Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
File: Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json)
Hash identifier: olzfhqg4TyG1TTkdpYC3ZNeLhx+I2+78DBTyL3dAZjc=
Subject key identifier: 4C:F0:56:3F:40:D4:D1:00:21:7C:B1:C5:92:B2:02:34:09:80:D5:84
Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Certificate serial: 0196C502BCCB4104D3A83998BC00054D023A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 15:00:12 +0000
Manifest this update: Mon 12 May 2025 15:00:12 +0000
Manifest next update: Tue 13 May 2025 15:00:12 +0000
Files and hashes: 1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: BAgnZj3SYGkkNFe+Zmfk62e4jOgS0kFH1s9kyIGAdDQ=)
2: pFcInvEW15iKWvoPMx5EVwuCano.roa (hash: nE+nXG0xZdbwspGUmTTrOhLDVrJyA6M8TZL//6qKpZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:02:bc:cb:41:04:d3:a8:39:98:bc:00:05:4d:02:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Validity
Not Before: May 12 15:00:12 2025 GMT
Not After : May 13 15:00:12 2025 GMT
Subject: CN=4cf0563f40d4d100217cb1c592b202340980d584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:3a:41:05:a7:c7:a0:fe:a6:bc:3f:2f:cc:
e7:20:85:dd:25:5e:fd:49:e9:fb:e5:9e:9a:bb:9a:
4a:3f:08:2b:d1:65:f6:64:20:09:23:3b:f4:1f:8f:
df:10:4a:ec:a4:1d:84:6d:9b:04:02:90:87:7f:ca:
dd:b6:c1:b4:24:3d:1f:a5:af:60:a1:94:81:7c:7c:
35:b7:bb:84:93:b7:49:e1:1b:f1:65:d2:bd:e8:83:
33:7a:c6:0f:37:2b:97:d0:75:88:cc:b5:92:d3:21:
44:43:5c:d9:86:58:94:a6:e6:dd:1d:50:3d:a4:a4:
8d:a4:46:fd:93:0f:ae:ee:55:22:a2:a4:f3:57:e9:
87:7c:e5:f0:72:9e:27:07:58:86:7c:4c:83:a2:04:
e5:f0:0e:fd:b6:6f:05:8f:e3:30:6a:9b:44:eb:4a:
84:33:13:9b:b9:f6:cb:4f:60:bb:1d:e2:cb:f7:7d:
94:35:d6:ac:4c:09:8b:1f:49:22:3f:37:c4:9d:3f:
47:55:f9:b2:53:cf:94:ac:6e:99:38:56:c2:7e:9f:
ed:49:a6:3b:70:2a:c6:62:61:9f:dd:9d:fe:be:b1:
4e:9a:a9:c1:ce:d8:ac:ed:f7:ef:8c:61:f1:a1:f8:
9d:d9:cb:1c:01:97:d0:e9:93:f2:ec:10:b2:40:09:
e8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F0:56:3F:40:D4:D1:00:21:7C:B1:C5:92:B2:02:34:09:80:D5:84
X509v3 Authority Key Identifier:
keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e1:bf:e7:0b:bf:d8:e7:45:ba:88:98:c5:cc:5e:3d:51:da:
b4:d2:6f:d2:89:25:fc:32:df:b7:54:76:81:da:e7:7b:c7:94:
d6:61:ab:e8:7c:b1:a2:ac:bb:d3:02:70:ef:a2:30:ff:ba:e9:
2a:11:b2:ab:05:df:ad:a8:47:a5:92:e0:84:8c:2c:e7:7a:7e:
48:11:30:a3:43:fb:9b:e4:42:4c:27:7e:71:bf:76:ce:33:df:
3c:57:e6:5b:b4:8a:b7:93:5b:9c:6f:05:34:8d:af:2e:74:d5:
0f:af:a8:31:16:5f:83:51:c2:94:45:72:89:cb:c5:05:06:bf:
e0:e9:c5:e4:70:53:9b:94:94:2b:5f:61:a8:12:1b:9d:20:57:
76:9b:0b:06:a5:b6:5e:a7:5a:45:48:b2:84:d7:fb:52:24:93:
41:c4:6a:5a:17:19:11:86:ec:e9:7d:33:5d:d5:f3:ee:bd:4c:
b3:fe:21:84:1f:80:f6:23:90:47:5d:7a:b9:70:a0:1b:4a:67:
c6:19:87:ca:da:4e:8e:76:db:4e:79:f9:8f:ce:d6:4f:f7:25:
14:1c:5d:c9:05:cd:2d:56:a6:12:a6:c5:b3:94:fd:e6:d9:95:
97:af:c9:9b:56:30:48:a1:3b:f6:ee:26:a4:98:d5:6b:18:1b:
f3:e9:0b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:33:57 2025 by rpki-client