Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
File: pQHIn0SCnHLyqVPSorpK4Le1DYo.mft (raw, json)
Hash identifier: BQKjutSM4MQQA/VW6xGV29fbnXB4AJoI30rEHPwBsoM=
Subject key identifier: 7C:19:8E:A8:BC:7C:CB:AF:52:9A:38:BD:8A:0C:A8:F6:60:66:EB:B5
Authority key identifier: A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
Certificate issuer: /CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Certificate serial: 0196B47D4C90131FF5DBA9BDAD4CFEC3E223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
Manifest number: 1531
Signing time: Fri 09 May 2025 10:00:32 +0000
Manifest this update: Fri 09 May 2025 10:00:32 +0000
Manifest next update: Sat 10 May 2025 10:00:32 +0000
Files and hashes: 1: D5U1j0YPEDas8bxMtDOehRJb48U.roa (hash: AkMtfy33YmmtJG2wcdM/0Qvh01UPoaXKoDXm68LNuus=)
2: pQHIn0SCnHLyqVPSorpK4Le1DYo.crl (hash: xBYRvmUf/QHhsqL6PikxMz0a4F9kWZRoRGfAcw/SSTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:7d:4c:90:13:1f:f5:db:a9:bd:ad:4c:fe:c3:e2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Validity
Not Before: May 9 10:00:32 2025 GMT
Not After : May 10 10:00:32 2025 GMT
Subject: CN=7c198ea8bc7ccbaf529a38bd8a0ca8f66066ebb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:1d:d0:00:ab:c8:2f:80:e6:50:9c:e0:00:
a8:22:bf:bf:75:c3:3a:f4:51:a9:9d:08:66:92:c7:
7a:29:87:78:f1:c6:69:65:8e:15:8d:81:b5:11:d0:
f5:69:52:de:93:66:67:09:b8:c3:2a:85:6c:c9:ed:
41:94:e3:f7:c8:6c:ab:86:d4:a5:65:ee:b8:9e:fd:
75:2c:83:0c:89:34:cd:e3:05:6b:21:82:cf:83:59:
f8:02:af:79:13:14:2b:32:d5:91:79:b4:4a:b8:64:
cf:1c:4f:c6:35:35:81:03:4e:bd:d1:04:12:56:28:
a8:aa:4d:8c:ed:61:7f:fd:cc:ca:54:91:47:4a:e9:
36:08:6e:cb:5e:91:fc:c2:39:5e:64:12:b2:26:79:
85:80:7b:cf:f8:c8:0f:0c:d3:c0:5a:5f:92:80:41:
c4:dc:d1:c3:b8:5f:75:ad:63:62:51:59:cb:49:a5:
7e:b9:4e:69:69:3f:87:44:2f:4f:45:df:53:04:39:
7a:d6:41:5d:ac:9e:af:f1:e7:c1:0c:92:df:d5:29:
26:e4:61:24:69:a8:31:93:9f:e9:d0:19:0c:b4:9c:
67:9f:3d:78:b5:ed:90:28:c0:2d:54:8e:c9:04:0d:
b6:df:1d:5a:5e:72:5c:a3:11:14:f5:7c:29:a4:52:
30:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:19:8E:A8:BC:7C:CB:AF:52:9A:38:BD:8A:0C:A8:F6:60:66:EB:B5
X509v3 Authority Key Identifier:
keyid:A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:47:62:47:81:8c:e9:a9:18:99:e6:91:77:02:93:50:73:53:
67:85:8c:ae:89:d1:e3:77:91:25:e5:bd:0e:b3:12:0c:b4:9a:
05:ad:69:6f:77:00:6e:51:0f:c4:c5:f2:82:7f:fc:00:54:9d:
e1:e9:ad:28:28:3b:a3:53:d6:00:40:15:20:21:9a:af:b4:2e:
96:64:d7:bf:b5:72:65:e7:f5:26:56:27:21:ff:d5:94:36:e6:
9f:ad:7a:b7:20:bf:04:e9:ac:52:dc:76:62:74:50:3c:e6:3f:
9e:be:d5:58:58:6c:be:66:af:d9:6c:df:95:1c:c0:1c:9c:36:
cf:33:6e:4e:3e:e8:f2:2d:71:91:35:09:e7:c4:eb:cd:22:90:
46:ef:e7:7c:fc:f0:ea:a3:e0:2c:44:b8:dd:11:96:3a:ea:ed:
2e:a1:cc:32:70:ae:c6:26:e9:02:b1:16:c4:58:0f:04:65:61:
62:4c:be:6f:11:b3:4b:ae:d0:9b:77:1e:ec:68:7b:a7:63:cc:
c0:7a:94:8e:47:9f:09:cf:9e:8d:99:d5:b1:30:25:08:30:9b:
85:09:b8:6b:97:31:41:09:8f:b0:64:7f:e1:cd:ee:7f:f4:2e:
87:2a:9b:78:96:78:6b:ca:85:5c:79:df:04:03:ee:d1:ac:65:
de:cb:dc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:40:49 2025 by rpki-client