Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
File: Q1lOVdyWy5uYClKqY35IqNhzicA.mft (raw, json)
Hash identifier: JqVleSYFEbOLDiJug4nFnxdDEa8LXkc1qK3++8MrmFI=
Subject key identifier: C0:0F:92:9A:9D:B6:34:F8:44:6D:6D:52:BC:9D:DD:13:5F:79:21:91
Authority key identifier: 43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
Certificate issuer: /CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Certificate serial: 0196BFA5D43706018AD5AAB570F5A339C659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 14:00:38 +0000
Manifest this update: Sun 11 May 2025 14:00:38 +0000
Manifest next update: Mon 12 May 2025 14:00:38 +0000
Files and hashes: 1: Q1lOVdyWy5uYClKqY35IqNhzicA.crl (hash: vsFfn1CbKQd0SL4nes7vSAL3VGpsWgdBGh5Ca76fZns=)
2: ZV9AgWO6uhagwHDD9I6tZkK9CXE.roa (hash: r40ZyDvHygBFDbvKP6P/hRu0VsEVvZUOQj6L+ANjkj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:d4:37:06:01:8a:d5:aa:b5:70:f5:a3:39:c6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Validity
Not Before: May 11 14:00:38 2025 GMT
Not After : May 12 14:00:38 2025 GMT
Subject: CN=c00f929a9db634f8446d6d52bc9ddd135f792191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:73:dc:3c:c2:98:a7:18:3f:ed:e3:23:61:
8d:78:6b:28:f0:dd:e8:27:39:07:ba:5c:fd:3a:b3:
0f:66:59:23:a7:21:71:cf:5b:30:8f:4b:8d:51:e9:
69:eb:a3:ae:74:c7:2a:63:ee:65:b7:75:b2:50:5f:
8c:e6:67:43:dc:ab:89:4a:e5:b5:b8:e4:10:16:b7:
71:6d:f8:a0:df:8c:ad:b7:20:50:1a:0f:82:97:85:
a5:ec:57:5b:c0:b7:e7:db:4b:0c:29:8b:33:40:ef:
5f:62:e9:b0:1c:28:1d:1d:c8:27:a0:c5:00:33:d3:
5f:f5:96:fb:a3:ab:3a:f6:a5:63:37:50:f6:df:4a:
b5:3e:55:4c:0c:aa:e3:06:35:97:e3:4a:ee:dc:80:
3d:80:29:08:21:0f:61:ce:b3:21:d9:91:bc:a3:e3:
89:3d:86:3b:4d:e9:d8:b4:6d:b4:32:fe:53:15:19:
0c:d8:0a:62:07:cf:07:f5:8a:31:e5:91:1b:3e:c6:
0d:1c:fa:2b:cb:85:0f:ad:9c:ea:66:32:b7:a4:83:
7d:ef:61:51:00:88:2a:a5:1e:fb:1c:b8:9c:81:69:
ca:65:79:d3:34:b7:46:81:a6:f6:d4:97:d6:03:a2:
5d:6b:17:ff:fa:31:e2:8a:93:dc:3c:9e:04:1f:82:
5b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0F:92:9A:9D:B6:34:F8:44:6D:6D:52:BC:9D:DD:13:5F:79:21:91
X509v3 Authority Key Identifier:
keyid:43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e7:82:c9:88:01:45:49:6f:53:95:82:be:6d:be:28:9b:8a:
7a:a9:5a:32:1a:13:4b:0d:a1:0b:a5:e9:d5:95:c7:33:ba:d6:
31:1a:06:33:38:69:83:06:24:0f:dd:04:d7:e2:47:8b:f1:c6:
6e:78:7a:76:8b:ae:74:86:75:ee:c0:14:85:5b:8d:eb:8d:ae:
61:ec:c5:59:dd:81:6e:e7:0e:b2:34:a7:33:f2:73:db:82:64:
27:8e:1f:3e:74:fb:dd:27:65:ea:fe:65:81:bc:18:00:13:35:
e1:b8:34:bd:21:ac:27:ba:d4:6b:3a:d9:8c:5d:69:94:cc:d9:
58:7a:37:95:a9:99:7e:90:e8:27:f5:b7:0e:49:8b:17:ee:3b:
83:ba:7f:09:4f:4c:4e:fa:70:f7:b0:ff:89:d9:5c:31:9d:6a:
31:d5:13:42:92:c1:4a:dd:46:85:80:d7:37:1c:7f:2a:7a:55:
78:44:29:33:73:c6:11:be:89:bd:64:c5:b6:91:37:88:4b:df:
e9:b2:20:23:78:3a:f5:25:4d:18:61:16:77:92:c2:9f:fd:4f:
83:02:2f:d1:c7:d2:e7:6e:59:6a:ad:0f:43:fb:c1:6d:3f:96:
41:60:ab:df:56:6d:68:71:4d:32:d6:49:e2:bd:45:f1:8b:bf:
e3:69:00:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:10:22 2025 by rpki-client