Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: Dumd5oJ3/7xcC+7Bw5iktxmdbiDHC+pOz0FvEVThXRM=
Subject key identifier: 14:6E:49:38:EE:DA:F0:43:AE:B1:E8:18:24:36:39:F4:3C:0D:4B:45
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 0196A2AE19DCB2CB288A510849E3512915AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 06BC
Signing time: Mon 05 May 2025 23:00:40 +0000
Manifest this update: Mon 05 May 2025 23:00:40 +0000
Manifest next update: Tue 06 May 2025 23:00:40 +0000
Files and hashes: 1: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: u/LtZaLptR1n/E5zBJwvIjimo2HeY5fxZBqjgA+f62w=)
2: s-6iu0euq8mwctWc84gynbP4Gz8.roa (hash: ix817uYIHKTbd4XoAS5Yf6A1NltjL0SfzgZQTYUowKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ae:19:dc:b2:cb:28:8a:51:08:49:e3:51:29:15:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: May 5 23:00:40 2025 GMT
Not After : May 6 23:00:40 2025 GMT
Subject: CN=146e4938eedaf043aeb1e818243639f43c0d4b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:91:23:af:99:8e:a3:2e:18:53:4a:df:12:dd:
12:82:b5:e8:40:de:eb:d2:d9:19:4d:41:0a:15:de:
a0:53:9d:2f:c7:7a:25:31:0b:d8:b3:8e:85:05:e9:
25:91:4a:05:6f:08:1e:ad:18:28:f9:9b:20:9d:4b:
22:b3:26:f0:48:b2:dc:83:b7:aa:a7:99:15:37:eb:
e5:e5:a8:70:09:26:3f:97:b2:9b:3c:e4:09:45:85:
b6:a3:0c:6a:40:c6:0e:da:b8:dd:e8:82:ef:c5:7f:
11:46:43:a5:eb:57:fb:d2:63:7d:4d:1f:ab:ff:bf:
7a:2f:40:1e:c3:29:42:41:f1:71:a8:36:c4:a1:26:
6e:57:ae:50:67:2d:d1:1c:11:18:ed:c9:4f:d5:27:
23:02:56:78:58:86:7a:cb:82:2b:7e:93:1a:cd:34:
55:c9:e1:c4:1c:d9:f1:e7:88:04:d8:7f:f3:35:97:
e9:f4:1f:cc:db:70:43:8d:5b:34:06:b8:ca:7f:a4:
62:7e:d1:33:32:e6:ea:d8:52:26:74:c1:2a:86:5a:
09:04:8f:17:b7:7e:3f:8b:94:44:34:ab:83:70:e4:
33:53:38:27:87:dd:70:3b:93:04:e0:78:04:16:5a:
07:0c:d0:e8:5e:94:43:9f:d6:d5:62:bf:b1:31:85:
8f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6E:49:38:EE:DA:F0:43:AE:B1:E8:18:24:36:39:F4:3C:0D:4B:45
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2f:1d:56:5d:46:20:db:6e:ef:ae:53:44:cd:04:7f:b3:ce:
bd:31:08:c3:b1:85:a5:1b:52:36:c6:b3:b9:a6:70:ab:14:e3:
32:10:fb:bf:7a:80:8f:02:e3:94:d7:3a:e2:90:c0:2c:20:fa:
20:ec:97:c9:28:e0:82:d4:77:de:2f:25:2d:c1:b5:0e:08:c8:
2c:6f:0d:ef:8f:65:97:12:08:d6:fb:2a:f8:a7:6f:75:25:f2:
37:87:91:2a:7a:f5:4a:71:5c:43:ba:db:a9:bc:0f:ec:4a:e0:
f9:34:08:dc:46:2f:10:4a:22:c8:f2:5e:b7:6d:5d:04:90:f7:
3d:f7:c5:9b:71:12:5f:24:47:c6:74:be:48:67:19:de:3f:ef:
d0:0f:e1:f7:44:0b:37:a7:3f:c8:a6:e3:3f:44:c0:1e:d6:78:
87:6c:e8:48:62:6a:18:32:84:07:6b:74:49:21:11:48:86:75:
fd:3d:67:16:c9:d0:87:2c:23:62:f0:d0:00:41:ed:a1:f9:88:
60:ba:a0:a7:c0:87:82:67:8e:3e:c8:40:43:5e:47:56:3b:d1:
f6:18:b5:f5:cb:5c:f0:b5:45:e4:3e:52:67:f7:fe:6c:7f:6c:
58:e3:25:18:33:d0:3d:64:7a:8b:82:3c:91:df:95:38:73:9f:
6b:09:60:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:25:16 2025 by rpki-client