Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
File: pQHIn0SCnHLyqVPSorpK4Le1DYo.mft (raw, json)
Hash identifier: TjJwdmsdN1nx+n9TCfLKm3stbsuwRaTu/+u9xOLRfGI=
Subject key identifier: 00:B5:5F:F7:85:73:E5:88:6A:34:9D:61:2E:0D:5E:04:AB:8D:C7:94
Authority key identifier: A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
Certificate issuer: /CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Certificate serial: 01968A0094D69A5BF32E3A3D6B987D459A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 04:00:15 +0000
Manifest this update: Thu 01 May 2025 04:00:15 +0000
Manifest next update: Fri 02 May 2025 04:00:15 +0000
Files and hashes: 1: D5U1j0YPEDas8bxMtDOehRJb48U.roa (hash: AkMtfy33YmmtJG2wcdM/0Qvh01UPoaXKoDXm68LNuus=)
2: pQHIn0SCnHLyqVPSorpK4Le1DYo.crl (hash: 2iofWfZyz1KBuo7wZWk8eP0xgZH40Fy+9yohvKY5Q/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:00:94:d6:9a:5b:f3:2e:3a:3d:6b:98:7d:45:9a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Validity
Not Before: May 1 04:00:15 2025 GMT
Not After : May 2 04:00:15 2025 GMT
Subject: CN=00b55ff78573e5886a349d612e0d5e04ab8dc794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:be:3e:26:c2:52:de:31:c3:2b:6c:fc:19:61:
5f:68:16:ef:6a:8d:6b:54:62:c7:03:ca:8a:12:ac:
9a:3c:a5:cb:fb:86:27:9e:be:d5:3c:76:65:f9:99:
0b:c2:01:08:f6:b4:ef:ef:51:13:90:53:d1:b2:5b:
53:eb:0e:69:a2:c3:fd:1c:15:c5:08:c6:86:f4:c8:
e9:8a:da:c2:9c:9d:e5:fc:b8:ba:a7:d4:ef:86:3d:
c2:7b:29:16:b5:73:fd:42:dd:a9:b1:04:a2:b7:b5:
01:cd:7b:92:61:46:94:95:62:53:bb:b3:46:20:09:
d4:a4:19:2f:59:36:4e:d8:4b:fa:ca:e4:0d:d8:13:
35:0f:c2:44:16:ea:20:3f:d5:0b:14:a4:17:e4:36:
91:c2:2d:70:cb:c6:e2:dd:8a:e1:32:4b:f4:14:db:
75:64:c1:2d:e1:f0:96:61:53:03:24:17:c6:3b:b8:
f0:2d:70:d1:58:30:09:a2:0e:74:c7:6b:36:49:11:
0a:74:fe:c6:73:32:8d:fc:e1:1c:fa:91:c9:85:cc:
d1:ee:5f:57:6b:cb:8d:d2:19:0a:ad:e9:89:c3:7c:
b4:44:e3:29:0f:da:f0:09:aa:95:8f:64:6d:1f:3a:
69:59:a9:c0:37:4f:48:ab:13:aa:71:2b:74:94:4a:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B5:5F:F7:85:73:E5:88:6A:34:9D:61:2E:0D:5E:04:AB:8D:C7:94
X509v3 Authority Key Identifier:
keyid:A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cd:7d:55:a0:8a:4f:16:81:8b:89:9e:43:33:54:c3:09:59:
56:4f:d8:ae:50:34:5c:61:1e:68:10:c1:18:e8:e1:cd:9f:f1:
96:a6:70:84:e4:a2:8d:61:f8:be:eb:e0:fe:bd:a1:98:16:36:
c5:54:67:69:f9:6a:3d:c5:c0:8d:51:e0:bf:0a:8f:2c:8c:0c:
2e:64:94:ea:c2:fe:85:40:0f:35:bf:5e:ac:c9:73:89:d2:4e:
5e:28:77:ba:81:18:07:b9:70:92:42:1d:0f:69:c8:79:09:8f:
22:a0:5f:1b:18:7a:a7:07:bd:8c:63:4f:8e:9a:e9:24:b5:7f:
3d:ac:e4:2f:79:9f:bd:f7:77:63:d7:cd:52:ef:01:90:11:1d:
1a:8a:f9:ca:9c:0e:68:f7:2a:73:02:4d:f1:3b:a9:3e:be:55:
62:c8:5b:5f:7e:e8:2f:22:a8:82:4a:73:0b:43:06:19:1c:f3:
2f:b0:b0:8c:57:55:1e:e8:6d:0a:0f:39:a9:7c:52:99:2f:5a:
d7:25:dc:bf:3a:26:89:34:b4:5c:9b:78:07:e2:6a:3b:9f:e7:
fe:69:19:67:e6:a4:ed:3e:86:49:29:4b:ec:af:9d:98:e3:49:
99:97:d3:39:f8:8c:b3:af:c6:e7:db:92:f2:2f:82:ee:83:73:
6b:dd:8b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:29:45 2025 by rpki-client