Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
File: 00QDowsxN1mvliav2NPSOAX8yA4.mft (raw, json)
Hash identifier: O8bKYaOEtHR1UbZdwizZN9rN/m21hjlWH5VCcy9HKkI=
Subject key identifier: 46:4B:35:85:71:13:E8:FC:C5:56:16:A5:F7:A5:76:06:D1:F2:44:19
Authority key identifier: D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
Certificate issuer: /CN=d34403a30b313759af9626afd8d3d23805fcc80e
Certificate serial: 0196BF6E97CBB0CCB000B35E5216494A4684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
Manifest number: 1395
Signing time: Sun 11 May 2025 13:00:18 +0000
Manifest this update: Sun 11 May 2025 13:00:18 +0000
Manifest next update: Mon 12 May 2025 13:00:18 +0000
Files and hashes: 1: 00QDowsxN1mvliav2NPSOAX8yA4.crl (hash: wYHf+A2hpLRDb30v2AC+CGklRZY7EPUisJBoFQ/+c3k=)
2: cVpmuHdAZzlijHGAjGSKkGw9RjA.roa (hash: qNHNU4vOIkFIe1aGqstJlXjPN0jdP5RduNW12cDiCyg=)
3: yay3nN2FWSrpjXKo77YZUaENbjA.roa (hash: 3dd/DLtrx7aUgl5CmfhFn/D7OtLGGdM5Nn2M37wMGvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:97:cb:b0:cc:b0:00:b3:5e:52:16:49:4a:46:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34403a30b313759af9626afd8d3d23805fcc80e
Validity
Not Before: May 11 13:00:18 2025 GMT
Not After : May 12 13:00:18 2025 GMT
Subject: CN=464b35857113e8fcc55616a5f7a57606d1f24419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:bb:c1:b0:73:65:80:c3:32:0a:6f:b4:85:
b6:0d:3c:ac:f9:25:53:49:6d:07:6b:09:97:da:55:
e1:12:45:d6:94:2e:7f:13:c8:7f:1d:d4:fa:af:47:
e5:54:65:cf:6a:bb:f8:35:1a:fd:f9:a8:da:67:f3:
19:a8:f5:0e:84:95:50:14:33:ed:d2:73:94:19:ea:
9e:f4:db:d2:13:b4:52:e3:94:1d:e8:52:9c:7e:66:
0d:58:c5:4d:05:de:9e:0c:99:8c:95:4b:c6:32:d6:
e3:27:f4:c2:ad:75:8c:f1:c3:c7:57:7f:16:e3:4e:
55:d3:5f:18:6f:f4:b7:81:98:2c:75:11:45:42:2c:
57:7f:0a:9a:10:41:80:9c:02:34:9e:c4:78:ed:93:
3d:47:74:e8:1c:0b:4c:4a:7a:e2:f0:0e:c8:0b:94:
36:49:49:7d:3e:3a:78:28:4a:b1:2b:c3:7e:f0:87:
c2:3b:7a:ab:37:1e:81:2e:4b:ba:a4:d0:2a:84:8f:
64:2a:4a:22:5d:bb:03:1b:05:89:75:a9:ee:5d:2a:
df:d4:3e:f3:97:35:54:b0:f8:8b:a5:41:6e:92:0d:
b5:83:96:6f:e4:da:40:0d:3d:2e:88:d1:70:58:16:
04:3b:dd:16:74:7f:0f:30:51:c0:44:c5:c4:50:b1:
e4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4B:35:85:71:13:E8:FC:C5:56:16:A5:F7:A5:76:06:D1:F2:44:19
X509v3 Authority Key Identifier:
keyid:D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:78:12:45:fb:bd:92:7c:d5:e8:ab:6c:77:28:e4:b2:38:92:
17:b1:f7:29:8e:e2:49:3f:e5:4d:a6:42:3c:4b:19:24:94:f9:
fb:0f:35:21:85:e6:eb:74:c9:5d:8a:cd:a5:a4:69:ed:50:65:
f8:10:5b:ca:27:be:5e:37:f4:95:fe:d3:b0:ff:e1:1f:0d:28:
6c:01:f1:b8:ea:3d:5e:75:56:60:a9:b1:35:a8:dc:91:ff:17:
b8:2c:6c:f2:e0:19:23:77:69:7f:52:4b:03:e8:98:c2:fd:bd:
19:1d:55:31:82:17:6a:e7:08:e2:12:3a:c6:b6:1a:9e:09:87:
5e:ef:11:03:88:50:18:df:f4:07:b8:38:91:2a:3b:8e:ee:a1:
77:ed:63:62:5c:65:5c:78:6a:1e:3f:df:8b:3d:ef:71:5d:a6:
42:f5:b5:6f:ac:a4:25:4d:47:de:98:76:01:0c:c0:68:0f:4a:
b8:d0:a5:f7:3a:64:fa:4d:74:e4:d9:10:39:90:31:9b:36:a1:
24:9c:cc:37:c3:f5:fd:c2:f4:42:09:61:4b:2f:98:60:30:5f:
8c:72:0b:98:b4:f8:85:4b:5e:cf:e0:2d:72:b6:13:08:fa:84:
63:8b:b3:9a:fe:f5:18:d7:1f:91:6b:4d:cb:2a:78:1b:5e:a3:
65:c0:61:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:54:39 2025 by rpki-client