Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
File: Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft (raw, json)
Hash identifier: 3bhdV5QdzZLfZJLDCHTz28o7PD0W2YK6EkJMMCm24iE=
Subject key identifier: 76:8E:AB:47:80:80:22:41:2F:93:44:73:D3:99:21:D8:E8:E8:3F:E8
Authority key identifier: 43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
Certificate issuer: /CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Certificate serial: 0196C34BE00E426681A93B992CA0CEBCEF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
Manifest number: 04F5
Signing time: Mon 12 May 2025 07:00:51 +0000
Manifest this update: Mon 12 May 2025 07:00:51 +0000
Manifest next update: Tue 13 May 2025 07:00:51 +0000
Files and hashes: 1: Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl (hash: AAyraN0vYsbWPS8YGtqkKJ4oD5oYNBXEaYBxwQmWbtM=)
2: fiGpYaULVSGddPa40kO95drtEI4.roa (hash: hSGW2kYFHKKsMMUOHTMd5Mel06lDgF+QorDCIkRAx3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:e0:0e:42:66:81:a9:3b:99:2c:a0:ce:bc:ef:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Validity
Not Before: May 12 07:00:51 2025 GMT
Not After : May 13 07:00:51 2025 GMT
Subject: CN=768eab47808022412f934473d39921d8e8e83fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:f3:8f:f0:ab:45:68:ba:cd:34:b8:97:ed:
7b:4f:dd:62:0d:dd:89:be:f6:84:98:61:4e:51:db:
59:d5:c9:0c:22:1e:91:e1:1c:c6:6a:79:33:39:10:
3d:be:23:bb:ae:a5:de:fd:88:2c:68:99:89:ec:01:
55:5f:7c:da:35:e4:c4:65:20:b8:7a:3c:1c:d7:0d:
27:36:0a:ad:24:44:a1:b9:52:6b:c1:a9:d1:39:08:
5d:b1:51:00:6f:ca:91:a8:56:3b:0b:9a:92:f8:a4:
ee:04:9b:96:8a:da:64:dc:b0:19:56:56:c4:ef:75:
68:12:22:68:2c:fd:56:af:3b:7a:48:2f:30:61:49:
59:f6:3c:3c:be:1c:93:d3:02:1b:1f:f1:46:4b:9f:
3d:b7:6f:ed:c7:5e:ec:7f:0c:1c:63:4d:d8:78:a9:
64:36:6e:2d:c9:cd:5d:e6:f9:8b:00:f2:19:ca:6b:
95:91:51:d1:17:38:aa:0e:d1:3f:74:76:0f:fe:84:
60:94:42:21:45:75:e3:22:0e:b4:ff:3d:5e:df:95:
0b:08:58:e2:29:79:9f:49:64:c6:d7:41:27:4a:02:
1e:f1:b2:fe:74:f2:15:38:ac:fb:c4:b7:30:d8:3d:
56:7e:04:ac:7d:f3:70:ef:f0:03:af:18:a7:1e:74:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8E:AB:47:80:80:22:41:2F:93:44:73:D3:99:21:D8:E8:E8:3F:E8
X509v3 Authority Key Identifier:
keyid:43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:64:8f:f9:34:3b:75:46:6c:cd:33:98:92:10:9c:7a:6c:af:
54:26:2f:de:46:ac:93:88:d9:ab:8e:c8:f3:de:ef:76:bd:1e:
60:49:d7:f6:1c:46:c4:0c:8a:2f:23:35:19:6a:f2:1d:c4:3d:
c6:bb:cb:1a:6e:62:1a:72:06:82:a5:d7:62:93:d6:7c:ac:f0:
d9:65:ee:95:10:00:1d:f6:e7:5d:59:b7:59:03:2e:f9:7d:37:
d5:b6:8e:62:dd:39:c2:ae:03:9a:bb:e7:5b:e1:83:cf:f1:47:
26:75:af:06:84:68:41:5c:d2:90:d1:3a:d4:85:f6:00:54:26:
87:dc:8c:3e:36:78:6d:74:39:48:11:8a:32:f4:bc:e4:4c:9d:
ad:a7:9c:e0:64:65:a5:ea:48:16:ce:d7:80:2f:bf:83:a9:7c:
c6:65:a5:a0:f9:42:5c:02:9c:06:22:86:79:3c:f4:a9:fa:65:
7d:fa:e4:64:22:0a:0c:27:4c:bc:70:5c:bf:c5:d3:51:57:fd:
c6:ac:1b:b9:70:e1:24:9d:38:a2:d2:9c:7f:44:30:fb:00:b0:
69:25:bd:b3:fb:ff:e2:28:d2:4e:ce:3f:c9:d9:17:9d:0e:0f:
af:01:58:80:03:bc:d7:b7:71:9a:33:12:06:20:4a:fd:3a:66:
79:87:7e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:42:01 2025 by rpki-client