Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
File: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft (raw, json)
Hash identifier: 8A0nzkUsx6TvXjM99/l1vjIWlKptMyMgiUxzcTajNp0=
Subject key identifier: E2:83:96:B6:7A:5D:E7:FF:06:15:3D:BC:72:10:5B:B5:9A:F4:18:60
Authority key identifier: 42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
Certificate issuer: /CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Certificate serial: 0196C7966055B9E34C7391B0D57EBEE7B86A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
Manifest number: 1539
Signing time: Tue 13 May 2025 03:00:43 +0000
Manifest this update: Tue 13 May 2025 03:00:43 +0000
Manifest next update: Wed 14 May 2025 03:00:43 +0000
Files and hashes: 1: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl (hash: RbFiwXZIlJsDeBm8HBHh81wGMqqlOiLGpSbClHIWNmU=)
2: T5gr7GnqjE8y7ukPZ3Upa6e15rU.roa (hash: IygW4LAvMnA+EIcJ9N6BryWosUgw51JGwDaJIPLdjAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:60:55:b9:e3:4c:73:91:b0:d5:7e:be:e7:b8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Validity
Not Before: May 13 03:00:43 2025 GMT
Not After : May 14 03:00:43 2025 GMT
Subject: CN=e28396b67a5de7ff06153dbc72105bb59af41860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:4f:31:97:49:b9:a3:9e:f3:77:ed:68:36:
4d:a4:4d:d9:7b:46:4d:20:79:82:86:9a:21:46:af:
3f:73:e6:ad:5e:b8:9f:2d:cc:11:5d:9b:50:34:5e:
24:0b:9a:03:f3:5c:cc:ea:f7:ff:a4:34:9f:88:2a:
96:51:e4:6e:97:42:03:da:1e:85:8d:af:12:62:41:
43:e2:01:f4:b8:ce:8b:b4:bb:cf:d0:97:20:4d:1b:
fa:73:40:ea:a5:d6:9e:f5:ac:b3:e8:a3:41:b5:fc:
5f:8b:18:d0:2c:e5:88:95:b0:74:62:b6:3c:15:3b:
77:f4:3d:7c:68:c2:b6:b1:15:be:83:5e:5c:b3:87:
bf:e3:1e:71:72:19:03:ff:a7:81:a2:61:3b:c3:b4:
0a:bd:67:cc:d5:e3:1e:73:b8:cf:c9:88:42:e8:ce:
90:dd:e4:1b:b1:7d:86:6b:ef:2b:7c:f7:35:4b:16:
96:9d:9e:ba:ce:59:40:2b:de:d3:b2:04:59:f5:6e:
c0:c6:8b:fb:24:c8:5b:c9:01:a4:ef:9e:df:58:f2:
f6:6d:c8:13:29:66:d7:76:31:e7:53:f6:fb:3e:bd:
f5:1b:30:b0:6d:f7:3a:80:b0:af:8a:a6:80:5d:bd:
6d:41:ba:0b:0b:11:71:fa:1b:2e:df:e6:37:b3:54:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:83:96:B6:7A:5D:E7:FF:06:15:3D:BC:72:10:5B:B5:9A:F4:18:60
X509v3 Authority Key Identifier:
keyid:42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c1:13:e8:f7:cf:d4:be:d5:4a:af:ce:a9:c4:df:d6:ab:29:
0c:62:e3:fe:57:fa:8a:0a:07:66:92:95:c8:dd:09:b7:af:73:
8e:ac:6e:8d:2c:e5:e6:26:50:19:ff:38:29:b4:16:b1:3b:3a:
90:4b:5b:6f:90:b4:b6:60:2b:b5:4b:77:20:b7:4a:70:7e:fb:
00:59:dc:c2:61:05:44:1e:b1:8f:f5:56:f6:4b:f6:1f:ca:27:
ad:92:12:27:be:67:4e:83:c9:12:f8:21:d6:74:0d:b9:e0:95:
95:ba:f0:e8:de:c5:63:6f:ae:97:0b:c4:b8:f4:25:c1:75:1c:
80:71:4c:7c:ae:1a:55:51:c4:33:05:96:55:8f:bf:00:8a:2d:
28:dd:e5:6d:5a:5b:7a:56:e5:a3:e0:be:c9:2f:1c:7e:5f:34:
3b:df:37:04:0d:ea:d5:94:b1:ff:a1:45:94:86:8f:3e:31:d9:
8a:4f:69:66:af:f9:93:79:b3:23:94:c7:63:4e:a0:9e:1e:17:
67:3e:eb:2d:42:48:de:25:7a:5c:9e:e9:91:14:51:14:65:e0:
c1:37:cc:72:13:46:df:33:9d:f9:00:9e:b0:56:1b:f1:04:3b:
0f:70:ba:ee:b6:0e:4c:d5:b5:30:91:a5:e8:d8:c6:af:32:bd:
43:3b:d1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:15:11 2025 by rpki-client