Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
File: se1mdqhXWQtjZbdsVYDXD8qNuqY.mft (raw, json)
Hash identifier: Nn3QsjDLnTUCF8NzAWhG6BvvL2SVUo9CZ2nzF0it4UE=
Subject key identifier: C3:50:A3:4D:CF:D4:39:78:DF:8A:AB:70:55:29:86:00:54:44:C8:66
Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
Certificate issuer: /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Certificate serial: 01969ED13F0142A399AD44CBBE47357977DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
Manifest number: 0A7F
Signing time: Mon 05 May 2025 05:00:35 +0000
Manifest this update: Mon 05 May 2025 05:00:35 +0000
Manifest next update: Tue 06 May 2025 05:00:35 +0000
Files and hashes: 1: BSc7Lfy8S9yDC-G_k8JPIbogXL8.roa (hash: VQaRc62T55aNNoJmxuELOMwkOtgTlKfCtu9D4IVulL4=)
2: se1mdqhXWQtjZbdsVYDXD8qNuqY.crl (hash: OrHCaaDmzBLlqD87/3i2igM/y1gQLKXBJy5RRqFjSqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:3f:01:42:a3:99:ad:44:cb:be:47:35:79:77:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Validity
Not Before: May 5 05:00:35 2025 GMT
Not After : May 6 05:00:35 2025 GMT
Subject: CN=c350a34dcfd43978df8aab70552986005444c866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8f:7e:3f:d4:c9:c9:f3:c8:f5:7a:c2:74:fa:
40:31:a3:72:3a:86:e7:db:d2:c2:ad:cd:93:44:7e:
11:95:e8:95:23:13:9b:84:92:ab:4b:01:3c:27:80:
11:28:9f:37:06:83:4d:96:bc:09:6e:ba:ef:18:c9:
1e:a5:2b:5a:60:6b:e4:62:b6:97:ce:4d:22:38:49:
ea:51:82:d8:ef:d0:dc:ff:e6:dd:ed:1e:a4:d2:3d:
f6:65:7a:1a:50:6e:11:15:e3:ee:82:26:6b:66:c7:
d4:5d:37:fe:dd:7f:93:07:86:a1:fe:2e:b7:82:55:
98:a3:e8:03:fa:70:8e:8e:e5:eb:48:70:8b:b6:52:
ff:d1:3d:64:ff:df:27:7f:02:b5:72:0f:29:97:0e:
a3:39:19:61:d6:57:ee:17:c1:da:6d:65:24:e4:4c:
c2:cb:22:d1:69:c2:7f:bc:bb:b6:33:31:5d:97:f1:
a5:2f:be:99:9b:54:aa:69:17:18:1a:da:8a:ae:c9:
7e:40:ca:a8:0d:7d:e8:ae:c8:e2:3a:b0:02:31:5a:
05:f1:aa:28:7f:6a:d1:8a:97:f5:a6:a1:50:d7:1d:
7c:dc:a1:0e:fc:d1:e7:b6:b9:31:cd:25:2d:bd:40:
60:66:f9:e5:0f:3c:b2:34:71:9b:dd:04:d8:40:70:
99:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:50:A3:4D:CF:D4:39:78:DF:8A:AB:70:55:29:86:00:54:44:C8:66
X509v3 Authority Key Identifier:
keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:36:73:76:1c:76:fe:50:75:c2:51:52:15:90:98:ce:9d:02:
5e:d0:c1:6f:70:25:6b:65:93:b9:b7:eb:83:91:83:d4:bf:5c:
ee:d7:d1:9a:18:e5:91:db:7b:17:8d:9a:00:a7:84:e1:6b:51:
17:ad:e6:0e:be:49:7e:62:c6:60:76:5c:65:54:d7:db:21:e6:
07:73:1f:fb:1a:39:68:ba:62:8e:fd:7a:80:c2:a8:70:3d:98:
60:de:4d:9e:f4:fd:58:26:df:64:da:38:3c:9a:dc:bd:bf:fb:
3f:81:b9:ad:30:eb:ef:a3:19:46:16:db:2a:b8:1a:e3:47:28:
6d:b4:c8:b9:01:73:5b:48:24:3d:55:33:2c:12:e0:16:a5:19:
cd:e4:d6:08:96:0d:87:9c:1e:e9:d2:9e:a8:8c:a2:0b:41:1c:
e4:50:5b:95:11:3d:9a:8b:bc:10:5f:d9:25:ce:c8:f6:9b:ae:
06:d0:f1:32:20:fe:77:c8:0f:d2:7d:a4:97:2a:56:ef:df:a8:
aa:41:69:01:0d:91:89:76:0d:5c:e9:72:a3:d3:e0:ee:fe:30:
32:60:bf:62:9b:19:64:b4:4c:d4:c6:06:37:f7:c5:86:2d:f7:
52:ca:d4:6c:5b:f1:09:c0:45:61:96:33:5c:74:0a:9c:0f:4a:
3b:34:94:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:18:57 2025 by rpki-client