Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
File: Q-ZRNoOGaONd1VLvDCH76avtE5s.mft (raw, json)
Hash identifier: gUE8GZKeLAKLi+3pIM5p3uJx4RgNE+Q0mc+MHGoM0Fg=
Subject key identifier: 08:0A:FD:87:F6:CC:DC:76:A1:EB:38:82:CB:B1:10:65:3B:F5:2E:53
Authority key identifier: 43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
Certificate issuer: /CN=43e65136838668e35dd552ef0c21fbe9abed139b
Certificate serial: 0196D2509E57DFB10D88BAD4EF1D6F9F0AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
Manifest number: 0119
Signing time: Thu 15 May 2025 05:00:20 +0000
Manifest this update: Thu 15 May 2025 05:00:20 +0000
Manifest next update: Fri 16 May 2025 05:00:20 +0000
Files and hashes: 1: Q-ZRNoOGaONd1VLvDCH76avtE5s.crl (hash: RbWM0v59XRF9CpNG/l9z3h353/nOCKHqOgdE4t0vgVE=)
2: aIJd5q5n1BMhAvDcaHy6hyORixY.roa (hash: g4oLD9R9gouTz6cg2k+J0gSsSi5IKrB+jtKfUgG2zS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:50:9e:57:df:b1:0d:88:ba:d4:ef:1d:6f:9f:0a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e65136838668e35dd552ef0c21fbe9abed139b
Validity
Not Before: May 15 05:00:20 2025 GMT
Not After : May 16 05:00:20 2025 GMT
Subject: CN=080afd87f6ccdc76a1eb3882cbb110653bf52e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:3e:80:83:22:63:9e:f3:bb:bf:3b:6e:2a:
46:7c:e0:96:f6:dd:55:35:5c:1a:3a:d4:37:55:b4:
40:0d:88:55:52:4e:d2:d9:20:2b:f3:bf:9f:bb:b2:
a8:85:ab:65:c0:28:cb:79:d1:da:99:29:f9:7c:53:
f0:f3:f4:53:2b:b9:84:43:f0:38:9e:ce:6f:24:98:
9f:bc:d3:3e:f0:7d:4b:16:27:d1:0b:56:7e:0b:8d:
c7:b5:23:6a:10:95:9e:bb:a1:03:41:4c:ac:73:df:
4f:15:2c:c3:a7:76:63:ec:67:9a:76:de:66:86:09:
f0:4f:7d:b6:8a:28:73:2d:15:7a:8e:09:5c:8e:d1:
a6:86:97:59:9b:90:37:fa:3a:b3:0e:46:15:68:c5:
a6:30:69:0a:e7:fc:e9:35:65:76:db:3d:46:c1:74:
7e:a0:ec:87:06:69:3f:48:91:d2:4f:94:8c:7a:ae:
5e:20:a8:3a:36:cc:c9:3e:8a:e3:53:50:90:53:c1:
ba:75:28:37:bd:8d:3f:25:65:16:f3:07:ae:79:8b:
c1:68:bb:85:ea:5a:0b:bf:74:39:51:da:fb:41:1e:
3a:d0:2e:af:89:67:6b:26:26:21:d5:1c:b0:6b:51:
ea:32:29:b0:5c:77:ab:0a:75:69:42:19:73:33:d7:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0A:FD:87:F6:CC:DC:76:A1:EB:38:82:CB:B1:10:65:3B:F5:2E:53
X509v3 Authority Key Identifier:
keyid:43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9c:b7:22:52:9a:8a:96:71:f4:06:17:cc:44:12:65:3a:5c:
da:3f:41:6e:6c:82:32:09:1c:cb:28:d9:dd:66:fc:0a:9d:94:
d8:2f:23:ec:d2:27:e3:1f:46:a9:1b:b4:ce:37:8e:87:e5:15:
b5:ff:a2:59:eb:b7:14:95:24:c3:8f:e6:01:bd:40:66:59:07:
0a:dd:a4:9b:dd:9e:10:83:ab:e3:1d:ff:49:f2:c4:6d:38:a9:
5a:0b:97:46:bf:d8:f6:f7:07:50:75:66:47:1e:33:b7:e2:c1:
66:37:14:8c:ac:74:f3:70:e5:37:4b:4d:4b:29:17:3a:b3:66:
83:d1:8c:73:db:7e:a4:b5:07:06:77:ca:e5:46:3f:ad:f6:11:
05:9c:4a:3f:91:ed:f9:43:7d:f5:64:c7:58:66:e6:49:67:ca:
26:33:ee:52:e1:cb:36:51:3f:1f:ca:76:6a:36:2b:6b:d2:31:
9d:5b:ca:b6:ef:d4:ce:d2:e2:f7:be:2e:05:b1:78:9e:12:5d:
5b:e9:9a:ba:ab:98:a1:05:25:43:de:a9:fb:0b:24:54:7a:ed:
66:69:84:c1:0d:55:fd:0e:0e:f9:0e:e4:e1:c2:35:01:e8:43:
a0:d5:97:49:10:4a:f3:72:e5:5b:92:2d:a6:ea:43:05:bf:01:
2e:e0:34:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 10:26:10 2025 by rpki-client