Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
File: 1QliA1xelRATygZwylaeefjWPBU.mft (raw, json)
Hash identifier: Xlfj0XrKdNOo1xahJCe7L3MXrpBFwF6AHySt0mtwhEI=
Subject key identifier: 80:C4:B9:DD:CC:C1:29:60:01:8F:10:44:59:5D:07:E9:18:4C:4C:AE
Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15
Certificate serial: 0196C238DE792486A6ECE6A916553E76E743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
Manifest number: 1001
Signing time: Mon 12 May 2025 02:00:28 +0000
Manifest this update: Mon 12 May 2025 02:00:28 +0000
Manifest next update: Tue 13 May 2025 02:00:28 +0000
Files and hashes: 1: 1QliA1xelRATygZwylaeefjWPBU.crl (hash: YhOMlMG2pM5nPBp4clM9jpynP02JvPn6eo6at/oyNO4=)
2: fD4OezRM4UrasrKKJ10uGn5_Qug.roa (hash: +HiHjgUZa5Xei+THiDncnTXYzPCxqbbX0ahPYM7QsZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:38:de:79:24:86:a6:ec:e6:a9:16:55:3e:76:e7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15
Validity
Not Before: May 12 02:00:28 2025 GMT
Not After : May 13 02:00:28 2025 GMT
Subject: CN=80c4b9ddccc12960018f1044595d07e9184c4cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:24:57:79:c3:12:91:b9:f8:7f:06:69:49:
12:28:81:eb:1f:31:0d:b9:da:36:2f:3f:e2:23:cc:
40:5e:3c:77:9d:a3:d4:8b:b0:04:1e:61:ed:96:d0:
70:53:2b:dd:39:e5:9c:2f:21:f1:c5:da:cc:36:ba:
e1:56:b3:de:7d:95:b8:67:27:52:c4:e0:b4:84:b5:
2b:7b:ad:e0:e3:f2:85:3a:d8:92:08:e1:61:ab:80:
bd:68:47:af:fc:7d:17:af:79:50:24:e1:31:eb:96:
66:9a:ff:a2:7d:87:fd:b5:3b:b0:a4:ff:eb:f9:94:
62:d5:04:a6:04:1b:34:70:18:a9:7f:b7:b3:47:da:
74:80:2c:81:0c:f4:a1:f3:bd:6b:b3:b5:d2:a5:4b:
a5:27:e8:95:61:04:90:cb:87:db:b4:7a:8b:67:5d:
45:8c:93:72:f0:52:e3:52:99:f9:9d:fe:4a:2f:01:
73:b0:11:04:54:2f:2a:bf:5e:d9:b1:45:ef:5a:06:
6d:f6:11:4a:d8:21:f5:51:ed:d3:a9:77:ee:21:f9:
31:aa:bb:28:49:09:c4:34:62:c9:a2:14:34:e3:1d:
1b:cb:f1:b4:66:fe:73:96:75:7a:dd:a5:23:d8:28:
d1:16:85:d8:9f:b5:5c:30:31:b7:63:88:70:82:05:
d2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C4:B9:DD:CC:C1:29:60:01:8F:10:44:59:5D:07:E9:18:4C:4C:AE
X509v3 Authority Key Identifier:
keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e2:0f:83:21:48:52:86:90:ba:9f:f9:9f:26:e6:4e:69:e8:
87:a9:4c:d1:20:29:67:1c:58:c2:71:bb:5b:d8:89:6f:16:41:
58:7f:88:d4:2b:03:eb:38:01:c4:8b:10:9e:37:c5:55:ea:b8:
c2:ad:bf:1b:86:73:bd:d5:c0:6c:32:ab:3d:92:a1:63:9e:7d:
c4:2c:84:76:2f:ec:d4:a3:e2:00:15:6d:08:fb:93:4b:54:d7:
67:82:9f:a5:bd:ad:a6:1c:b3:ac:da:19:f6:23:df:2d:3f:82:
4b:55:ec:45:86:b4:a5:21:3e:c9:22:a3:2a:18:af:f9:2b:a7:
a9:53:c8:fd:67:4f:1b:28:71:54:9b:1f:c2:c1:2a:32:77:5c:
73:62:ac:c1:92:aa:09:2b:22:0e:24:df:63:51:dd:b3:52:81:
91:56:8d:92:c2:2e:3d:4e:f1:8c:e0:8c:53:1d:8c:4b:c9:33:
08:3b:93:fb:68:97:8e:6d:1f:9b:1e:e4:1a:be:ee:ec:a6:04:
aa:9a:d1:1f:5e:ae:ba:e9:ee:e5:11:90:d2:cd:ca:4e:4e:96:
ce:51:3b:19:d5:c6:97:93:63:d1:01:dc:e8:e6:f2:47:6d:4d:
48:75:35:fd:d8:14:47:b5:14:28:e3:7a:ec:65:12:74:4f:f1:
ca:f4:fd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:13:58 2025 by rpki-client