Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: EcLDOwIphaEAE+kmQWM2wcvfAbll5aw8Rhy8FczFKSo=
Subject key identifier: 2B:73:47:5B:AD:75:9D:05:D6:EE:2E:78:52:46:25:08:7B:B7:C9:71
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 0196BD8037E4B15D1FAC9EECEE336C660C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 04:00:18 +0000
Manifest this update: Sun 11 May 2025 04:00:18 +0000
Manifest next update: Mon 12 May 2025 04:00:18 +0000
Files and hashes: 1: 2ut4gcmR75V3_QB4c_0bjHQRV8A.roa (hash: Z/Z7sYO20kciWO7Cd+RFwgDueOu/lt3nwibhugXBGT8=)
2: 8IrzZekkYTKoZhthQz-Ja8OIvRA.roa (hash: 5Ew3dl4XH0P4aPETfurdIQU/EHcW5/rwYQ03Cgm05/8=)
3: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: WcjzTtCEffO89vSrCPjmh9gUE8stEEl8zRRCBbCSkrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:37:e4:b1:5d:1f:ac:9e:ec:ee:33:6c:66:0c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: May 11 04:00:18 2025 GMT
Not After : May 12 04:00:18 2025 GMT
Subject: CN=2b73475bad759d05d6ee2e78524625087bb7c971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:a8:6f:57:f6:cb:0c:a1:0d:82:02:0f:57:
2d:6b:ac:0e:08:bd:2d:cf:30:61:d1:74:f0:64:00:
0f:12:03:f8:8a:f8:7a:31:2d:c1:72:92:9d:ec:d7:
a0:07:48:f5:42:88:0f:53:f4:b1:f2:51:aa:bf:72:
19:37:e4:2a:38:60:9b:ed:6b:1f:bd:79:33:89:d5:
25:ab:98:0c:06:90:55:1e:89:77:85:83:8b:95:eb:
0f:ba:66:c9:db:bf:d5:6b:d2:f9:01:5d:4f:2b:d0:
50:ce:5c:aa:30:9a:7c:97:a9:d6:01:00:51:66:68:
f7:65:5b:cc:78:1e:2a:dc:3c:01:4e:09:dc:17:5b:
40:7b:48:af:8f:55:7c:92:fe:6d:3c:31:fb:06:84:
1a:01:79:12:b0:6e:ec:e6:e6:65:bd:48:97:c3:64:
17:5c:12:12:a2:5b:a5:7b:57:14:26:1a:ee:c5:23:
1d:bf:37:21:9c:1a:58:db:34:0b:e9:c7:88:73:f7:
f6:6c:ef:83:21:49:3c:70:c6:fe:0b:12:be:4e:62:
97:77:19:70:b9:ec:c2:c1:01:0d:a6:3a:f0:8e:4b:
a8:0e:37:64:bc:33:60:06:05:ab:17:e1:5e:65:48:
70:12:cd:22:b3:1a:c5:6f:fd:10:8f:21:09:e2:8a:
32:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:73:47:5B:AD:75:9D:05:D6:EE:2E:78:52:46:25:08:7B:B7:C9:71
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ac:d7:74:b4:f6:1f:97:a7:3e:29:b9:6a:22:91:e0:88:59:
5c:25:81:8f:ac:64:31:c7:45:ef:c6:02:03:89:e7:1e:88:81:
d1:e6:eb:8e:68:78:33:26:d8:a4:cd:9c:3f:2b:3b:b8:8a:3e:
66:9e:90:04:ae:1c:d9:7c:82:3f:ac:af:00:21:d8:13:24:b4:
98:8c:e3:1f:3b:b9:33:39:97:ce:84:c8:2d:c1:9a:6f:0c:de:
8d:0c:11:31:57:ba:96:5b:ad:c9:ed:38:3f:14:8d:e4:a1:2d:
68:1c:84:51:cb:64:6d:0d:17:d1:38:b3:97:b8:28:1a:19:ba:
55:67:0a:89:1d:d4:9c:32:de:30:13:cf:a1:b6:96:1c:ff:fd:
69:03:e2:24:24:da:41:98:e2:fc:d7:a2:b8:73:de:28:75:39:
31:f1:91:78:72:88:cf:2e:8a:e7:72:d4:1e:d3:2f:26:a9:28:
7c:31:98:43:e5:63:b0:bd:31:38:ac:bc:14:51:3d:5e:ce:f9:
20:f6:5f:50:35:28:62:9e:c1:6e:86:01:7a:64:9e:a6:b9:22:
82:0a:16:d2:5f:46:b9:ea:59:c1:66:89:5d:d9:b7:3d:87:c2:
e4:ff:ee:c8:ac:76:b1:8d:27:dd:14:57:d4:c6:05:1e:98:f4:
a2:a8:0e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:28:58 2025 by rpki-client