Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json)
Hash identifier: 25Vz0STXr8QgsL8bISufWd7URx4F0CaRFL1gn+2DB3w=
Subject key identifier: B1:CC:D2:90:E3:62:14:C7:24:E9:FF:9D:97:2D:4E:A4:44:10:28:D0
Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Certificate serial: 019691F12BC49354B4AC7A10CF80684EE668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
Manifest number: 0453
Signing time: Fri 02 May 2025 17:00:23 +0000
Manifest this update: Fri 02 May 2025 17:00:23 +0000
Manifest next update: Sat 03 May 2025 17:00:23 +0000
Files and hashes: 1: Ku3HRyioj0ql8ozTbPCiAHlL8-E.roa (hash: gtf9gLEz02KrYfoccfEAryEzPGbpHsjqTO4FxJ768C8=)
2: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: 4M86O3lEN1R487yuoReY/c66n6/xZHt/uDYg56jc448=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:f1:2b:c4:93:54:b4:ac:7a:10:cf:80:68:4e:e6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Validity
Not Before: May 2 17:00:23 2025 GMT
Not After : May 3 17:00:23 2025 GMT
Subject: CN=b1ccd290e36214c724e9ff9d972d4ea4441028d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4a:07:ec:3c:a2:ee:b5:39:81:ce:4b:d6:68:
7a:30:0b:d1:f2:f4:21:5b:90:8e:42:a1:4d:0e:74:
95:f0:9b:07:de:09:07:8f:63:a0:42:72:39:d5:65:
c0:d6:65:99:99:f4:dc:af:9b:fa:e6:81:b7:6f:2f:
38:b5:f2:34:2f:0e:a0:4e:3d:ef:db:08:e5:68:f4:
31:9d:e1:82:89:4b:68:9f:0f:1b:28:8a:e7:44:ed:
80:79:6f:6a:e1:bb:cb:48:ae:71:44:8e:7d:cd:5c:
8f:24:11:69:44:13:05:db:6a:c6:d7:eb:f0:59:3f:
ad:f8:a5:b8:cd:44:2d:71:7d:2b:e3:8d:50:42:f3:
62:03:c2:3a:a8:1d:bb:80:38:6b:d6:13:28:08:84:
0d:f7:3f:ad:19:5a:91:93:ca:05:8f:33:cd:fa:b4:
85:35:a2:75:89:c5:36:83:7a:d4:29:f2:99:1b:eb:
9e:ad:4d:29:bd:38:f8:d3:4e:e5:39:76:dd:2e:73:
3a:b6:3f:40:60:4b:53:9b:37:36:47:cc:43:fa:35:
1c:d1:3c:62:6f:ca:6d:eb:f5:7c:65:39:4f:8b:bd:
00:99:da:a7:61:02:6f:1b:b0:2d:bd:88:dd:c5:06:
8f:1e:6b:ed:24:15:54:c4:45:b7:17:a3:ff:47:a6:
0f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CC:D2:90:E3:62:14:C7:24:E9:FF:9D:97:2D:4E:A4:44:10:28:D0
X509v3 Authority Key Identifier:
keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9e:7e:75:56:b5:04:80:12:83:0c:23:12:73:77:90:96:10:
3a:bb:a7:e7:48:ba:60:c9:8e:87:78:a6:63:6c:3e:a4:9d:57:
92:14:5b:3c:92:11:83:4d:e2:79:8a:05:03:93:97:b6:88:c2:
e0:0e:37:ba:b8:24:1f:13:9d:81:a9:fa:90:23:7b:e6:72:d8:
5c:e4:a1:da:d6:f1:27:67:35:14:d4:bb:c4:6b:00:02:76:11:
38:86:b0:8d:a7:40:14:9a:ea:2a:93:f8:9f:b1:e6:5e:6a:d7:
1b:48:fb:54:cd:1f:bf:78:b6:39:c8:77:38:03:35:1d:c2:a5:
34:14:ca:90:f4:0e:7f:74:c4:82:98:7c:e1:49:61:42:ed:d4:
ff:85:1f:48:02:b9:98:56:3b:c0:7a:ba:87:ed:f1:9a:5e:dd:
46:c9:01:d3:8d:cf:8d:23:d8:63:00:d7:a7:f2:be:c4:2f:d7:
4c:29:b8:a4:fd:e8:07:9a:22:2a:f4:95:34:cd:d5:42:39:3f:
95:1a:1e:0f:c3:3b:78:31:26:8a:06:82:a0:fc:73:12:a0:3e:
22:69:25:d6:02:a3:ca:4f:4b:86:01:08:9d:07:e4:5d:75:30:
f5:a4:81:42:58:18:46:7b:c1:8e:97:fb:f0:ec:8f:d6:e2:c1:
65:75:b6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:35:46 2025 by rpki-client