Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier: HK5kezw3qO8L6CvH1ibXI107OL8YqLeMbbNLFYh75bE=
Subject key identifier: D7:4D:18:43:AD:57:7C:F6:0C:F8:11:09:BA:BC:CB:EB:8C:45:66:EE
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial: 0196B822E0816E8780A442BC46DB64211089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number: 0196
Signing time: Sat 10 May 2025 03:00:15 +0000
Manifest this update: Sat 10 May 2025 03:00:15 +0000
Manifest next update: Sun 11 May 2025 03:00:15 +0000
Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: ZVkZztD3/LR4beL3Xz2wnhHmbIcMAlreXk4D2aV1lJ4=)
2: nNbHw-B9ovJEjkk8hXq6L72QjEA.roa (hash: gipZmwcUyYZU1rfrC2SjuA4uq7CTXt+ZJKoz6Ec8OnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:22:e0:81:6e:87:80:a4:42:bc:46:db:64:21:10:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Validity
Not Before: May 10 03:00:15 2025 GMT
Not After : May 11 03:00:15 2025 GMT
Subject: CN=d74d1843ad577cf60cf81109babccbeb8c4566ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:49:f2:92:cb:d2:da:cb:6e:38:dc:48:4f:
2c:c9:db:6a:56:9a:79:53:b6:dd:0b:ad:ce:a0:34:
ef:ec:de:ce:c1:00:18:f7:48:1c:1b:38:f8:74:aa:
03:fc:96:28:65:c4:26:89:37:61:57:cc:f1:b0:68:
d5:20:70:87:9e:fd:d5:eb:97:67:3d:61:fd:bc:b8:
58:f8:d4:be:78:59:87:70:7e:5a:0e:78:df:cc:d1:
6e:3b:6d:b0:3e:2a:96:30:4e:fc:78:38:2b:ff:63:
b4:46:72:22:ff:52:12:76:dd:6b:6b:23:a2:dd:11:
db:8c:82:cf:d9:22:23:6e:89:6a:52:c0:fd:b1:5f:
96:7c:4e:f7:68:1f:22:97:c5:59:86:f7:61:2e:81:
78:28:a5:4b:a5:8d:2e:f8:5b:73:03:9b:75:cd:7e:
49:10:e2:40:2d:78:d9:f5:b8:de:14:58:26:14:f0:
09:c5:d3:77:df:b2:92:4f:7f:4c:15:b3:a3:fd:9b:
dd:04:18:91:20:b5:eb:99:36:5f:0f:72:7c:69:9a:
0f:91:86:ab:13:f7:52:ba:af:99:b2:72:ab:0b:53:
d6:60:a3:65:f5:44:28:4d:60:f2:40:76:0c:a8:6e:
fd:81:5a:9d:53:99:8a:eb:39:39:e0:b4:9c:b7:85:
1e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4D:18:43:AD:57:7C:F6:0C:F8:11:09:BA:BC:CB:EB:8C:45:66:EE
X509v3 Authority Key Identifier:
keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:77:af:31:5d:52:5b:d5:01:81:84:d5:d8:04:91:2a:81:0e:
e7:77:b9:98:91:a9:24:14:44:75:18:c4:6e:c0:af:fb:9a:9c:
d8:22:64:9e:a5:ff:cf:58:90:76:49:e8:23:fe:85:0f:e4:a4:
f7:86:54:59:07:ac:88:f1:f9:bf:0d:0b:5d:f9:a5:c5:b7:90:
ac:a8:6b:9c:fa:bd:c7:f6:56:19:92:e7:3e:b3:ed:6d:f7:bf:
4e:52:5b:1b:7d:34:65:7d:08:bf:13:37:b6:91:3d:42:a8:d3:
87:ce:ff:44:ee:4e:0d:06:85:05:79:21:8b:fc:a4:8a:a5:db:
51:c4:bb:1a:9d:48:53:e9:73:d9:9a:e7:2c:57:19:03:9f:ef:
e7:c5:a6:61:17:0a:55:87:fe:d7:78:29:7c:32:6c:50:73:f5:
ce:93:26:be:d7:34:bb:f0:26:71:46:d7:66:9b:80:38:ab:94:
ee:ad:96:13:6b:10:e0:1a:56:2d:fd:0f:15:f2:b9:12:1a:80:
fb:5b:6f:12:b5:ee:0e:4d:cb:a6:8f:2d:1a:57:7b:54:51:cb:
79:a5:cc:18:bb:06:5a:80:b0:72:61:33:3d:bf:56:fc:f8:3d:
3b:57:0f:93:6c:8b:85:4b:d0:36:9d:8f:bc:8b:b8:0a:45:d3:
bd:87:3f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:28:26 2025 by rpki-client