Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
File: QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft (raw, json)
Hash identifier: 5Q0A7JpDQn0PFmvhwB0tUlghLBRrBNduXp/46A5syJk=
Subject key identifier: AD:AC:5E:A6:B6:C6:4A:D3:E3:C8:54:A6:E2:7E:39:66:51:EB:3B:C8
Authority key identifier: 41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
Certificate issuer: /CN=414915cdd322bfe39472536955464a5ff67117c3
Certificate serial: 0196BFDCDD6A744C334DBDF467F65EC47BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
Manifest number: 0543
Signing time: Sun 11 May 2025 15:00:44 +0000
Manifest this update: Sun 11 May 2025 15:00:44 +0000
Manifest next update: Mon 12 May 2025 15:00:44 +0000
Files and hashes: 1: 1-XrmEJC-kOLvoeP9rgvbg0A53hs.roa (hash: EiYdih7Qfn/m/+BWxzflbgrLM7vuel5hPMdd9Y8tb4I=)
2: QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl (hash: pPTlHvBKbSWpIF2OlhbqeNUbpl75hi689MHgjdUd92o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:dd:6a:74:4c:33:4d:bd:f4:67:f6:5e:c4:7b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=414915cdd322bfe39472536955464a5ff67117c3
Validity
Not Before: May 11 15:00:44 2025 GMT
Not After : May 12 15:00:44 2025 GMT
Subject: CN=adac5ea6b6c64ad3e3c854a6e27e396651eb3bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:f1:f7:80:0c:e1:81:12:58:9d:41:c5:b1:
22:97:e6:f0:c8:a4:f4:64:ac:e6:92:bc:8e:3f:53:
2b:63:3d:83:b0:00:46:2f:18:67:3e:bc:9d:a5:44:
9d:08:20:70:db:b5:b2:5a:ef:4d:e6:8a:3b:c4:38:
cc:d8:f0:d8:fb:63:91:fd:12:5a:de:51:2c:ae:9c:
0e:10:03:cb:dc:e5:e8:55:4c:d8:e8:85:f9:ed:7e:
69:6b:0c:31:33:ba:bf:1e:bd:3d:c3:60:59:72:0f:
cf:23:29:33:cd:52:8a:c9:df:ef:d8:d4:00:8e:c2:
96:0a:f0:72:44:6b:a4:5b:74:6b:a1:02:19:7d:cd:
13:f9:d7:bd:e2:49:9d:ab:6a:a5:eb:89:af:6a:db:
2b:c5:9e:52:8c:b0:60:61:db:31:7f:4b:d9:63:d8:
61:00:e8:26:7a:24:6c:ee:ec:43:1b:21:1f:bc:b4:
48:08:f7:21:95:ca:51:f8:25:64:f1:c7:12:38:b1:
1d:80:8c:ef:90:be:0d:8e:a8:d2:82:4f:e7:aa:cc:
e5:2a:f1:a5:8f:d0:55:b8:9a:63:f3:be:a7:05:cf:
b7:bc:ca:19:fe:9d:b5:08:91:c9:65:7d:2f:3a:5f:
46:5c:2b:ef:75:f3:a8:85:2d:55:1b:bd:51:3c:07:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AC:5E:A6:B6:C6:4A:D3:E3:C8:54:A6:E2:7E:39:66:51:EB:3B:C8
X509v3 Authority Key Identifier:
keyid:41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:14:7d:ad:88:7a:1e:45:45:09:12:32:1d:34:4e:45:27:bd:
a9:bb:76:1a:82:92:4e:7f:19:f3:92:4e:7f:d3:72:e0:8c:19:
0b:64:f6:56:a9:81:9a:0e:31:0e:06:06:92:49:fb:c1:76:7a:
f7:26:2c:ed:e5:cc:fb:46:d5:e9:4a:b5:9c:f4:df:5a:80:52:
bd:d6:6d:14:bd:bc:70:98:62:ec:38:86:fb:d3:fb:c8:d8:cc:
7f:d7:b7:bb:e3:1e:1b:77:5b:2a:91:95:0e:3f:94:cb:39:56:
c9:7f:37:ac:dc:11:d4:92:54:a5:9d:67:79:08:bd:a3:d1:b9:
b9:09:19:ea:68:cc:33:79:62:c2:e8:98:3b:2d:d3:b6:07:27:
7c:6b:8d:9c:b2:d3:5c:d9:e8:20:ee:88:fb:e9:d4:c8:6c:fd:
e0:a9:f0:2c:4e:2f:b7:f0:5a:32:ff:d0:72:04:33:19:c0:bc:
1d:b7:83:cc:db:38:75:00:ea:35:3f:73:af:8f:09:da:9d:5b:
b8:18:4d:59:b1:10:c4:0f:f2:25:a2:0c:89:4f:62:02:a3:15:
5b:4e:90:fe:a4:c9:25:58:f6:f1:05:c7:a8:29:15:b6:66:84:
dd:5f:1d:d2:2c:1b:05:5f:ac:0a:d6:2b:23:cd:92:cc:ee:f9:
6e:da:f6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:55:19 2025 by rpki-client