Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
File: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft (raw, json)
Hash identifier: VQVFuEmJHiAC+q56ou4JNNsXC4kNlOMmCa4w5l6sZgM=
Subject key identifier: D5:94:F8:09:E4:ED:6E:0E:24:BB:D5:8A:4B:B2:41:D9:BD:FB:D3:44
Authority key identifier: 43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF
Certificate issuer: /CN=43d518d7307788fca3891878490e4f32d9aaf6af
Certificate serial: 0196D10732549318E29A44098C4988DD78C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
Manifest number: 0F88
Signing time: Wed 14 May 2025 23:00:31 +0000
Manifest this update: Wed 14 May 2025 23:00:31 +0000
Manifest next update: Thu 15 May 2025 23:00:31 +0000
Files and hashes: 1: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl (hash: nhI5q2b+KVyZqsU36qLPV+xWLXBF0Ep//XmagbqjvCw=)
2: hOsUXVARCl8NqYdv3cI6OIcfqwU.roa (hash: w1gjvrKQRUt3hmiD9OYkOr05DsegCS6tRj5zStTTlPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:07:32:54:93:18:e2:9a:44:09:8c:49:88:dd:78:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d518d7307788fca3891878490e4f32d9aaf6af
Validity
Not Before: May 14 23:00:31 2025 GMT
Not After : May 15 23:00:31 2025 GMT
Subject: CN=d594f809e4ed6e0e24bbd58a4bb241d9bdfbd344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:74:a5:97:89:68:b2:5e:b7:53:71:3d:41:5e:
c3:9c:4a:05:82:a5:17:04:4a:ab:d5:b1:4e:0a:3f:
1e:7c:2d:5e:0b:be:04:c3:0a:d4:41:75:17:07:ba:
c8:37:d1:9f:27:67:9f:e3:55:58:84:18:e0:e3:41:
f0:8f:ee:22:6b:61:dd:d8:d4:26:d2:73:72:10:3c:
43:0d:8b:ff:14:ab:ac:37:06:00:71:c6:18:72:99:
7f:ea:48:86:d4:42:b6:32:86:be:b5:d3:8e:6e:cc:
54:f4:3e:f4:a8:8c:af:0f:50:ca:5d:e1:71:f5:a2:
c6:a3:ba:7f:c7:5c:e8:01:3b:68:fc:fd:e4:53:a0:
a4:00:45:d5:f4:ca:d5:fd:eb:8d:09:55:dc:7d:c1:
ed:e0:0d:a6:cb:50:2f:af:be:2f:76:64:1b:a9:bd:
28:0a:82:7e:72:be:a6:6f:98:70:67:54:ff:67:b2:
08:e5:56:85:46:c6:87:c5:88:a9:01:00:03:71:b0:
3c:94:b9:54:b4:1e:af:51:39:d6:86:a6:2c:a7:f9:
32:bb:63:54:ad:e1:b3:a0:11:f4:d1:ca:3b:e8:fb:
fd:ed:04:39:71:e8:1f:fc:e7:05:18:b6:9a:65:db:
52:85:b1:d7:69:a9:68:2c:e7:e8:f7:8a:38:e5:23:
89:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:94:F8:09:E4:ED:6E:0E:24:BB:D5:8A:4B:B2:41:D9:BD:FB:D3:44
X509v3 Authority Key Identifier:
keyid:43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2e:71:cd:2c:13:fd:c7:62:09:b7:08:c6:56:11:dc:cd:f6:
9a:68:5c:7f:2a:fd:0a:74:fd:87:0a:db:fa:58:03:e1:75:23:
7c:87:e6:ed:52:f3:e1:16:89:f2:78:d1:52:4b:e5:3b:b7:fc:
ec:46:7f:47:15:89:5c:d1:59:11:54:78:3a:35:42:27:9d:43:
02:eb:72:77:61:25:4a:3c:27:70:d4:41:8c:c1:b5:e3:1a:08:
09:d2:df:0c:1b:36:5b:89:20:8c:70:9f:dc:43:cb:40:0c:b7:
1f:25:24:4a:70:d5:ea:73:17:70:eb:aa:61:23:ac:2c:7f:d7:
f4:60:78:da:fb:cf:f5:eb:5f:ba:92:7b:c6:84:b5:8c:b3:97:
3c:50:b4:29:96:a1:34:e3:c4:ab:b5:b9:4c:f5:87:28:d8:22:
d4:73:d6:a7:19:68:f9:49:bf:73:d8:40:d5:72:46:06:b2:19:
5e:00:55:d2:09:bd:c9:07:83:92:d7:ff:0f:38:7d:18:b6:fb:
ab:f0:12:82:eb:02:d8:79:b0:f8:a7:ec:c9:ab:35:e3:0b:21:
7d:8b:1d:e9:1d:ec:aa:f1:de:76:1f:de:d6:b4:ab:2b:f1:4a:
52:ad:eb:b5:c2:1f:23:89:48:c2:30:6e:a2:a9:59:73:8e:38:
e6:75:70:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:57:01 2025 by rpki-client