Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json)
Hash identifier: aZx4MWv1dvgx3CJwSVLeAgOnz40OzCeMAXeyRw8YQuc=
Subject key identifier: EF:73:16:B5:E2:CA:C8:8C:CD:4C:38:58:A6:82:D5:6B:F0:3A:48:0D
Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Certificate serial: 0196CDCF340CE460E2C4575946D6F6C1F5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
Manifest number: 0472
Signing time: Wed 14 May 2025 08:00:30 +0000
Manifest this update: Wed 14 May 2025 08:00:30 +0000
Manifest next update: Thu 15 May 2025 08:00:30 +0000
Files and hashes: 1: Ku3HRyioj0ql8ozTbPCiAHlL8-E.roa (hash: gtf9gLEz02KrYfoccfEAryEzPGbpHsjqTO4FxJ768C8=)
2: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: SmACzJN3MzTgVIcVZPZmB+/G5bDQlQ+ipUsUayp94hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:cf:34:0c:e4:60:e2:c4:57:59:46:d6:f6:c1:f5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Validity
Not Before: May 14 08:00:30 2025 GMT
Not After : May 15 08:00:30 2025 GMT
Subject: CN=ef7316b5e2cac88ccd4c3858a682d56bf03a480d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:a0:50:61:7c:5e:bd:be:09:b8:4c:d7:57:
44:41:24:aa:8e:c4:fd:15:1b:db:f0:e8:c6:b9:09:
e7:94:ce:17:e8:0c:f1:8d:8c:6b:e2:84:f9:7a:bf:
2e:2b:29:db:e2:f8:04:59:0f:30:33:fb:b1:78:9a:
50:07:d8:5a:9d:2e:7a:b6:34:46:25:37:41:fc:9b:
a9:ee:71:ad:40:39:b1:85:76:e1:45:8d:90:a3:4d:
b3:b9:3d:47:81:37:1e:c2:28:4b:b2:81:e6:da:09:
78:c0:76:be:23:ae:70:bf:ee:96:03:58:fc:c0:10:
ba:1f:de:00:3d:d4:bf:00:f4:ab:98:87:9a:6a:d0:
85:b0:37:f4:1a:9e:9f:db:ea:ab:50:37:3a:27:9e:
15:f1:f4:10:f5:48:66:df:8e:38:10:71:8d:aa:4c:
3f:18:bb:ed:a3:8f:db:a2:49:38:5c:bb:9c:a3:b8:
32:4a:d0:cd:d4:3c:ca:18:7c:db:f2:b0:c4:37:7d:
43:8a:85:a4:41:4b:7e:0a:5b:5a:e4:3f:5f:0b:97:
b1:89:03:de:bc:62:9c:ac:de:11:30:ba:41:69:90:
38:c9:86:db:9c:34:88:2d:c0:64:70:44:a9:54:00:
1e:45:60:ae:ac:b9:c4:9d:27:61:ae:4e:4e:b1:c5:
b9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:73:16:B5:E2:CA:C8:8C:CD:4C:38:58:A6:82:D5:6B:F0:3A:48:0D
X509v3 Authority Key Identifier:
keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f9:13:94:2e:65:76:d5:53:7c:35:5b:1f:ef:4d:ae:b9:81:
5d:ae:f7:85:06:a3:7b:5d:5e:23:21:d1:35:cf:ef:2c:d3:ff:
45:16:8d:af:e0:2a:d2:47:ec:27:9e:f6:f6:94:1c:1d:9a:6a:
9e:f3:78:d5:29:fd:f6:a5:c7:ea:4f:fd:c9:7d:31:b1:02:0d:
63:bf:37:ee:85:4e:2c:28:97:b1:2c:bc:6c:b0:f3:f9:42:6b:
66:85:9c:a1:36:67:07:58:da:e3:28:be:13:45:dd:59:2a:26:
fd:23:3c:8b:f2:bc:6a:1a:89:d5:e7:e5:53:3e:3b:fd:a6:25:
26:f8:5c:2b:94:94:82:57:5b:dc:79:a0:0c:67:e9:19:32:7a:
26:71:8d:37:5d:85:b0:94:cd:e7:d0:8b:48:e8:3e:da:40:48:
51:32:83:46:9b:48:32:b2:15:86:7a:89:f5:59:02:fd:ad:b0:
d1:c8:f8:57:2f:96:77:e5:ec:f9:56:0f:94:5f:35:be:56:0e:
c8:7c:f8:54:32:66:2a:89:e7:cd:20:67:91:56:95:db:13:fa:
e0:80:a7:89:30:dc:6e:24:15:12:c1:07:0b:73:cc:29:b3:53:
17:7b:bc:18:2d:3d:d7:43:a2:68:78:4c:c6:b2:06:89:da:9a:
b7:fe:1b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:27:22 2025 by rpki-client