Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json)
Hash identifier: DTD1aUHEPb+mqy30zH/BC+H84tTbNcIYflJqq9sGa1Y=
Subject key identifier: BA:15:45:8B:BC:02:9D:0F:9F:9A:4F:44:3D:23:F7:34:38:6D:94:97
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 0196A465FF9A8DB64BFF4C68BA03B04665A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
Manifest number: 153A
Signing time: Tue 06 May 2025 07:01:09 +0000
Manifest this update: Tue 06 May 2025 07:01:09 +0000
Manifest next update: Wed 07 May 2025 07:01:09 +0000
Files and hashes: 1: 8it1mnGsBB_0bpcwXcQ7puN3Hok.roa (hash: DK3oH31M5a3fOw5ohHJX58zCY8Qd9F+oTkaNS/1tWA8=)
2: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: wH8RcXx6ZXiw+JzGwd4oBYAh7WvCS62FznWf6qlfyME=)
3: bOyfi-z2wqC5OBTk4v100ve7CxI.roa (hash: WiyMw0UdlKQAlB0ieoJy4RAqYir7UCqclb4nu/UNQCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:ff:9a:8d:b6:4b:ff:4c:68:ba:03:b0:46:65:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: May 6 07:01:09 2025 GMT
Not After : May 7 07:01:09 2025 GMT
Subject: CN=ba15458bbc029d0f9f9a4f443d23f734386d9497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:ea:2e:ea:21:45:83:0f:4a:9d:e9:11:29:
18:cf:f3:41:2e:2c:22:3e:65:41:1d:d5:6a:d5:33:
eb:1b:d4:85:be:8a:7b:77:56:0e:aa:f1:f7:71:7c:
37:93:a2:cb:df:1e:db:83:26:6a:25:8a:e0:d8:c1:
b9:8f:1f:55:55:0e:61:8c:6b:84:57:12:00:45:bb:
62:17:ae:f1:91:4f:cb:ef:09:22:19:4c:c8:ec:74:
fc:52:25:3d:27:62:74:fe:dd:39:dd:db:4c:94:43:
1a:97:39:08:85:e7:d7:76:4b:ed:39:a8:f8:0f:3d:
e8:4b:50:46:0e:c8:c6:45:19:eb:6f:8a:7f:42:58:
98:a4:75:af:89:67:59:fc:43:8b:01:c1:bc:45:67:
f0:ce:95:77:cd:de:d2:ee:16:17:26:e8:a0:fa:72:
c5:47:1d:ae:60:7b:78:22:07:6e:b9:d3:81:00:27:
21:a9:c9:f6:b4:d4:e2:4a:ef:4a:af:23:3f:03:15:
23:69:f5:e1:a2:6a:7c:e5:0d:e0:06:c1:06:d4:b6:
9d:e7:84:49:9d:da:33:fc:73:78:4b:3e:ed:dd:1a:
54:63:85:2d:df:f8:a6:b3:7e:c3:01:7b:68:75:23:
a2:02:b7:97:a4:60:89:61:cd:c4:ed:24:07:c4:27:
0e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:15:45:8B:BC:02:9D:0F:9F:9A:4F:44:3D:23:F7:34:38:6D:94:97
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f3:52:f3:91:6f:87:56:f0:0e:88:32:c9:18:b6:9a:f0:02:
52:02:46:cb:f0:56:66:44:36:51:1c:75:10:9b:54:14:4c:da:
12:f4:4c:58:ee:ab:81:c1:8e:9a:ae:d6:ec:85:4e:68:4e:c3:
53:38:4d:f9:ad:52:67:fe:88:24:d4:e0:14:65:6e:8a:d2:91:
4b:56:9c:87:b2:76:90:b2:9f:26:06:c9:b6:ae:8a:26:26:0f:
68:52:6a:b7:94:db:a7:1b:18:94:89:03:bd:95:25:47:b9:60:
d8:14:b3:1a:dc:7a:e6:a7:d9:e6:c7:a6:97:39:04:cf:c0:71:
03:47:66:61:de:5e:72:df:f4:d7:65:b3:60:ac:7b:93:9c:b1:
46:1f:c6:c8:92:35:5d:71:48:b5:8d:20:a0:78:16:6e:12:39:
11:72:95:f1:82:58:67:47:28:88:16:9b:82:c1:97:b0:1f:ae:
e4:6c:d4:5a:c0:b3:2d:76:1b:b3:f9:30:8a:9f:4d:ea:22:a3:
f1:fe:a8:e0:ec:71:89:8a:bd:76:f9:8a:c2:81:82:62:9e:c5:
f5:74:c2:3c:44:2a:59:5d:20:5c:95:20:00:d5:b9:57:d7:77:
ae:84:72:63:fe:30:88:9f:3f:66:b6:af:b7:c7:ee:d7:19:17:
b1:ad:5c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:17:34 2025 by rpki-client