:cf:
b1:96:a6:36:83:99:f1:76:07:46:26:3a:b2:bc:28:
32:f7:92:e0:72:49:bd:dd:a5:14:b9:e9:6d:11:c8:
58:f7:e4:40:6e:e9:79:e8:d4:f4:59:93:41:42:24:
7a:9b:49:9c:01:0e:a5:9c:b6:88:12:53:9e:eb:0f:
8f:b2:45:39:b6:36:29:6a:65:17:5c:0d:9a:4a:eb:
cd:2c:27:b9:57:5e:98:7b:0a:cc:cf:52:a4:f7:66:
ec:97:8c:55:e6:7b:a8:87:77:2f:6b:59:a9:a4:7c:
bd:3d:15:8e:32:54:d2:da:f1:18:c9:82:7c:24:8f:
71:25:e6:61:06:f7:39:c2:46:79:17:cf:b4:03:1d:
e0:8d:d8:e1:77:3d:71:b4:4c:a9:2b:86:39:1d:0e:
65:02:47:15:99:f8:82:d0:62:aa:9a:8c:1e:e6:6e:
e1:fe:33:54:5f:13:e9:1e:4a:09:a5:11:b9:6d:20:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DE:DA:01:F3:78:85:46:83:DF:2F:57:D9:B1:65:FD:76:DC:06:35
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d7:02:d0:7e:48:40:0a:1e:ae:f0:2d:fd:c6:1e:58:b9:4e:
5f:0e:9a:27:63:74:1c:97:8c:d7:46:24:02:75:e4:ba:70:32:
c3:77:de:cb:e2:a2:e2:6b:0e:05:89:75:93:cd:fc:f7:f9:d4:
c4:63:fc:70:a2:df:98:3b:80:88:94:20:18:8e:2e:60:05:c6:
96:69:f2:19:68:f0:31:0f:61:37:69:8c:54:76:c3:f2:25:af:
00:97:51:65:68:65:95:56:1c:af:22:de:30:0c:c6:b5:36:3b:
1a:73:a1:01:1d:8a:d8:cd:0d:e3:9d:14:18:59:32:34:7a:f8:
70:07:50:74:6f:8e:3c:f0:16:91:54:fe:58:60:7b:60:5d:3a:
08:ea:c0:a2:03:61:4a:01:d6:27:88:92:1a:5c:a6:6b:f5:a6:
56:31:c1:af:fd:f5:a9:16:5e:e9:56:d0:24:ff:fc:f1:42:13:
a6:52:8f:80:2a:ce:66:ed:3f:23:34:75:49:05:a2:11:7d:35:
dc:60:ae:28:41:44:3a:94:5b:d2:13:09:be:93:6c:a1:52:f1:
80:0d:8e:c8:66:8b:d8:7e:87:23:6d:d7:aa:5c:b5:3f:85:1e:
0e:5f:d0:cf:32:df:a0:63:ab:2f:39:ef:52:17:fc:d2:4e:0b:
1d:51:28:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:18:45 2025 by rpki-client