Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
File: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft (raw, json)
Hash identifier: r09IkedxQUbSFM8crtYdVhY37HUiw+PczuSO0xq825k=
Subject key identifier: AE:89:40:4A:91:1A:80:41:85:8E:1A:84:A4:CA:3C:B6:36:4B:D2:59
Authority key identifier: 0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
Certificate issuer: /CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Certificate serial: 0196A38A19DDDB75527A882FD3FDB30A0732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
Manifest number: 1135
Signing time: Tue 06 May 2025 03:00:58 +0000
Manifest this update: Tue 06 May 2025 03:00:58 +0000
Manifest next update: Wed 07 May 2025 03:00:58 +0000
Files and hashes: 1: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl (hash: i8VbPDI9qvcTgC/9fYOTeT7k5OCeY+XCcRCWw7pycoU=)
2: YVf3u5lFieXSo4MA7qYyxZHHzPg.roa (hash: LTVF5N88k7skTnyboglAJr7FjEe2LUwSGTf3pVeiANQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:8a:19:dd:db:75:52:7a:88:2f:d3:fd:b3:0a:07:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Validity
Not Before: May 6 03:00:58 2025 GMT
Not After : May 7 03:00:58 2025 GMT
Subject: CN=ae89404a911a8041858e1a84a4ca3cb6364bd259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c7:dd:8b:58:63:bc:ee:db:cd:42:29:26:da:
c6:98:b0:ef:fd:c5:62:bb:00:04:af:c2:68:57:c8:
6d:3c:dc:64:7b:fc:a2:4b:a7:34:58:31:0a:e2:ab:
8d:c5:aa:3c:fd:4c:46:16:e3:d1:32:03:67:49:c0:
ab:4d:31:97:be:38:15:82:7f:60:9e:d5:a1:d7:be:
eb:38:80:61:ae:86:6f:af:ed:45:8f:20:17:f9:2b:
a0:3e:73:d1:ac:8c:fc:8f:c1:db:ae:b2:e7:da:e1:
2b:2d:b6:87:e7:f7:b5:04:58:1e:54:7d:fb:b9:c9:
f3:5a:32:e7:06:1f:af:16:cc:a5:a2:07:b0:5a:20:
c3:3b:6d:bc:81:1d:35:26:1e:d0:5d:dd:1f:74:0c:
ce:c7:9f:75:cb:39:4b:7c:4f:4f:26:57:78:0a:31:
ee:c1:1c:c8:05:ae:88:4f:70:af:32:3a:74:32:e2:
fb:f5:97:0f:53:94:db:45:35:3c:b9:11:02:7e:0a:
86:52:e2:d1:e3:cc:30:f6:cb:d5:08:98:b2:53:d8:
c6:de:bc:14:3d:89:87:84:d2:7a:43:9a:4d:00:45:
ad:c2:51:c5:df:f8:b4:d3:9f:73:05:a3:f7:da:52:
44:a5:70:62:8d:d4:df:21:44:d5:36:8d:d9:19:b4:
f7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:89:40:4A:91:1A:80:41:85:8E:1A:84:A4:CA:3C:B6:36:4B:D2:59
X509v3 Authority Key Identifier:
keyid:0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f7:45:6e:2d:e9:3b:e1:27:65:2e:dc:81:0c:bb:92:67:53:
d4:47:fa:f5:15:ec:16:11:fa:c9:e2:0f:a6:95:c1:0c:56:65:
fd:82:a8:53:e0:4b:e1:58:3a:86:01:2e:47:ff:ae:1c:b5:a5:
d7:5c:d6:9d:6f:0f:e1:d1:52:94:57:19:84:51:22:5d:71:7e:
ec:83:92:9b:87:28:a6:12:42:ac:6c:71:cf:03:4e:f2:62:5e:
1d:d1:98:2a:82:e9:5f:dd:d9:06:1c:c0:72:9e:14:0a:ce:1c:
2c:b9:69:9e:b1:b8:05:e9:57:66:16:2c:b3:6c:56:7b:07:80:
d9:7d:5f:63:6b:b9:e6:75:9c:09:03:a7:dc:f8:95:38:3d:17:
30:a5:a3:0e:dd:de:64:57:f3:8c:b0:09:eb:87:6c:39:0d:b3:
0b:f6:e2:45:f4:84:ce:47:9e:d8:12:b5:bf:2e:d7:dd:d4:1f:
86:e8:1b:5d:69:ba:52:a5:12:a4:9f:6f:51:f4:a4:22:09:eb:
1a:c4:32:b4:22:ba:57:19:44:68:09:db:76:15:3e:09:ee:72:
25:aa:10:82:7f:d4:70:d8:c9:c6:7e:2c:17:11:72:07:bd:d3:
4e:4e:91:bc:fc:3d:19:81:42:5a:68:5e:a3:28:eb:1b:44:a8:
7e:81:03:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:11:38 2025 by rpki-client