Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
File: q3ukNXZmdmStbymmZicOM1eDbxo.mft (raw, json)
Hash identifier: NCqW930q1cvWbdmH1ZpW0Se/av4oMkOLMzi4N7ys7Sk=
Subject key identifier: 1A:67:A8:4B:7D:A5:03:38:3E:E4:7F:0E:08:BE:1C:F1:BD:55:57:D7
Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a
Certificate serial: 0196B8912AD44A22B055414D9E6F90885025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 05:00:43 +0000
Manifest this update: Sat 10 May 2025 05:00:43 +0000
Manifest next update: Sun 11 May 2025 05:00:43 +0000
Files and hashes: 1: q3ukNXZmdmStbymmZicOM1eDbxo.crl (hash: e6l3HS+fz3UqoG7+HonGQc15gLUd5U+TnIg4giku5bY=)
2: rFtQ52vnm-Gf2JN4L6yb0DTiUgw.roa (hash: U6PLdhl9fIkfcENijAv37MSFDTY2VRfS2bCNJb0dRIc=)
3: z4h6VOta7nlktuKCkK1-Zw-1S8Q.roa (hash: XA8aL+R7cIm6KIZ8pt2+mp6cPL138KkhjyZFmjM+7SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:2a:d4:4a:22:b0:55:41:4d:9e:6f:90:88:50:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a
Validity
Not Before: May 10 05:00:43 2025 GMT
Not After : May 11 05:00:43 2025 GMT
Subject: CN=1a67a84b7da503383ee47f0e08be1cf1bd5557d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:26:e8:90:0a:47:48:96:32:fc:4a:4e:17:
9b:d3:98:8d:1b:95:b3:42:d6:30:cd:ce:7f:d9:9f:
a1:02:9c:1e:31:f9:40:b9:e6:f9:0c:70:84:5c:94:
f6:b1:bd:21:f0:26:9d:02:ae:81:38:9a:56:2c:3c:
ce:55:0b:7e:45:89:e7:a3:34:fd:cf:23:6a:28:a4:
82:4b:9a:f3:39:54:bc:60:df:e4:b1:67:11:5b:07:
6e:e6:61:70:c0:f2:c3:6e:fa:3a:11:4f:50:85:85:
66:8d:01:d7:ca:a1:d7:e3:c5:c4:43:bd:b7:06:ab:
0a:6d:e2:37:31:20:bd:14:40:02:98:2c:89:82:3a:
25:5a:ba:d9:b7:a1:67:a5:ca:87:25:dd:a1:87:1b:
66:0d:71:1f:58:0b:f3:16:a9:9e:f7:11:3e:8b:54:
7d:73:07:cc:36:59:bd:55:de:95:44:97:c5:27:de:
fb:57:ec:cc:c0:25:d3:1f:c2:ad:80:56:04:d9:b7:
df:74:66:6c:34:11:e5:b1:3d:40:ec:2d:97:f3:a0:
63:e5:21:fc:37:4e:28:ec:c1:ce:8b:77:fc:3b:51:
7a:ed:db:80:75:e3:d7:b2:53:ad:3c:f7:d4:01:18:
c8:dd:82:e0:7e:b8:07:2d:43:ee:11:87:c5:c5:80:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:67:A8:4B:7D:A5:03:38:3E:E4:7F:0E:08:BE:1C:F1:BD:55:57:D7
X509v3 Authority Key Identifier:
keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0a:1c:7c:4e:79:e1:09:4a:71:69:b0:c2:75:d9:d8:f4:48:
60:42:fd:ba:e1:6e:25:76:61:ab:45:33:0d:81:bf:2e:25:35:
42:8a:ee:b5:c2:b3:02:95:62:84:7a:12:4d:c0:9f:0e:af:af:
47:3f:eb:ff:5f:14:dd:d8:1a:34:50:3b:99:b0:c2:de:08:f2:
ab:7c:30:6a:68:fb:44:99:3b:38:1d:57:ba:2e:39:14:76:e8:
79:1a:cb:e2:eb:a0:ce:0a:7f:82:67:e2:7e:e6:d8:a9:ca:80:
c3:70:b3:3c:1d:bf:4e:24:db:7a:10:a2:c4:41:30:f0:76:0f:
ca:6f:db:60:54:d1:58:8d:b5:1c:d4:4c:fb:d8:26:2f:dd:cf:
23:3f:cd:70:b5:71:d4:1e:a0:ca:9b:68:93:47:b9:43:9b:47:
ee:ff:f6:72:78:b6:56:b2:e5:80:bf:7e:9c:10:d0:3b:4e:6d:
5a:b5:f3:f1:13:1d:a8:7f:30:22:20:c5:04:d9:14:13:24:78:
83:8b:1b:ad:a0:72:f5:ad:29:3f:1b:81:8b:55:2c:d7:7a:e5:
8f:f9:33:23:09:43:91:24:99:58:a2:86:8e:32:ac:3d:06:67:
3b:0a:79:ff:06:72:66:c5:64:88:1f:e5:f1:2d:5c:29:98:a1:
f9:4b:c2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:09:47 2025 by rpki-client