Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
File: QqYv_JnylBAtzOI13Bo8E9q81po.mft (raw, json)
Hash identifier: dVuw4eUcgKB+DqBvcEhEoh5wJOA1mrUbrZHMiI1WTYo=
Subject key identifier: 19:B6:A7:CE:D4:A1:C6:35:51:28:CB:14:EA:89:8C:4C:7C:D6:F2:43
Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
Certificate issuer: /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Certificate serial: 0196CFF4684879BFEE1B68818BB6D0474B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
Manifest number: 153E
Signing time: Wed 14 May 2025 18:00:23 +0000
Manifest this update: Wed 14 May 2025 18:00:23 +0000
Manifest next update: Thu 15 May 2025 18:00:23 +0000
Files and hashes: 1: QqYv_JnylBAtzOI13Bo8E9q81po.crl (hash: 1zsEH1v07plFPXXogfWg2i0TxFQX//rDwMbpA3C+OEM=)
2: WTARnFcaaxywjD8542Gln8y_dnw.roa (hash: Ftlz5tAZ1Wy4DgBSL6cjF0uXQi2BfjzAEtpVPnOo5XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:f4:68:48:79:bf:ee:1b:68:81:8b:b6:d0:47:4b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Validity
Not Before: May 14 18:00:23 2025 GMT
Not After : May 15 18:00:23 2025 GMT
Subject: CN=19b6a7ced4a1c6355128cb14ea898c4c7cd6f243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:cf:3d:b8:d4:b1:86:42:96:d2:81:28:b2:
93:35:e7:61:46:6c:7e:8f:84:66:6e:37:38:d3:26:
eb:0a:b8:37:b4:06:50:b9:f5:94:ee:3a:10:f6:b1:
97:17:60:c1:a0:89:d3:28:0f:69:58:83:40:eb:14:
20:d3:87:9e:47:5c:28:15:e0:e8:3f:a7:7c:61:88:
b0:e0:7f:a5:f3:fe:b1:1b:ff:f6:27:54:ae:45:2e:
ae:83:29:a6:fc:0b:93:ba:de:4a:ce:86:92:25:dd:
84:46:89:04:7c:ea:9a:46:27:f0:03:97:59:c6:b6:
f7:42:05:08:ff:f4:e6:d6:0e:17:2c:a9:28:6f:d2:
ff:05:23:b6:2f:8a:dd:1b:33:c2:84:f3:50:ff:ca:
c2:81:90:ac:ef:f7:ae:58:65:65:11:12:d3:b3:53:
6e:6d:38:f9:d5:56:c7:94:68:17:b8:14:5f:c4:64:
ad:d1:2f:b5:52:40:df:0b:ca:a3:54:92:49:72:23:
a2:12:be:f3:99:cb:63:90:1b:b3:95:ca:2b:03:20:
d5:28:ab:81:a5:de:a7:d9:22:b1:a2:ff:4d:a1:03:
33:2c:71:1e:2a:18:9a:67:d8:4a:4e:aa:01:f0:99:
a1:99:97:0b:b0:67:cb:da:b7:4e:54:e0:d5:3f:32:
6f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B6:A7:CE:D4:A1:C6:35:51:28:CB:14:EA:89:8C:4C:7C:D6:F2:43
X509v3 Authority Key Identifier:
keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9e:45:42:80:75:90:6d:b8:d8:a4:9f:9c:4c:6f:b3:0e:a7:
ad:45:83:a6:77:41:bd:50:d8:a7:a0:33:1d:53:2f:fc:de:81:
1b:c8:92:83:6a:a9:ca:bc:72:3d:b7:50:58:04:fd:59:1a:dd:
2d:97:94:36:14:ac:80:8c:5a:d5:e7:9c:7e:3a:ea:d3:4b:6d:
f5:28:14:9a:fc:bc:df:87:4e:2e:fb:20:27:4e:50:47:8f:55:
30:c3:b3:68:b7:45:7e:30:a5:db:7d:16:c3:67:2f:92:0c:9f:
a4:11:85:2f:63:36:c2:94:b4:72:01:1c:ac:90:a4:0c:4a:c1:
27:9e:0a:25:cc:92:15:ed:37:f9:d1:de:7e:d3:05:cc:62:e3:
66:cf:9d:ce:c5:43:cc:de:92:01:da:05:9d:dc:50:6e:95:00:
95:46:86:67:05:12:84:74:fe:af:c0:a8:22:d9:38:a5:6a:73:
ba:d3:ca:66:1e:f7:33:a0:22:e2:01:e0:ba:f5:93:df:0d:6d:
7f:7a:9a:bb:35:f0:5f:e9:00:ec:22:7d:e2:32:0a:ab:59:fb:
59:36:3e:e5:93:39:27:2d:78:86:f7:9f:d7:03:9d:17:6e:e3:
fd:4c:d9:13:5f:29:44:00:b9:a4:cf:1b:70:4c:5a:02:36:bc:
f4:d3:9d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 22:05:31 2025 by rpki-client