Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
File: QWkOI5DpC72N5AIYrSIeCTvM7L8.mft (raw, json)
Hash identifier: U1V1AsyTzYfnwmkU4cR4/OFpbypj6YLjrbkRGG2/Txc=
Subject key identifier: 5E:FB:3C:AB:FD:2E:F3:F9:FB:73:A1:A3:8C:2A:33:B0:77:E8:5A:C3
Authority key identifier: 41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
Certificate issuer: /CN=41690e2390e90bbd8de40218ad221e093bccecbf
Certificate serial: 0196BFA57526E05D1166ECB1EE7034F78C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 14:00:13 +0000
Manifest this update: Sun 11 May 2025 14:00:13 +0000
Manifest next update: Mon 12 May 2025 14:00:13 +0000
Files and hashes: 1: QWkOI5DpC72N5AIYrSIeCTvM7L8.crl (hash: sz4wjEdokG5BU59LqYr6wOuCMEW5lpbs6FOWk6AOYSg=)
2: nsNEVxRNRAqK4M0HqDeGc01kd4k.roa (hash: u9cSwFwr5XiNLEjBeMMlXHN1pLGlDX3Y3bL8f/eEp3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:75:26:e0:5d:11:66:ec:b1:ee:70:34:f7:8c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41690e2390e90bbd8de40218ad221e093bccecbf
Validity
Not Before: May 11 14:00:13 2025 GMT
Not After : May 12 14:00:13 2025 GMT
Subject: CN=5efb3cabfd2ef3f9fb73a1a38c2a33b077e85ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:e2:b0:ce:0e:d4:e2:79:22:9d:cf:b4:28:
67:fa:c3:26:14:8a:e6:6e:ef:70:9e:b3:9c:41:e2:
89:0b:e4:6d:6f:4f:64:8c:2a:f0:f0:a5:d5:aa:4f:
5f:f2:f5:03:a2:05:b5:df:8c:eb:73:e6:c7:94:5b:
ff:fa:f0:02:e1:1b:78:03:77:51:ca:82:bd:3b:19:
2c:74:2b:39:35:09:b4:0d:74:0f:29:9c:26:63:0b:
0e:b9:93:7f:aa:e4:9d:00:28:c7:0e:a3:d5:c0:fa:
8b:42:db:64:dd:db:70:49:fb:29:cc:5e:24:66:d9:
2b:8e:a6:e0:83:22:78:7d:e1:49:9a:30:31:a1:9e:
d7:c5:9a:e7:9e:a3:38:ca:f6:aa:18:b8:da:9e:0c:
0c:fe:56:ae:74:9a:27:75:de:63:00:b2:ea:bf:fa:
9a:1e:04:8f:33:85:ed:b0:79:d4:49:5d:0f:86:01:
3e:eb:91:e7:76:f5:e1:82:89:31:55:94:c7:68:e9:
5e:a2:ba:5d:11:ed:74:ab:f1:54:90:3f:6e:0a:d1:
e1:e5:a2:c6:88:2b:f3:9f:b2:a3:b6:3c:a6:44:90:
a9:22:10:89:1b:89:e2:76:35:c0:c3:ea:fe:2b:52:
6b:2d:db:db:cc:da:6c:fe:a8:66:88:8c:8d:23:82:
12:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FB:3C:AB:FD:2E:F3:F9:FB:73:A1:A3:8C:2A:33:B0:77:E8:5A:C3
X509v3 Authority Key Identifier:
keyid:41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1c:80:cf:ce:ff:b1:cd:da:ae:1c:c1:49:8c:d1:b4:cc:30:
ed:8a:7b:c9:d3:63:7b:90:91:3b:b2:71:7f:d2:32:4a:31:83:
90:36:8f:81:b2:4f:ea:db:9d:9e:64:de:61:37:27:59:28:63:
60:ce:b4:bd:a2:cd:a2:77:a1:83:f7:66:29:a1:30:f7:b0:e4:
7c:b1:12:2e:88:14:f0:e4:ff:ad:ac:7d:9d:2b:50:69:e4:ee:
75:1d:c3:5e:8d:75:9b:de:18:f1:20:2f:da:36:c4:3d:18:2f:
05:d1:b4:6b:eb:24:49:79:b1:4a:6c:9f:9c:49:07:bf:c4:f3:
26:89:f8:8b:35:e7:b5:7f:7d:5d:90:5f:8b:3e:18:8f:a6:65:
a1:45:b6:d7:38:cf:6f:f8:43:25:b3:e6:20:ab:b7:67:65:58:
b9:2c:bb:82:02:38:49:fc:26:e3:31:e6:d9:6d:f6:78:87:90:
77:9c:2c:8e:e6:60:e6:85:ec:9e:5d:d6:e8:ab:85:46:99:69:
b5:91:65:d4:a3:73:a1:0b:7a:f8:c3:df:49:df:b8:77:77:a8:
40:c3:e7:15:38:15:2c:80:41:d5:d3:4a:02:05:8b:50:0b:3f:
12:44:03:2a:08:22:e8:61:e4:fd:66:7c:dd:17:b0:74:21:05:
24:b9:9e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:13:04 2025 by rpki-client