Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
File: 1-qTuqG-fPm54gbS42hmh0nJehxA.mft (raw, json)
Hash identifier: 9Ytc6BWJW19X7Uz+13xwAb03teztT9mMOkRNSHFSWtY=
Subject key identifier: E0:B5:42:BD:48:C3:28:A3:37:33:8F:B6:B8:88:B8:8F:7A:01:53:29
Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
Certificate issuer: /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Certificate serial: 019675D545B554B55C5FA8384799650517EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 06:00:33 +0000
Manifest this update: Sun 27 Apr 2025 06:00:33 +0000
Manifest next update: Mon 28 Apr 2025 06:00:33 +0000
Files and hashes: 1: 1-qTuqG-fPm54gbS42hmh0nJehxA.crl (hash: t2lm4pRSBtKGgG0Brd0+18b5i/amJN4AD7vCEwX9UUc=)
2: jnyTmD1DxoXGsX8QKO4GFLyk0hU.roa (hash: VHKaN5/CfBmdBMdYUm6aa5suZnMbN/eE/uaYAJ9tsUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:45:b5:54:b5:5c:5f:a8:38:47:99:65:05:17:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Validity
Not Before: Apr 27 06:00:33 2025 GMT
Not After : Apr 28 06:00:33 2025 GMT
Subject: CN=e0b542bd48c328a337338fb6b888b88f7a015329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:c3:0d:84:33:a4:a2:45:7e:14:ee:61:d8:
74:4a:e8:40:db:4c:ad:ca:f9:73:4b:61:8a:ca:55:
42:92:b1:c5:eb:26:7d:a2:43:b2:94:3e:a7:fc:0d:
cc:99:b1:0a:e8:6a:65:7b:75:fa:81:70:1d:54:8b:
15:04:ea:3a:f3:05:f6:0b:8c:fe:ec:56:8d:1d:2e:
14:55:15:e9:2b:d9:a1:f7:57:e4:c5:df:95:d0:2a:
8d:b1:4b:ae:61:1b:e8:dc:d0:0c:a8:45:bf:72:d3:
71:f5:17:0a:dc:a0:09:3a:30:d4:31:c4:ec:26:3b:
8a:8e:e1:f7:7c:f0:af:4c:50:a3:aa:92:f2:78:6b:
a3:69:cd:fa:79:f9:18:04:d2:ee:92:3b:0b:5c:fe:
23:9d:c4:00:06:80:32:dd:27:bc:4b:fe:45:53:e5:
e6:ae:fa:0d:87:8d:98:2e:96:c5:f0:ef:03:e0:a2:
9d:d2:19:61:88:6b:12:40:6c:5a:e7:fc:8c:33:4f:
4b:9a:13:97:f0:cf:9f:9e:18:08:19:b6:a1:bb:81:
a1:cd:6c:06:3c:51:e4:49:48:66:7a:41:c5:ba:26:
2c:c2:52:44:3a:1a:c0:8f:00:fe:b7:28:01:a3:46:
1d:df:22:f7:05:d4:94:04:0e:35:2e:f5:58:82:8b:
a9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B5:42:BD:48:C3:28:A3:37:33:8F:B6:B8:88:B8:8F:7A:01:53:29
X509v3 Authority Key Identifier:
keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e2:6b:c5:25:c8:2a:af:76:76:c3:f6:88:b0:c3:b2:05:f7:
57:44:ae:13:9c:04:11:f1:14:67:4c:d7:77:69:89:2d:cd:7f:
7d:37:66:25:d7:ff:dd:ae:3e:73:ce:2c:d2:2d:d5:80:3f:04:
f2:07:18:6a:1a:eb:e5:35:c6:85:1a:f6:b9:2a:77:04:b5:3b:
12:04:71:87:4d:2c:77:41:e6:df:8d:61:10:ee:71:bc:eb:5d:
8b:98:8c:e7:97:51:0f:4c:d6:6b:9c:9e:52:e4:01:d6:d6:b0:
ba:ae:d6:1a:0f:f4:34:8d:74:82:2d:f6:6d:33:6d:a2:11:3c:
35:f8:5e:2e:4b:00:5b:7c:7e:49:83:10:20:27:32:8d:70:7d:
8c:71:3b:ff:ce:b1:0d:c1:d6:20:73:e9:41:70:7b:64:6f:84:
d5:9f:b4:1d:67:72:fc:7c:7e:9f:5f:69:f1:b3:97:92:b7:3e:
a0:8a:f5:f8:e5:a5:f1:7b:ca:40:d9:21:ca:59:29:d0:9c:d7:
c6:b1:74:46:83:dd:da:7f:d3:df:28:5b:69:3c:fc:c3:69:a6:
28:2b:7e:78:b0:e5:02:e7:8f:a1:c3:e1:b6:b4:bf:20:e7:9e:
58:70:ea:bf:a5:eb:45:f6:f4:a4:00:d7:5a:d9:39:75:52:d7:
20:f8:e3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:27:28 2025 by rpki-client