Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: 5OqijobNVNIS6IgyonLKRWf0MZp0aShebCrCuxcggow=
Subject key identifier: 82:AD:EA:C0:91:AD:E5:18:90:D8:8C:1F:45:8D:82:A9:8A:FC:F1:A9
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 0196C26FCD260159FB810C5E5849A2011C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 03:00:28 +0000
Manifest this update: Mon 12 May 2025 03:00:28 +0000
Manifest next update: Tue 13 May 2025 03:00:28 +0000
Files and hashes: 1: 3wDf96BAjCwHPGLFXHfr6FPj5tk.roa (hash: n76aMPDVHHg0+waIaYLD5Tllb242OUUWngTT/Znka38=)
2: Crd7C8SVck2OIDtSkQeAyuMLu6I.roa (hash: wscKj8/Aoswv3PHZoE2nGYXdRz4QSyUb5GTz6Q8fmgM=)
3: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: dFw5yfCcc/0p53coj5t4MbyaSyRdFjZpaUwlyuVfuLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:cd:26:01:59:fb:81:0c:5e:58:49:a2:01:1c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: May 12 03:00:28 2025 GMT
Not After : May 13 03:00:28 2025 GMT
Subject: CN=82adeac091ade51890d88c1f458d82a98afcf1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:32:98:bd:78:6d:a5:9e:c2:5a:aa:b1:73:
67:95:4f:73:4f:d8:96:dc:86:6d:bd:42:43:f9:fe:
4d:db:c6:cc:9e:2c:fd:86:a6:04:0b:37:58:36:53:
53:bd:f0:6d:0d:7d:dd:72:95:4c:41:7f:55:97:21:
f0:d9:ce:43:a9:96:f5:15:7f:c4:3c:da:3d:65:ba:
53:1f:73:f8:63:3d:0e:3b:22:0a:ad:1f:e9:af:c2:
eb:49:41:45:80:c7:3f:b8:26:9a:7a:f9:b5:82:0c:
ee:4a:01:55:7d:1e:05:1f:79:d7:a9:eb:62:67:44:
01:a0:7e:4b:f7:0b:fd:4a:f6:be:15:77:10:2b:5f:
ab:a0:6d:9b:7d:6e:c8:84:18:cc:b6:55:3f:aa:04:
c7:16:5e:44:79:31:87:e5:f3:fd:55:ef:77:e5:30:
da:5a:2f:a5:36:d5:c4:8c:fc:7e:15:60:6f:f2:51:
74:3b:e0:84:4a:e9:9b:36:ea:ee:fb:9c:bc:dd:29:
cb:5c:d1:6b:3b:40:a9:94:d6:93:2a:1d:f4:28:1c:
43:fa:14:59:c0:92:68:4f:ea:2d:fb:94:93:d5:92:
88:76:16:98:fd:c9:45:5d:36:87:5c:23:0a:b7:05:
0c:f2:ca:45:bf:0e:fa:d4:ed:56:fa:dc:45:42:bf:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AD:EA:C0:91:AD:E5:18:90:D8:8C:1F:45:8D:82:A9:8A:FC:F1:A9
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:64:b6:ac:ed:63:c1:c6:04:04:e0:14:83:61:c9:64:fc:e9:
4a:bc:2a:fe:2c:1a:70:17:d9:4a:9c:99:c9:ce:25:5b:04:95:
33:53:4b:a1:f8:ea:80:09:09:9c:88:9e:d4:4c:f1:f1:d5:46:
32:9f:73:b2:87:d6:9a:49:02:1b:67:62:d5:00:0c:b1:1a:29:
93:73:74:3e:f6:d1:50:0d:43:05:69:82:9d:d6:91:25:1a:ed:
33:75:fd:49:fd:3a:0b:24:7a:af:5f:ef:4f:7f:8e:f7:3d:68:
e7:90:2b:01:82:a4:21:bf:69:ff:bb:86:3a:1d:1f:40:eb:fb:
61:68:52:bc:94:28:91:3f:a5:15:28:28:17:2c:9c:4f:b5:f4:
c4:ad:24:81:22:31:5f:21:46:df:c8:a3:46:ff:13:23:a0:c3:
00:cf:06:f7:9a:29:d1:bf:4d:de:4f:44:1d:58:8b:72:3f:94:
65:7e:a4:c8:4b:95:ec:1d:14:ba:ca:b2:6f:2f:66:97:c8:b9:
8e:b3:66:1d:59:4c:70:68:a2:d9:f9:dd:7c:d5:73:ac:5d:2c:
d2:b9:5b:40:2d:65:9b:0e:b3:c8:ed:48:28:7f:43:71:39:a3:
d4:46:ef:42:68:d8:a3:16:5d:fe:6c:3b:85:58:af:3a:8c:c9:
c4:07:dd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:20:53 2025 by rpki-client