Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
File: RQLrIq5cC03NOaD5ZBolcGNEcfk.mft (raw, json)
Hash identifier: 8rz7EIC1K2M6xfZIM3GnL6vWWOPUFDzkjU1l80zGetw=
Subject key identifier: 84:39:B4:FF:3E:4F:0E:62:95:1E:6C:0F:F3:99:1D:F4:6D:70:72:58
Authority key identifier: 45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
Certificate issuer: /CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Certificate serial: 0196C570DF5C836742812B08F1B9C352E9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
Manifest number: 054F
Signing time: Mon 12 May 2025 17:00:30 +0000
Manifest this update: Mon 12 May 2025 17:00:30 +0000
Manifest next update: Tue 13 May 2025 17:00:30 +0000
Files and hashes: 1: RQLrIq5cC03NOaD5ZBolcGNEcfk.crl (hash: e3Vrxigz/uew0CRJLrXW4Ym3sQzKTifuDuJfoZo1TkQ=)
2: bEqgtrspfIQ8XBKsdOXgQ2Xyvsk.roa (hash: RpGyhN37kiaHNLFfnHAUkc7DrZnN6EVEiWZPE+rzTPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:df:5c:83:67:42:81:2b:08:f1:b9:c3:52:e9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Validity
Not Before: May 12 17:00:30 2025 GMT
Not After : May 13 17:00:30 2025 GMT
Subject: CN=8439b4ff3e4f0e62951e6c0ff3991df46d707258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:79:31:40:f6:3c:f8:f8:38:79:2b:f6:bf:
ab:58:b0:98:c3:97:dc:f9:f1:d7:0f:4e:b1:57:e2:
94:6f:02:c1:ad:08:c3:19:f2:a9:f4:a2:15:7e:4e:
03:ea:66:82:96:63:34:59:74:6e:82:de:01:48:e1:
0c:38:5a:23:e9:e9:34:74:ce:a9:f2:12:5c:60:17:
d5:a2:2b:5a:cd:84:49:89:72:ce:9e:bf:9a:8a:38:
bb:2d:ef:eb:d4:91:ce:5a:4f:a7:e1:23:ab:21:4d:
02:71:63:2d:f0:8f:7f:e1:fb:0b:42:8f:46:64:3d:
e6:65:50:df:1e:ef:44:c1:42:68:b2:71:9a:50:f1:
37:be:ed:c6:3c:3f:85:97:03:ac:a6:fb:61:44:77:
8b:0b:e5:79:d8:5c:d8:a9:02:71:dc:94:73:a8:ef:
d6:7c:41:74:3e:d0:a9:ae:79:ea:38:ad:cc:25:ca:
fb:4f:eb:46:b2:84:aa:fd:b9:bb:b2:99:24:81:f4:
b0:c5:ca:42:6e:01:45:1c:5d:18:8b:a2:8d:bc:51:
91:9b:2f:ea:2d:24:c5:9c:44:b7:88:a7:28:5d:05:
4d:db:f7:20:59:20:03:24:0f:ec:15:d4:59:d8:df:
97:15:fa:bb:36:f8:15:6c:d2:5e:22:d1:53:7c:fb:
3a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:39:B4:FF:3E:4F:0E:62:95:1E:6C:0F:F3:99:1D:F4:6D:70:72:58
X509v3 Authority Key Identifier:
keyid:45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b9:4a:0e:bd:3b:7b:8f:20:f8:d4:db:80:eb:46:c4:ec:0d:
df:ee:4d:c1:b6:93:26:93:b8:99:6a:18:bb:06:b3:2f:06:84:
1b:06:1c:52:e1:66:02:55:74:b5:c5:4a:5d:9e:3b:07:82:ca:
ac:bd:28:e8:f3:fb:eb:ba:99:45:fc:0b:74:63:83:ae:1a:0a:
ca:c0:b2:25:29:97:9f:59:1d:38:90:43:f3:f2:c7:d7:f6:ab:
d2:34:9a:a5:0d:4c:f9:03:70:07:ef:2b:58:1f:83:08:01:7a:
a9:3d:96:93:1b:ca:a8:6c:c1:c2:f7:1f:7a:e0:c0:20:40:1d:
21:d4:d4:76:ec:86:68:ac:a0:99:1f:32:7a:26:f2:ee:7e:0a:
7b:1f:27:24:b4:38:83:a4:5e:8c:01:02:15:33:cc:94:26:59:
ec:59:89:01:01:6b:46:9b:c1:da:63:fb:30:0a:c7:bd:8c:a0:
84:f6:33:e1:17:df:6f:33:e2:b7:d4:f5:53:ab:92:6c:16:76:
0d:4b:de:90:3e:b3:01:a0:a5:51:02:66:b9:6a:20:77:6a:93:
0e:e2:da:d8:8d:14:a2:1b:02:c1:23:c1:dd:7e:57:ef:92:c4:
44:01:dd:a3:14:17:84:df:13:0f:75:0e:66:20:1c:4d:10:0a:
13:b0:ee:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:13:59 2025 by rpki-client