Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
File: SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft (raw, json)
Hash identifier: rxfrbbOayvBjaqP2hN7pMRlhwNw/3VZznpRBlAMOahs=
Subject key identifier: A1:DF:B5:C2:CD:C8:40:68:93:C3:EB:DE:E8:25:2B:78:47:FF:26:21
Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Certificate issuer: /CN=490db999ca4ce287c5c92ab167a500902259bb05
Certificate serial: 0196AF1FE8D6382C055A04A6BA4D66122166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 09:00:26 +0000
Manifest this update: Thu 08 May 2025 09:00:26 +0000
Manifest next update: Fri 09 May 2025 09:00:26 +0000
Files and hashes: 1: CqiCeQuNX5qYQWUphyM9iUBKOh4.roa (hash: RxNADbHHkDaXqyxPAae3UN8wvqfkoDaWlyxd0mzE4zw=)
2: SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl (hash: xj0b+TWitNLZq2PnoD1/0Yp+UZ+1kzgVctT+S6zCh3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:1f:e8:d6:38:2c:05:5a:04:a6:ba:4d:66:12:21:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05
Validity
Not Before: May 8 09:00:26 2025 GMT
Not After : May 9 09:00:26 2025 GMT
Subject: CN=a1dfb5c2cdc8406893c3ebdee8252b7847ff2621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:93:b6:78:84:db:ae:cf:46:8c:f5:dd:6c:9d:
68:40:28:1a:f3:f0:7c:49:dc:67:b4:48:95:89:a4:
01:f8:08:39:79:03:c8:a5:19:2a:45:34:95:e5:57:
9b:bb:89:a1:e8:3d:6c:d6:35:c7:d0:cc:5c:6e:29:
66:13:9a:2a:be:9f:3c:59:25:e5:17:55:af:b3:01:
35:38:b2:06:b0:9b:c9:c3:a8:80:0e:de:ca:ba:e2:
4b:62:db:68:5c:9e:0a:27:bf:da:98:06:a8:d2:0e:
13:39:1c:cb:48:60:7d:ea:ae:ae:ea:50:c1:8d:0a:
9c:0b:46:b4:3d:a1:c4:fa:9e:93:ed:34:80:2a:48:
26:13:05:10:64:8d:6f:9e:54:4e:c2:1f:6e:3a:ae:
ec:01:f0:21:0e:76:41:41:96:d6:7e:d9:73:ca:c3:
1a:7d:bc:2c:12:fb:87:34:a0:65:e2:c9:26:d1:c2:
e2:3c:d8:ed:56:ef:77:05:5c:28:34:d5:ed:8f:97:
a4:e5:2e:f9:82:70:49:8d:8f:33:8f:a4:0c:31:d0:
e2:fc:7a:e6:3c:17:48:7d:aa:e3:ae:34:59:dd:c3:
f8:97:c4:f8:3e:a9:03:e1:4f:90:80:d8:b5:39:df:
43:0c:17:70:7c:61:a1:f8:6e:f6:54:54:33:14:34:
54:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DF:B5:C2:CD:C8:40:68:93:C3:EB:DE:E8:25:2B:78:47:FF:26:21
X509v3 Authority Key Identifier:
keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:bd:09:cb:48:d3:77:82:22:48:e2:7f:5f:07:c7:9a:f1:ac:
b5:2e:3c:7e:24:08:3e:d4:15:ea:90:47:e5:7a:4e:00:6c:0e:
ff:f5:d8:86:dd:3e:93:be:1f:00:c1:2d:06:9a:6b:44:7d:5b:
0b:04:f4:fb:77:8b:2a:f5:1f:43:ef:4f:38:85:e3:93:33:56:
f3:2d:0c:2e:cd:ad:2a:34:8c:2f:bc:a9:0b:83:01:62:50:61:
3c:9a:bc:e4:9e:cc:26:a6:ce:49:3d:57:eb:de:68:c5:a8:55:
d1:51:54:f8:29:00:aa:b8:8b:f9:4d:8a:e3:a9:e3:57:2e:8d:
3a:27:20:90:ce:e8:8c:44:bb:68:e4:95:6e:6b:39:8a:28:d7:
e4:3d:2b:03:d3:06:b6:e1:26:c4:4f:0a:bc:25:98:d4:6b:7b:
d3:50:ef:9b:f1:4c:e2:b3:e7:07:16:03:bd:4a:a5:2e:1d:d0:
30:40:02:07:ba:6e:0e:b1:2d:ed:06:6d:c1:ff:3e:32:6d:d0:
91:47:c6:34:90:00:dd:ed:28:4b:7c:65:8e:d4:3b:a9:82:1d:
14:5c:77:b9:d9:15:d1:2f:88:26:bc:fb:d5:12:fd:18:dd:4f:
7f:0a:13:72:01:45:7d:4b:f3:19:b0:10:f6:d2:7e:b1:4e:e6:
76:16:04:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:43:50 2025 by rpki-client