Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
File: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft (raw, json)
Hash identifier: ORztRys+sAewa7lNJO3Y9sVg9ykEYYNq5q22Vs0Fmr8=
Subject key identifier: 13:1A:0E:E1:51:23:2F:AC:5B:69:60:27:36:9F:31:20:2C:4D:3C:74
Authority key identifier: 00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
Certificate issuer: /CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Certificate serial: 0196BA48EB27BB710C17FE80A5F72EE18C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
Manifest number: 0678
Signing time: Sat 10 May 2025 13:01:02 +0000
Manifest this update: Sat 10 May 2025 13:01:02 +0000
Manifest next update: Sun 11 May 2025 13:01:02 +0000
Files and hashes: 1: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl (hash: nCE7LYIPMfUVDXE+f7i75rQwm3t/0vNkTEW8PqVYCAg=)
2: wMWuF3SVMuDIRng4fcNAPXQ4AjA.roa (hash: TLB7j9h/GLQ2Xf40vyUq/3XDhGfoA1ufwio0cDXXu5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:eb:27:bb:71:0c:17:fe:80:a5:f7:2e:e1:8c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Validity
Not Before: May 10 13:01:02 2025 GMT
Not After : May 11 13:01:02 2025 GMT
Subject: CN=131a0ee151232fac5b696027369f31202c4d3c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:59:68:ba:39:b3:6c:05:e2:67:0a:e0:a9:
79:e5:07:01:c8:88:33:90:1f:bf:9c:f7:b9:9f:c7:
47:f9:ed:d5:e0:4e:12:8b:e5:43:ed:79:16:2b:6b:
af:54:db:fc:a3:29:87:1f:5b:8e:eb:30:dc:e0:0a:
37:f1:be:eb:c2:d6:86:cd:e1:14:19:9d:88:bf:c0:
ba:69:7c:d8:89:5b:a4:1f:af:fb:4d:04:ff:f5:10:
b3:05:d8:2d:88:ee:06:d7:3a:85:b1:42:e5:77:fb:
34:d2:c3:66:48:3a:e1:d1:47:d4:96:b8:3a:86:3c:
5b:d2:77:a1:84:33:3a:61:45:d1:18:80:0f:40:01:
ea:20:02:76:28:6d:f2:1b:f9:b9:eb:75:3d:aa:74:
2f:27:d2:df:6f:de:a7:11:fd:7c:4e:e2:12:5a:ae:
ff:46:2a:a8:cb:2a:d0:d2:ad:03:39:f8:9c:03:60:
80:91:eb:d7:9a:c0:17:ef:b0:16:61:39:ae:4a:12:
5a:ff:d2:c6:15:03:69:d6:a6:00:38:e2:5c:45:ca:
4f:e8:2c:42:73:3b:d5:cd:8e:7e:29:2f:1a:8d:18:
d8:8e:b9:ea:a3:ee:54:34:25:43:6a:ca:68:52:c1:
f5:06:56:44:c0:8d:74:4c:ae:34:f9:78:2e:5b:87:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1A:0E:E1:51:23:2F:AC:5B:69:60:27:36:9F:31:20:2C:4D:3C:74
X509v3 Authority Key Identifier:
keyid:00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:83:a2:ff:8b:08:01:19:23:ad:c6:74:58:23:35:a5:a8:f3:
9b:6d:b2:d2:c4:e6:a8:07:e2:66:e3:cb:c4:d7:31:fe:30:d3:
c5:11:59:ff:44:eb:a4:d6:fe:d1:d1:6e:d4:15:b0:2c:10:ae:
c2:0a:ca:3d:27:56:cb:d3:56:26:69:86:e4:be:1b:5f:ad:0f:
a9:99:7b:f5:61:cf:d0:39:a7:88:38:bf:6a:f5:af:a2:7b:f9:
77:db:97:90:f7:14:6c:5f:81:42:cd:84:24:f4:6f:e5:e3:d3:
7e:54:7c:ea:70:64:f4:f5:09:f5:79:73:a1:e0:ba:86:b1:fa:
ee:a7:56:d9:94:c3:6f:2c:4f:e4:8b:ff:d4:0c:8f:cd:40:74:
06:51:e8:90:db:0e:95:ca:0d:8d:e5:bc:d9:91:f2:ea:ae:32:
85:79:30:9e:93:26:e3:ee:35:44:0c:75:f8:02:c8:f2:a9:fd:
6f:ce:ae:6e:1a:ea:6f:ef:d0:ac:28:56:b6:92:c7:b8:3e:88:
0b:5b:b3:35:fd:2f:dc:2b:4d:53:e2:9c:2a:44:c4:e2:a1:d5:
d6:81:98:f6:35:f8:51:c0:ae:b2:a1:59:90:69:38:58:bb:14:
96:93:c4:a6:99:66:37:05:d7:ed:a1:89:25:eb:80:86:ce:b7:
85:17:92:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:06:49 2025 by rpki-client