Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: zYosMkwYIN8i7pqkz46jMCigB8akVbg7v5I+mf3FVJ0=
Subject key identifier: A8:7E:16:97:96:F4:BC:5C:16:E3:2E:B7:02:27:6D:6E:D3:BA:3C:E8
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 01969DBE542888D18A06EF449C9C05A953FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 00:00:18 +0000
Manifest this update: Mon 05 May 2025 00:00:18 +0000
Manifest next update: Tue 06 May 2025 00:00:18 +0000
Files and hashes: 1: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: ZkOUXhlLX8QrzBeXCIYNzXSEyvB1/0mlOBlF0U35SZg=)
2: c1mJTzKq1m2EBAr92I-nges1Di4.roa (hash: i1n9Y7VZ80hK4Lc1aErif8j8W+hz5/EhhxzfXPDeEMQ=)
3: rvgAs6WmoB_QmrlMgSgm7khV-4U.roa (hash: ByaVeRT7BxyoGgwxavoqH/EHW9rBtmtZSrveuw0KL1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:54:28:88:d1:8a:06:ef:44:9c:9c:05:a9:53:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: May 5 00:00:18 2025 GMT
Not After : May 6 00:00:18 2025 GMT
Subject: CN=a87e169796f4bc5c16e32eb702276d6ed3ba3ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ee:bc:5e:fa:a3:f9:da:34:3b:dc:e1:e2:ea:
b8:27:49:7d:65:f3:31:2c:66:41:dd:0f:07:5e:fe:
c8:c3:3d:17:19:52:79:1a:0b:73:67:af:c9:66:b7:
ae:1b:50:92:c0:67:92:9e:1c:e0:c4:4c:de:36:3e:
89:59:2c:19:84:01:42:7b:01:ce:ca:02:08:2a:6a:
5e:22:75:c3:84:f5:73:6d:37:b3:6b:7e:21:db:c4:
8f:d1:73:87:32:62:50:4c:a0:c2:8e:de:9e:f0:76:
eb:79:0b:56:f8:1d:ca:1e:9e:f2:41:78:0e:9a:d9:
42:32:39:b6:2e:df:00:66:8f:3a:42:d2:26:53:95:
90:e1:77:a2:7c:70:df:d2:85:85:8c:c3:29:20:11:
f8:40:fd:d3:f7:cc:3b:47:c0:29:fb:4c:dd:ca:b4:
3a:7a:b8:ca:44:9b:2c:e7:2a:b4:de:fb:b7:98:cb:
dd:b9:04:a9:8a:5b:a5:f3:92:b4:80:e8:e8:75:c7:
44:6d:78:52:8a:ad:83:32:b7:33:3f:d3:62:c0:18:
f0:72:9d:06:9d:47:a3:85:be:fc:3d:66:4a:b5:62:
fe:dd:dc:7d:a3:00:1b:e6:bf:47:6f:66:ba:fe:5e:
0b:84:a0:0a:f0:79:4b:01:bc:ec:2b:6f:8c:a8:31:
21:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7E:16:97:96:F4:BC:5C:16:E3:2E:B7:02:27:6D:6E:D3:BA:3C:E8
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1f:fb:db:61:d2:d3:c9:33:4b:1a:68:7f:9a:ae:43:99:c8:
b0:f5:22:ac:53:6c:3a:2d:f9:e4:bc:10:f6:28:ea:a0:b7:ad:
9f:28:84:0c:78:ab:e5:c5:aa:26:57:cf:a1:0f:6a:39:a7:c7:
21:ad:8d:4b:3f:f4:23:e0:33:7c:34:94:e7:1d:26:e7:32:27:
17:b1:22:21:e5:8b:26:3a:0c:72:65:7a:0a:6f:70:03:5a:a0:
2e:ea:f1:cc:64:44:5b:a1:b2:a2:68:64:95:a9:19:56:e3:84:
2b:b0:76:6b:6f:fb:44:8a:5d:54:fb:02:d1:98:1f:0f:31:c9:
7d:65:d5:32:35:04:67:93:77:da:9e:55:07:31:71:36:e3:db:
65:83:49:57:08:ed:c1:6c:e7:e0:39:87:37:40:33:b0:ef:b7:
33:b0:b4:40:67:a2:54:eb:6c:31:40:0d:d4:96:dd:56:87:ab:
79:35:5d:dd:b5:57:46:be:3f:f1:77:8e:7f:c7:3b:c9:9f:94:
29:3d:d1:fe:01:a1:89:5d:30:3e:99:5f:ef:83:93:c0:2d:d8:
89:de:9e:11:0f:a2:c2:9d:19:f0:07:4c:42:e6:bd:ab:9b:2e:
0d:2b:26:e8:f0:02:0b:16:9b:f5:57:39:65:ac:3f:4a:e7:70:
c6:e5:c0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:52:39 2025 by rpki-client