Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
File: eXAA1nyN62Ji4Ampr_QioQOPRIk.mft (raw, json)
Hash identifier: j81ekulfHaDl21A12DkVzFmOgjy1ooQYdwbP8QlFcAQ=
Subject key identifier: 71:5F:C5:B3:7B:65:17:A6:63:AC:1B:7C:78:9C:27:7E:09:D7:C8:8B
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 0196C94D9B53815B1DC7C358B041A8484F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
Manifest number: 1539
Signing time: Tue 13 May 2025 11:00:28 +0000
Manifest this update: Tue 13 May 2025 11:00:28 +0000
Manifest next update: Wed 14 May 2025 11:00:28 +0000
Files and hashes: 1: eXAA1nyN62Ji4Ampr_QioQOPRIk.crl (hash: l4espcgV1xIX7Pj0t7SAJ7yzt6Jg/zUUSGKdG6mAFEo=)
2: x2Plj6HU813Gn6CnI6OWio0Ed3w.roa (hash: j+HdrBtXAtTZgu8aNGoL9Pn8S0MCOrlPhROCpWXQwvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:4d:9b:53:81:5b:1d:c7:c3:58:b0:41:a8:48:4f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: May 13 11:00:28 2025 GMT
Not After : May 14 11:00:28 2025 GMT
Subject: CN=715fc5b37b6517a663ac1b7c789c277e09d7c88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f1:4b:75:93:6c:72:49:1c:28:f8:c8:72:fb:
36:f5:04:f8:70:a6:46:79:37:e8:34:72:66:fd:69:
c4:58:19:0c:65:90:c3:80:ad:f9:df:ab:9f:d7:4c:
06:63:b1:47:6c:b0:64:e4:0e:5d:e3:d6:c9:3e:10:
dd:3f:d2:62:b3:d7:90:7a:ae:11:5a:db:49:9a:50:
cc:6f:9d:dd:cc:26:1c:63:ab:17:15:d6:d8:6d:4b:
ba:d6:60:7b:0d:5f:d8:62:c5:59:85:6e:36:84:3b:
73:b1:bb:b8:5b:57:ab:4e:88:14:95:52:23:1e:9f:
fe:88:38:5d:21:23:24:a0:1b:d3:3e:62:8a:2f:a2:
cd:39:4e:fb:0c:30:9d:56:4f:96:b8:51:40:11:7c:
12:3c:3f:06:5a:91:62:e9:8d:8f:f9:86:ce:90:28:
15:bf:b0:25:b0:7b:a9:2e:82:db:18:58:8a:d8:80:
a8:5a:a5:98:06:b8:f3:70:1d:6e:fa:94:f4:9e:55:
32:8d:60:c2:78:78:4e:b4:cc:df:de:30:cf:25:34:
31:55:92:e9:c8:cd:9a:0d:a2:53:28:6d:68:68:35:
62:47:c7:1f:76:8e:57:5d:52:4a:a2:8d:2c:6b:17:
09:e1:08:50:56:21:42:9f:69:b5:2e:da:92:56:2d:
40:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5F:C5:B3:7B:65:17:A6:63:AC:1B:7C:78:9C:27:7E:09:D7:C8:8B
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:20:9f:67:65:3f:3d:dd:e3:b2:5b:f6:4c:e8:c7:3d:73:d4:
48:e8:5a:db:cc:97:c3:ca:c3:99:ea:03:af:ea:cb:9c:50:c8:
07:c0:42:21:20:ae:e0:5d:e9:5b:95:a8:76:b4:5c:ac:ce:2a:
84:6e:09:c6:52:df:30:0b:88:d1:f2:53:c0:0e:97:05:4a:38:
ad:c5:41:d5:bc:dc:85:ed:16:fa:3f:20:64:8e:35:a5:60:a2:
99:20:67:aa:94:7f:50:9e:7c:3e:6c:14:ad:43:43:e5:e3:e7:
9f:d3:c0:ef:96:ba:ab:8c:66:d0:7f:38:f7:25:ff:cc:d5:9b:
d9:04:8e:da:92:2b:0b:35:fb:04:cb:1c:5d:32:14:56:1c:48:
b2:01:89:0e:ed:0d:ee:f8:29:6b:23:85:36:70:16:45:bd:a4:
54:2f:16:47:7b:c8:65:d6:42:58:01:64:4a:fe:64:6e:6e:8f:
11:f4:36:c6:b7:c0:1e:72:cc:36:a1:34:e8:83:18:f5:cd:23:
ae:79:4e:e3:ea:e6:5a:d2:f9:98:05:c6:86:cd:46:46:e6:db:
76:a4:d0:fb:e3:77:e7:05:6b:0d:e4:b2:b6:2b:0c:6c:74:2d:
7e:ce:6d:3f:c5:2c:80:35:c8:c9:42:bd:d1:f7:e9:5e:d3:e9:
0c:7d:02:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:08:52 2025 by rpki-client