Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
File: si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft (raw, json)
Hash identifier: PxAp7DHSLxV1xE/ahFJyY0sQdUS4b3RJLdQ44LewZc4=
Subject key identifier: ED:AB:9E:90:09:53:C2:F0:6A:9F:5C:FA:BB:1D:68:53:B9:A9:DD:AD
Authority key identifier: B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
Certificate issuer: /CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Certificate serial: 0196C570E2067494243E37CBFE7FF7B97D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
Manifest number: 0308
Signing time: Mon 12 May 2025 17:00:31 +0000
Manifest this update: Mon 12 May 2025 17:00:31 +0000
Manifest next update: Tue 13 May 2025 17:00:31 +0000
Files and hashes: 1: Ol4H0Ofe0seTJhjp23zwbv14mcA.roa (hash: h0M7hTbR8JXwLU22tU4Fw/p8crplmJ6JisUg1rjxv0k=)
2: si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl (hash: YavNbLRB/Mrs2erT/rXIy8Zy2A09bVa92jZ8fOyUauQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:e2:06:74:94:24:3e:37:cb:fe:7f:f7:b9:7d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Validity
Not Before: May 12 17:00:31 2025 GMT
Not After : May 13 17:00:31 2025 GMT
Subject: CN=edab9e900953c2f06a9f5cfabb1d6853b9a9ddad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:0c:2c:db:12:88:75:71:b6:21:f5:37:79:
fc:57:d0:7f:8a:62:00:b9:79:12:a8:4c:d5:91:d9:
d7:2f:f6:89:7e:3d:8d:ce:47:1e:20:e1:0d:52:bb:
28:16:68:ba:9d:d5:a5:07:dd:18:15:3a:40:7d:b0:
b9:76:7f:31:f7:c6:6d:d8:66:e4:06:ca:b4:73:5d:
30:d6:36:21:84:f5:c5:d9:77:c4:09:be:3f:5b:a3:
bb:0b:2f:34:48:97:11:e0:ee:30:6a:a2:95:03:c8:
93:87:d4:14:ff:86:d0:79:1e:1e:70:a2:cf:27:e1:
ef:58:27:fc:f9:f7:d3:a1:2a:a8:04:8d:4f:37:00:
8d:20:19:92:90:17:a9:7a:5a:bf:0b:89:73:13:a0:
a7:45:44:39:99:fe:a2:21:ec:2b:4d:e6:d2:fe:5a:
6c:00:b6:75:3d:a0:fd:1f:67:72:94:5c:9f:c6:22:
0c:3e:f8:78:b5:b7:1f:e4:d2:fc:70:37:1a:0e:36:
7d:e4:71:b0:a1:81:66:11:5a:95:0e:38:bc:fc:c7:
f1:74:11:48:e8:36:aa:e5:33:41:ee:01:7e:63:94:
28:70:1c:f3:45:d2:59:a2:4a:f7:b1:cd:d4:ff:57:
35:f9:1d:4e:75:f0:1d:5f:63:de:6c:28:77:68:2a:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AB:9E:90:09:53:C2:F0:6A:9F:5C:FA:BB:1D:68:53:B9:A9:DD:AD
X509v3 Authority Key Identifier:
keyid:B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b0:db:d3:29:07:96:84:23:62:ac:c1:51:e3:4a:64:0a:58:
e6:40:46:69:f7:c5:04:1d:e1:7a:61:86:d5:5d:e2:f7:d8:02:
0a:95:d0:62:d1:90:58:ce:b0:16:2e:31:6e:a7:1d:73:ea:27:
00:b4:f5:84:dd:bd:99:b8:54:1d:ca:46:3f:81:aa:1f:c7:03:
81:cc:28:b2:ef:99:64:86:87:0c:cb:a0:9d:33:33:f3:47:ba:
c7:48:f6:80:c2:3e:32:66:b5:2a:9b:0e:58:d7:3f:91:51:0f:
d0:b4:0c:15:59:26:bf:7e:05:99:ee:8f:c3:a2:63:16:f2:ce:
e3:09:66:a4:bb:0c:f8:57:eb:bc:60:1f:59:62:d6:37:f1:ac:
f8:c0:ec:f3:b6:d5:4d:fd:dc:1a:a6:91:0e:01:56:9a:a8:e8:
e2:9d:88:7a:ff:7a:a6:60:ad:66:c2:7a:bb:96:62:23:2e:a1:
88:43:db:a8:e4:48:00:f5:c4:15:03:2a:a7:12:c1:58:b8:1e:
61:76:e8:f5:50:8c:98:9f:12:44:c7:f6:f5:8f:58:0e:c9:71:
ce:ec:bd:0b:0c:d6:51:7a:b0:84:84:d2:29:d1:7f:6f:3f:92:
3e:80:7d:e4:99:8f:a4:e2:03:dd:61:9b:d0:95:41:b6:ff:5a:
1c:15:bc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:18:43 2025 by rpki-client