
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier: BzEHhwWSw4MbV/BCrJR1ev9LQyLHE21hxOWj7vrZs70=
Subject key identifier: 1A:EA:B3:11:CB:58:8C:FF:CC:4B:DF:B5:1B:B9:F4:13:EB:EC:8A:23
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial: 0196C4CBF4FD19E3B4D07588F9558630C6BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 14:00:22 +0000
Manifest this update: Mon 12 May 2025 14:00:22 +0000
Manifest next update: Tue 13 May 2025 14:00:22 +0000
Files and hashes: 1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: q4NjrxviKaH+esBajm6hDcFYo9dIqonNjJ8vkC0nhmY=)
2: Cw8lON9cQpyLxWLsB7DBvYnd2Bo.roa (hash: c1sm3zXHf/J5zcMO21JKPte22JewQndWNsFvlD4ZQmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cb:f4:fd:19:e3:b4:d0:75:88:f9:55:86:30:c6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
Validity
Not Before: May 12 14:00:22 2025 GMT
Not After : May 13 14:00:22 2025 GMT
Subject: CN=1aeab311cb588cffcc4bdfb51bb9f413ebec8a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:95:68:c5:58:78:78:e7:fb:e1:2d:f7:ba:78:
39:09:c4:45:f9:7f:92:aa:ed:21:0a:3d:5a:ba:3a:
85:95:12:77:fb:b0:44:46:1f:72:29:40:bc:d7:dd:
5e:1c:86:02:fd:56:d1:a9:05:32:f2:3d:55:83:da:
69:37:c5:1c:08:39:db:49:bb:05:b0:7e:d7:7c:eb:
a1:8c:a4:9a:48:1a:74:7d:8a:61:38:2e:d8:fb:9f:
b8:34:3b:12:e1:48:ff:1b:c5:19:9e:9a:19:74:bb:
3c:e5:97:b1:61:6e:05:17:a6:09:43:2a:0d:b1:64:
fb:2b:fd:17:12:62:ae:65:f5:1c:54:71:a5:0d:c4:
d7:51:9e:b2:f0:34:3f:a4:65:33:20:dc:12:fa:b5:
f4:11:e2:e4:cd:a1:cf:9d:c8:20:dd:1d:33:9b:45:
9c:cb:4f:bf:d8:db:1a:76:5d:6e:2c:5a:63:ad:65:
a8:5a:c8:27:e5:b0:60:a5:25:17:33:9a:35:35:4c:
b4:ae:c8:9e:8e:9b:3e:f4:50:0b:08:b9:00:67:10:
6e:77:94:2d:8e:8a:1a:5a:0f:4d:cb:44:94:d3:d4:
ba:7f:29:f9:80:53:27:2b:8e:92:1a:85:6b:fc:a1:
5d:94:8a:78:f0:d7:d0:e6:69:ad:f1:df:43:03:1d:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EA:B3:11:CB:58:8C:FF:CC:4B:DF:B5:1B:B9:F4:13:EB:EC:8A:23
X509v3 Authority Key Identifier:
keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ca:05:57:78:1c:af:f9:18:cd:3e:17:3b:3d:e1:01:ff:59:
38:d7:92:0c:e2:01:8e:f6:a0:3f:03:ad:29:a4:38:f6:06:d1:
99:c5:05:07:e5:37:37:ef:59:61:60:17:9f:62:67:8e:5d:fe:
2a:c0:80:da:9a:7a:d6:81:b9:51:06:32:2d:c4:99:ba:2c:cb:
48:83:09:4b:5b:f6:5d:e2:5b:d0:a9:8c:ca:34:b2:9f:4c:a4:
0f:53:89:c1:1b:14:81:4f:6e:41:92:a1:bb:6e:18:60:de:17:
09:78:d1:1b:4e:32:ed:b7:e1:71:58:0a:98:38:cf:47:86:74:
af:f8:58:2b:ac:1e:ac:f0:dc:e3:1b:38:d0:64:2a:93:81:8a:
c6:2d:5b:69:64:7e:53:db:37:51:d6:19:25:f9:7e:db:50:ff:
2b:cc:22:d3:0e:52:39:8d:14:29:c3:33:c6:7b:a7:a9:93:b9:
b0:72:ee:61:bc:93:7a:a6:0c:1a:80:67:54:7f:67:b9:19:0c:
13:c2:01:f2:72:41:42:b6:1d:bb:a7:f3:d4:ef:c9:12:46:b5:
45:bd:72:f4:64:0f:c7:18:6c:10:b2:f3:ee:8a:51:4d:ea:c2:
54:b7:ac:34:ed:21:cc:33:f4:bd:aa:df:2e:87:a2:ec:e6:81:
09:6b:bb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:18:53 2025 by rpki-client