Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: GtJoyPLafmZLC87ErnNi5QAzW7xYJwC0GESdW6iEOUM=
Subject key identifier: 5E:8D:51:99:D8:12:E0:DF:1A:00:AC:47:4A:E3:4C:BD:BE:D2:61:29
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 019675673448C8607CA55A2A05EE85368094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 04:00:19 +0000
Manifest this update: Sun 27 Apr 2025 04:00:19 +0000
Manifest next update: Mon 28 Apr 2025 04:00:19 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: P22DFHsiKoDOKpmXy5Mpygax/U73ISx3aE+SyQ0cDTw=)
2: aIPJ4lm4ZyremkDprutiWRNEZ90.roa (hash: Kp0nR22T2kDefAUNT5QJL0kBQwplOU/6USLq0OiGG/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:34:48:c8:60:7c:a5:5a:2a:05:ee:85:36:80:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Apr 27 04:00:19 2025 GMT
Not After : Apr 28 04:00:19 2025 GMT
Subject: CN=5e8d5199d812e0df1a00ac474ae34cbdbed26129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:b1:90:ca:51:79:a6:3d:d1:fb:7e:70:63:
59:d5:c7:69:48:52:72:bd:77:60:8c:cb:9d:18:0c:
28:81:e4:ea:bb:37:d0:7e:15:2b:12:51:f9:44:bb:
95:68:22:c9:4e:21:10:16:c7:b9:f1:da:03:82:65:
f2:a5:0d:13:74:ee:e7:3b:7b:0b:30:b9:da:b2:22:
c8:13:b4:7e:d5:a9:7c:e1:6b:79:06:dc:24:f1:aa:
fd:8b:b5:d8:2f:e3:a8:57:f1:b6:ca:59:d0:c5:b1:
d1:c2:1c:8d:ba:f0:18:b7:6d:19:6c:e8:82:98:63:
6d:7e:94:e2:f6:58:ff:f9:76:d2:97:b9:c4:72:c9:
01:e4:0f:a7:df:4d:98:8a:2d:2e:df:23:2c:5c:b9:
4c:13:ec:89:bc:9e:69:da:fe:95:9a:36:40:57:93:
12:06:98:3f:d6:09:66:ed:61:a0:20:38:7c:54:9d:
bd:4c:8b:38:af:96:54:c3:8b:bf:cc:50:c0:77:6e:
c6:50:66:a4:93:a8:40:39:0f:02:b7:04:96:75:e9:
ba:7e:b7:43:1c:4c:3c:85:d6:22:1d:95:a3:03:4c:
be:1f:44:e0:31:67:af:83:e2:05:2c:68:b2:15:65:
9d:5f:ca:ac:bb:c9:ac:e6:c6:a9:22:0f:0b:e0:6b:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8D:51:99:D8:12:E0:DF:1A:00:AC:47:4A:E3:4C:BD:BE:D2:61:29
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ec:14:01:aa:5d:02:7a:27:a4:ef:4d:16:e4:01:4c:27:06:
6b:83:15:c1:a0:bf:ba:4a:17:82:0e:76:8b:b6:90:88:a1:00:
3e:d7:6c:4b:75:8b:58:f4:b4:bd:86:01:8d:72:ac:ad:54:d6:
fb:39:e3:9d:20:16:43:70:af:e7:b2:ff:8a:95:df:3e:ac:36:
f1:f9:f9:c3:d8:fa:3b:a4:26:5b:ca:38:c5:c6:3b:3a:54:08:
d8:67:dc:ec:cf:3b:22:b6:5d:41:2b:7e:9c:5f:45:ab:45:01:
f6:e6:2b:53:98:58:28:32:10:e7:bc:ac:e2:fc:f6:a8:08:7f:
34:f6:b6:35:e2:5c:bc:3e:e5:73:97:8f:ea:d0:6e:af:fc:b3:
f9:3c:e7:0f:36:b8:84:68:d9:da:bc:6f:2d:f6:1a:87:b2:cb:
2e:95:ef:cd:da:2d:7d:f9:5c:fe:d6:a9:b0:94:a6:52:d8:5d:
ff:4d:45:3a:10:75:c3:31:d8:92:20:39:e7:33:ad:f8:2e:aa:
1c:34:ba:c5:2c:3a:b2:e1:64:77:f3:a0:10:e4:5b:54:28:e7:
44:96:2d:ee:df:dd:6e:0c:ec:fb:dd:25:5e:4c:b8:f3:a3:dd:
90:b3:ad:8b:98:9c:a8:2c:fb:24:51:24:5a:9c:86:8b:7a:76:
d0:c4:65:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:16:28 2025 by rpki-client