Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: TNaF9j50bwWy5ZrOcPzSPBmYobmzKVVhCUTsjoVAPqs=
Subject key identifier: D9:75:32:39:91:C5:E0:38:1E:60:4B:65:C4:EE:03:BD:F4:91:B0:8E
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 0196A68AB92C545A22F750DEB37492704702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 152A
Signing time: Tue 06 May 2025 17:00:31 +0000
Manifest this update: Tue 06 May 2025 17:00:31 +0000
Manifest next update: Wed 07 May 2025 17:00:31 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: eYpbD4UT38BLBcj1cLs1Ldx6E4MJ9l95pp61iwijVq0=)
2: RyUHQEgGXjRJvvBofzPoVBVvJLI.roa (hash: 8LvL1DJ5MAmrFF0fUbGtnSpplfiMkmqva41THaM74ck=)
3: s_oUhLMqLfuuuJ5GAra3RGPGuEo.roa (hash: lMo8tMkOr3gYSijDEd95RyC1UxQ+xYW4gIbbh74Ckwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:8a:b9:2c:54:5a:22:f7:50:de:b3:74:92:70:47:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: May 6 17:00:31 2025 GMT
Not After : May 7 17:00:31 2025 GMT
Subject: CN=d975323991c5e0381e604b65c4ee03bdf491b08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:87:d2:cc:4d:98:e5:47:2e:83:54:0c:26:d5:
5e:e0:ac:b8:87:7d:fc:71:c0:63:63:cd:a6:c4:bb:
d2:82:c3:ec:b2:6c:9a:b0:9c:8c:e9:7e:d4:0c:c0:
14:b2:8e:c8:96:34:15:c0:d7:d2:ad:26:3b:84:29:
62:a2:93:3e:d6:fd:06:3d:9b:66:b7:2c:92:74:1b:
b3:a2:9b:59:b6:80:61:15:0c:8a:c1:1f:f5:ce:b8:
0e:e5:f6:25:f5:ae:90:93:0f:73:88:72:72:51:17:
ba:ae:60:e8:56:e9:a3:fd:ad:16:2a:43:80:40:52:
50:97:38:f2:67:53:85:28:3b:bd:16:33:f5:21:d8:
0d:dd:90:a7:ba:b6:9e:f3:dc:76:71:94:9f:6f:62:
d1:a1:80:9d:a9:b1:45:7e:bc:45:8d:ca:f8:55:6b:
dd:91:0e:e1:e9:16:d0:bb:6f:7e:87:f6:24:ee:07:
a4:a8:6f:2f:aa:73:c4:ec:58:ec:68:d6:53:75:71:
54:a5:d4:b3:ae:40:77:0d:e3:dc:18:ea:13:32:d6:
9d:3d:62:13:1c:76:01:f5:e9:2e:44:cb:9e:b9:44:
9c:6b:1d:84:f2:0b:57:e3:53:e1:94:ca:1a:16:7b:
24:89:6b:ee:b6:f1:13:ef:5d:33:09:dd:b2:b0:32:
50:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:75:32:39:91:C5:E0:38:1E:60:4B:65:C4:EE:03:BD:F4:91:B0:8E
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:98:ef:40:04:ec:46:af:3e:85:f0:f4:d7:4b:84:41:65:1d:
d0:ef:7b:2a:bd:2c:79:5e:01:64:f5:35:25:38:67:02:bf:24:
39:9f:66:9f:10:b7:21:f2:e6:73:8f:da:a3:02:c7:b3:b4:3d:
86:51:f4:b8:4c:07:fa:86:5e:cf:40:87:39:61:8b:a4:17:a7:
83:cb:93:47:7e:9a:e1:76:bc:ad:6e:0a:87:3a:82:04:3a:1e:
16:9a:a4:65:d8:4e:fd:0f:94:88:8e:57:6d:a5:30:29:b0:88:
80:3b:c5:5f:96:23:03:0e:15:4a:e3:ce:7f:e3:7c:a7:dd:27:
80:9d:0c:d6:19:6c:75:c0:e6:2d:43:30:26:ea:d1:7f:6d:88:
96:b2:76:2a:14:b7:c4:f0:36:00:d6:9d:78:2f:01:87:c3:53:
ee:6b:8e:0b:07:24:73:6c:40:cd:66:53:42:15:aa:32:d4:38:
87:3c:4b:3f:0a:d6:5b:84:8a:99:0d:79:1d:f6:de:76:50:7d:
f5:a9:07:12:82:1e:27:23:f0:10:1b:bf:c4:29:e8:03:fb:7f:
d4:e5:f5:a5:88:1d:41:af:5e:b9:d3:5f:b9:ea:59:47:a3:0e:
7c:4e:dc:66:76:f8:6c:e4:4a:fb:98:12:3d:e3:bf:7b:59:56:
28:17:0a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:17:44 2025 by rpki-client