Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
File: RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft (raw, json)
Hash identifier: YmUW03Z81H8E+p5q/dDlMiPUe9BvPblHLrucXfZqdFY=
Subject key identifier: A6:26:12:0E:4F:B3:1E:7E:55:03:AF:08:74:C8:B3:3A:05:5A:0B:7D
Authority key identifier: 44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A
Certificate issuer: /CN=44f610f872cf31b7c3224cd2c1669c9968350b7a
Certificate serial: 019689CA2F179EA9C8051733B56AF9676691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
Manifest number: 1518
Signing time: Thu 01 May 2025 03:00:50 +0000
Manifest this update: Thu 01 May 2025 03:00:50 +0000
Manifest next update: Fri 02 May 2025 03:00:50 +0000
Files and hashes: 1: RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl (hash: GKP2fG55COxG9C+12E/VNPc9Nl3DWpCio5PyKfoGtuw=)
2: ZmJk3i0UqR_uJ_XLaSjGUe2aH00.roa (hash: BCwdh7j1ZUyJ+mVEfLtfrzwX+n9rg9YN807VJjPHsUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:ca:2f:17:9e:a9:c8:05:17:33:b5:6a:f9:67:66:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f610f872cf31b7c3224cd2c1669c9968350b7a
Validity
Not Before: May 1 03:00:50 2025 GMT
Not After : May 2 03:00:50 2025 GMT
Subject: CN=a626120e4fb31e7e5503af0874c8b33a055a0b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:23:43:1a:42:c1:f6:44:b3:fa:3c:f3:29:
c0:d7:d1:0a:02:2e:88:35:02:19:4b:28:e7:3a:a0:
51:ec:ac:db:24:4a:2c:39:20:85:b9:0f:07:33:a9:
06:5c:85:49:41:ae:ae:70:01:1a:a8:af:b2:ce:bd:
74:7b:0e:24:75:c4:30:1d:25:ea:78:85:60:b9:2e:
d1:8d:dd:7a:d8:93:9b:aa:b9:08:61:34:6b:14:38:
f6:de:d0:ac:b8:ba:e5:83:38:64:cb:2b:81:d3:96:
1d:e3:18:d8:eb:70:1d:40:33:d0:67:7e:d9:7d:6d:
4c:8f:2f:db:f1:46:d4:ad:5a:86:14:cf:7d:f5:0f:
77:52:5b:24:9f:fa:37:c8:48:a3:7d:ad:92:c3:80:
a2:66:7e:44:c6:62:c7:d7:00:81:c5:9f:33:f4:85:
ab:ed:dc:27:8b:b6:1b:40:64:4c:67:b6:df:c1:dc:
9e:4a:74:5b:ec:14:7d:36:9a:26:34:89:e0:6e:2d:
8c:ff:a8:12:94:f4:90:15:12:f5:90:70:14:ba:1e:
c1:84:30:89:5b:fd:c1:ec:fd:3b:35:26:6a:15:42:
f1:e6:b6:08:d6:f6:c6:a9:86:af:a8:43:b3:b9:82:
f7:a3:24:d0:63:45:d8:c7:1a:e1:3a:f9:37:68:27:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:26:12:0E:4F:B3:1E:7E:55:03:AF:08:74:C8:B3:3A:05:5A:0B:7D
X509v3 Authority Key Identifier:
keyid:44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:02:c1:94:bd:d5:72:62:cb:b9:59:4b:bd:b6:64:44:95:11:
1f:72:3f:05:8f:85:02:d7:64:cd:45:0d:34:48:94:55:85:d2:
d1:49:d6:7d:1e:0f:a8:44:ee:e7:5a:94:b7:f2:06:ab:d6:4e:
38:37:4e:f0:7b:9c:3a:8b:7e:42:34:9a:4b:58:e0:92:87:e7:
c5:94:eb:54:9a:99:b7:6d:b7:ae:8d:52:83:eb:69:51:c6:6e:
f7:f5:50:79:1f:84:ae:71:c1:21:e1:89:e2:9e:41:6b:d8:ec:
b7:7a:24:8b:86:45:0b:26:04:fe:53:9f:7a:f3:9b:d0:67:d0:
fe:77:ef:62:57:9d:7a:7b:f1:1b:77:1b:79:54:66:03:a9:44:
2e:8a:12:20:a9:c6:12:aa:5d:c8:7e:d9:f2:08:96:e5:33:ac:
18:75:fa:a3:6e:0b:db:67:5d:d1:13:e5:14:53:b5:ec:fd:3e:
83:b6:53:76:24:59:ef:57:bc:1a:eb:52:ae:6a:37:98:c5:46:
b5:f4:88:a6:3d:95:ff:ce:96:c1:ac:5c:c7:c6:00:2c:55:7a:
8c:d4:e0:2e:aa:93:94:96:27:90:75:c1:c1:53:85:24:5e:83:
02:49:0e:eb:32:da:dc:df:f8:39:51:74:71:8f:e2:13:23:ea:
fc:9e:c2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:26:37 2025 by rpki-client