Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json)
Hash identifier: KhYkEOSkPxfoAdwEjRuARLIavXN1R8753Ta2Ngk/Vpo=
Subject key identifier: BC:98:B4:B0:7F:E4:58:76:9B:61:4E:C7:78:2B:E7:0C:24:52:9A:9C
Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c
Certificate serial: 0196C20274EE23B597B4E6CB2C797DD6FDD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
Manifest number: 0121
Signing time: Mon 12 May 2025 01:01:03 +0000
Manifest this update: Mon 12 May 2025 01:01:03 +0000
Manifest next update: Tue 13 May 2025 01:01:03 +0000
Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: 6g9am9g7pr+Y+4PScOX+hoT0b/4sKKlZzjFBUUDcyUE=)
2: wVZ7Q_yh7vY87ipQHKXps_Y5QUU.roa (hash: F0pmi/wk6PrJmlY3U42fDKf/ChECXrlPOqHq8mmS3J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:74:ee:23:b5:97:b4:e6:cb:2c:79:7d:d6:fd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c
Validity
Not Before: May 12 01:01:03 2025 GMT
Not After : May 13 01:01:03 2025 GMT
Subject: CN=bc98b4b07fe458769b614ec7782be70c24529a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:8e:b1:3d:ac:58:0c:e3:eb:3e:5b:db:ef:
d7:17:7b:80:d4:27:3b:c5:b4:56:50:dd:37:77:67:
02:fc:79:68:88:af:11:4b:bb:40:33:a3:fa:8b:13:
03:9b:b5:f4:2d:30:88:52:f5:93:8e:bd:e9:02:bf:
55:4a:a7:f1:75:2b:69:38:2b:f8:18:1d:0f:86:c9:
ba:5c:d3:fc:bd:cc:07:93:03:e6:72:e6:6a:0e:51:
ce:b8:70:ff:da:a2:d9:8e:7f:90:93:81:e0:70:83:
c5:96:7d:78:bb:11:e8:21:ce:04:48:22:cf:33:d1:
49:5d:f7:ad:20:70:06:33:a3:41:a7:55:17:fa:ce:
f9:c1:ee:e2:b0:33:4c:71:d7:bf:dc:91:97:13:c5:
1b:3f:68:18:9b:14:3f:38:a2:6a:cd:51:78:1a:37:
cb:92:cf:f9:90:a7:9a:8a:3a:78:47:32:ac:ce:3d:
63:07:7e:74:5b:29:7e:5e:12:c3:55:aa:93:e2:f1:
d1:80:40:3b:69:f8:1f:1e:05:5e:0c:88:3a:90:3e:
0f:40:13:10:97:4a:7e:b5:fc:20:e2:c3:73:55:0a:
fe:83:03:7f:97:7d:67:f5:b4:ab:5a:82:16:1c:fb:
c5:5a:48:a2:71:74:2c:1b:22:b1:24:53:b0:19:10:
d2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:98:B4:B0:7F:E4:58:76:9B:61:4E:C7:78:2B:E7:0C:24:52:9A:9C
X509v3 Authority Key Identifier:
keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5c:25:dc:3e:c1:93:7f:92:97:c0:e5:13:48:98:62:56:31:
ef:26:8d:be:e6:f5:bb:43:e5:c4:62:cc:c4:53:01:4b:71:d2:
d0:2e:82:99:36:e9:90:6f:ca:5c:63:9f:2b:6f:b9:62:3b:86:
f3:f3:bb:90:e9:07:86:5a:75:76:85:14:20:0f:29:72:1b:9e:
df:15:69:16:74:85:41:10:d4:be:e6:28:3b:e2:32:91:f7:e6:
0a:32:f7:4a:b0:c8:75:86:36:ae:55:6f:a3:09:67:91:73:09:
78:f8:dc:4a:0c:88:ce:da:34:00:a7:4b:0d:fc:31:7c:16:23:
60:6e:99:ef:d9:4e:ff:3b:93:37:be:9b:2e:b3:b8:5e:33:6c:
1d:3b:ab:d7:a3:fd:bc:44:0e:9f:4d:88:bc:a3:c5:25:1c:32:
2e:55:59:d3:5e:83:17:6e:89:3a:3b:41:46:0f:e0:5e:f5:5f:
84:fd:8a:c4:89:9c:79:3e:23:0c:6e:03:60:e6:35:d1:9c:70:
37:05:f8:95:c7:84:8d:d2:9f:7b:ab:3d:05:b4:77:a4:9d:4a:
23:d0:b0:e5:56:5a:c2:cb:23:47:e7:ea:34:bd:d7:52:db:73:
09:b6:e8:0d:37:38:28:e3:88:dd:68:3f:bb:a4:1f:df:0e:f2:
a1:0f:cc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:57:48 2025 by rpki-client