Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: plDFveiongF9zM/RT9bpwVzch6Wk81tdgmNSV+cNZV8=
Subject key identifier: 4D:AE:5B:07:46:00:1F:B8:E6:D4:45:0E:40:27:C5:5F:FF:58:0C:60
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 0196C1CB30C71F92DB8E3404B025671F5C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 00:00:40 +0000
Manifest this update: Mon 12 May 2025 00:00:40 +0000
Manifest next update: Tue 13 May 2025 00:00:40 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: jiXQ1+EguNSYxvp01FCMQTU2u28B3rdUVXLAAsoVCi0=)
2: 4v0g_DeTqNJGOHL4ln9WhvFfDRU.roa (hash: sBcYkkYKQotMu1+q9bGq7Q8bcGlDCzRATiIZUTpTc8U=)
3: 5hSlWSeMSPQw8CT6h_sMd93nETk.roa (hash: wYDeOrdNcouRFYTYjjyBK+NX7iDJV9WRiz3yP1Z5BdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:30:c7:1f:92:db:8e:34:04:b0:25:67:1f:5c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: May 12 00:00:40 2025 GMT
Not After : May 13 00:00:40 2025 GMT
Subject: CN=4dae5b0746001fb8e6d4450e4027c55fff580c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:b7:fb:df:ab:23:8c:95:d8:ef:52:e9:52:
58:cf:bf:fe:ee:24:9f:e6:72:0e:b2:4e:68:db:10:
13:01:88:85:8a:1f:6a:6a:65:d9:b1:51:fc:06:d4:
75:c4:d9:be:60:40:55:e0:cb:ae:e2:70:a8:93:95:
6a:68:3b:f3:75:a3:5c:0e:49:59:e7:1f:35:59:4c:
97:57:06:39:63:59:ce:fa:f4:82:36:99:d9:83:c4:
01:3c:cc:81:07:91:3c:60:13:e9:a5:61:da:5a:fe:
f4:44:94:c0:f1:7d:11:04:ed:2d:c3:08:9f:9e:93:
5a:d9:81:9c:1e:b0:80:b6:72:60:3d:f2:e5:73:61:
0a:fb:ba:2d:4d:20:2a:3f:ff:ae:3c:f0:84:b3:5e:
d1:a6:2c:4c:c6:8d:7a:f4:1d:8c:f6:ca:c3:99:a8:
87:da:58:a6:cf:e7:22:a9:b0:f9:ba:29:f7:fd:55:
1e:54:64:c3:bf:46:cb:7a:19:2c:f0:41:f9:ec:c4:
5e:49:ad:ae:a9:21:e2:8b:cc:0c:51:be:7d:c4:d8:
f4:21:c0:a2:ef:06:a6:fe:62:67:15:1b:7b:2c:ae:
e9:a7:88:4b:c9:22:ee:bd:83:93:ff:a3:77:00:0d:
9b:5c:ef:32:4f:f4:7c:13:57:82:eb:fb:0b:69:57:
d1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AE:5B:07:46:00:1F:B8:E6:D4:45:0E:40:27:C5:5F:FF:58:0C:60
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:09:33:d5:da:2a:e5:3e:5e:fa:c7:30:b2:b9:9c:54:29:6f:
5d:13:54:65:62:40:83:c4:c5:4e:9d:0c:ae:80:d3:ad:f0:20:
37:72:d7:6d:3e:5c:88:e8:f8:0f:47:f3:48:d2:75:75:4b:9c:
b3:09:19:40:60:a6:8b:09:f8:f4:69:b5:16:61:3b:4e:7e:06:
2e:8e:0a:21:f1:42:5d:b6:04:8f:d0:67:01:88:77:ba:9c:f7:
12:4c:4e:5f:e3:04:b9:bc:15:e2:c8:28:5f:b2:15:af:3a:86:
33:6f:e1:19:0a:e3:e6:61:8b:1f:56:7e:15:e6:62:cd:98:8d:
cb:89:d9:62:52:77:41:78:3c:80:32:7f:b4:f0:cd:0f:6b:3d:
46:fc:b6:f0:05:59:ec:8b:4d:9a:9e:6f:44:07:46:c3:9a:bd:
aa:c6:a0:7b:96:91:d0:7d:26:ba:83:b4:36:3b:1c:77:61:ee:
7f:9f:00:af:9e:fb:94:8e:d4:31:9b:c9:55:49:b0:9f:90:99:
72:20:9d:c6:7e:d0:a8:5b:ac:22:06:6c:25:80:04:72:74:31:
c4:b3:fd:90:b1:38:95:c2:38:f2:15:20:87:bd:8b:7a:d9:2d:
32:7e:b0:e0:73:97:21:14:3e:73:ad:bd:a8:70:13:ad:56:99:
f2:d1:f0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:42:22 2025 by rpki-client