Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: GyKWxZ0LpR7iEk9ghZuu7u+EzOdqm9IWmCF3QLGyL5U=
Subject key identifier: CB:2F:46:09:7A:30:13:9B:96:77:36:F8:21:C2:E1:E6:FE:8F:89:66
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 0196B52276A27EB80DE93EE1152C7E08F003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 13:00:56 +0000
Manifest this update: Fri 09 May 2025 13:00:56 +0000
Manifest next update: Sat 10 May 2025 13:00:56 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: XlPPWMBTMg43aXMyih810hfH2q/M5psPZgNDKNGI5fo=)
2: aIPJ4lm4ZyremkDprutiWRNEZ90.roa (hash: Kp0nR22T2kDefAUNT5QJL0kBQwplOU/6USLq0OiGG/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:22:76:a2:7e:b8:0d:e9:3e:e1:15:2c:7e:08:f0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: May 9 13:00:56 2025 GMT
Not After : May 10 13:00:56 2025 GMT
Subject: CN=cb2f46097a30139b967736f821c2e1e6fe8f8966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:03:e7:de:6d:a6:33:8f:7c:e7:8d:4c:e2:4d:
d1:05:f0:93:c0:19:ab:bd:cd:72:49:f8:ab:98:47:
6b:ca:59:8d:8d:51:0d:14:85:7a:09:8d:de:20:9c:
04:23:67:76:06:15:89:80:0d:23:33:b4:e8:90:1e:
9c:df:3e:7e:8f:77:db:6d:fb:33:a0:f6:50:b8:37:
27:49:07:e0:5d:35:09:fb:38:8c:82:a7:13:b5:31:
99:41:e7:71:34:68:ce:0a:91:86:52:3c:02:3a:9d:
66:df:ca:ea:df:17:9e:3d:ad:f0:08:f2:71:d1:eb:
be:0b:a2:96:d1:7a:c9:60:cb:e6:fe:dd:6e:4d:e2:
df:c6:29:47:f6:45:1d:e5:d3:57:f4:ca:72:b7:e8:
49:93:89:15:07:0a:35:2d:f3:b9:7f:42:2e:12:59:
e1:e7:7d:d5:82:4b:bb:e3:67:6f:7c:2b:b0:06:d3:
d8:41:57:4a:57:e3:0e:03:8a:bf:c8:f5:a5:07:2f:
0f:6c:07:39:15:fd:68:c0:d2:b6:4f:9f:8e:0a:10:
b1:da:d5:cd:c1:ff:96:9a:9c:bf:06:57:f0:c6:ec:
51:0c:63:a8:6f:0e:c8:d2:6f:0e:43:66:cb:25:6b:
3c:cc:1b:4e:2b:64:4a:3e:6a:f3:a6:46:fc:fd:1f:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2F:46:09:7A:30:13:9B:96:77:36:F8:21:C2:E1:E6:FE:8F:89:66
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:86:9a:c2:de:71:e9:c8:81:03:9f:92:52:cb:5a:db:11:58:
9b:cf:73:00:71:98:08:ea:43:c8:3f:1f:03:37:41:8f:6b:32:
8d:33:38:c7:14:c4:27:0b:af:89:06:ee:02:4c:29:78:4e:51:
01:67:09:0b:a9:5c:55:a1:2c:14:98:9b:db:5a:86:16:55:fe:
40:03:73:eb:df:c5:06:f3:f1:c2:f8:ac:55:90:f4:ba:61:40:
63:4a:5a:e7:06:ce:7b:af:96:74:6c:8e:97:07:ef:8d:da:55:
a1:50:b2:23:4a:22:33:2b:75:74:4b:90:9f:b0:1c:fb:e9:d2:
33:f7:dc:a7:59:bf:eb:ba:69:b5:2f:2c:da:1b:9a:66:b9:46:
4a:12:09:3e:33:45:54:e0:6a:cf:d5:eb:79:c1:b3:a1:d9:bb:
d1:46:4a:a4:c7:c9:68:70:15:b0:28:9d:53:89:7c:fd:a7:2f:
ce:8d:97:bf:1a:df:6e:41:a5:10:95:19:3c:9a:b0:fa:db:13:
7e:52:33:37:07:9e:a1:a9:72:e9:35:7e:ab:0a:0d:97:90:01:
2b:75:3a:30:b5:d7:97:02:b9:91:33:02:ad:fd:fb:90:40:b5:
00:8f:8c:ad:3f:53:20:63:79:f6:99:b1:54:41:74:cc:00:a1:
17:d5:aa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:37:12 2025 by rpki-client