Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: vB83PcEsGjax2tskah3PC9a1b6/xYAfv3js2XBKHbUs=
Subject key identifier: 7C:31:1A:E8:CD:93:C1:41:2D:0F:E0:38:D2:E4:72:54:B3:E3:37:B4
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 0196A240459A7CB873E5E8AACE0DFD3069F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 21:00:43 +0000
Manifest this update: Mon 05 May 2025 21:00:43 +0000
Manifest next update: Tue 06 May 2025 21:00:43 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: tvphuI6Vfuq8PWw81635HTBNmEZu9iyDkDqpXc+qYxg=)
2: jNyaGdXh72CU4r0BXdX9NFKAwCI.roa (hash: KWU48qyL5wzO3wv8boVqiKFZ7+HfPReZF5Tc1JfbGeU=)
3: rU-a1L62W9yvQkesfV9xmSsuDH0.roa (hash: TGk/DUYw8VVmGx/evhfxGKscBfdKDMhClJqHTZwdFIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:40:45:9a:7c:b8:73:e5:e8:aa:ce:0d:fd:30:69:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: May 5 21:00:43 2025 GMT
Not After : May 6 21:00:43 2025 GMT
Subject: CN=7c311ae8cd93c1412d0fe038d2e47254b3e337b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:71:40:83:4d:96:f6:a3:72:ae:fa:ef:82:
fb:51:a3:f1:98:26:bf:c0:92:73:73:1e:72:12:e6:
e8:9f:54:4f:36:bd:4b:74:c8:99:13:e2:bb:31:e1:
1d:0e:b2:f5:f2:8d:64:a2:eb:3b:6b:0d:aa:8c:70:
c9:dd:38:3f:57:8a:3b:11:67:4a:03:24:a2:55:da:
ae:3d:ea:57:12:83:e4:fc:ee:84:3e:89:ec:53:5b:
65:0c:3b:e8:b5:98:9e:6d:95:49:87:9c:19:8b:69:
c3:28:c1:0e:be:f9:2b:05:d2:49:d2:92:d6:53:b6:
e6:4f:c0:f2:1e:c9:ed:70:c9:ce:73:cb:a1:12:50:
86:19:7f:c5:11:ee:e8:c3:d0:c0:7d:f5:93:2f:7c:
8f:e5:a4:8e:6e:ed:d5:00:34:7f:ae:d0:8f:8c:51:
03:c9:02:4d:f9:d8:33:80:9f:23:13:b0:31:16:8c:
9a:33:f0:0f:b0:11:ba:51:cc:44:4b:16:a0:be:16:
64:8b:ff:f3:e2:6d:37:30:87:77:54:fe:bc:04:d3:
ed:3f:1f:e2:d7:8b:94:f3:f4:a4:de:f0:23:b1:8c:
69:10:21:38:3b:1c:28:6d:61:a6:67:b1:50:3b:dc:
dc:de:c4:db:41:7f:9a:f0:3b:22:cc:36:7a:28:6c:
ff:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:31:1A:E8:CD:93:C1:41:2D:0F:E0:38:D2:E4:72:54:B3:E3:37:B4
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:26:33:ef:57:c7:16:a8:1e:32:34:58:1c:05:35:45:62:36:
dc:4e:e1:31:a0:02:8b:77:84:04:5e:83:ce:1e:2e:be:f0:e5:
2f:22:7d:2c:ba:7d:cb:3a:6e:5e:50:30:0d:c7:db:8b:b0:da:
e0:d7:90:56:fd:d9:27:c6:50:b6:32:b2:68:44:37:cb:75:4b:
94:71:fc:f0:73:ca:f7:6e:fe:60:92:7c:74:93:2d:2c:e7:f7:
7a:07:cd:72:65:0f:cd:05:9f:24:e3:8c:55:4d:3d:9f:e9:36:
79:56:4e:27:e5:4c:ae:0f:c4:47:f5:d3:2f:fe:17:69:23:cf:
1c:44:47:08:5e:de:9a:37:a9:f6:70:de:c4:1c:66:d4:7d:cf:
47:10:72:44:3a:33:07:9d:01:9a:d3:43:a1:6a:43:39:c5:8b:
d6:1a:a1:4b:e7:50:12:f3:33:0e:99:15:9f:c8:06:a9:62:c7:
78:2a:3e:8e:d9:4f:05:be:4a:69:c7:2c:bb:a8:a7:96:e8:b5:
13:15:9e:1c:58:c7:09:ba:ac:1f:94:6f:59:ce:8d:d2:42:70:
d3:a5:e7:9e:ec:ee:8c:d0:e5:3d:fd:a9:07:6f:81:b1:39:8f:
e6:df:f0:04:93:2a:78:23:7c:b5:97:02:54:45:79:be:8c:1c:
8c:a3:62:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:40:16 2025 by rpki-client