Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
File: eXAA1nyN62Ji4Ampr_QioQOPRIk.mft (raw, json)
Hash identifier: oPVZBqg/xqZ8KDrv1H2O9wwm/jz72yVlp/eRRQovp0k=
Subject key identifier: AD:26:61:CF:71:37:C6:9C:CA:7A:80:69:84:77:A5:B1:26:2A:9D:E7
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 01968B814242CDAED94EE67EFE11018502B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
Manifest number: 1519
Signing time: Thu 01 May 2025 11:00:26 +0000
Manifest this update: Thu 01 May 2025 11:00:26 +0000
Manifest next update: Fri 02 May 2025 11:00:26 +0000
Files and hashes: 1: eXAA1nyN62Ji4Ampr_QioQOPRIk.crl (hash: dDRjBCMtGssB6QjQa1sHeX919pKsFnT8oNEtmsa4+SM=)
2: x2Plj6HU813Gn6CnI6OWio0Ed3w.roa (hash: j+HdrBtXAtTZgu8aNGoL9Pn8S0MCOrlPhROCpWXQwvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:81:42:42:cd:ae:d9:4e:e6:7e:fe:11:01:85:02:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: May 1 11:00:26 2025 GMT
Not After : May 2 11:00:26 2025 GMT
Subject: CN=ad2661cf7137c69cca7a80698477a5b1262a9de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:42:a2:59:74:6f:18:1d:91:b8:0d:97:bc:0f:
1d:36:9c:a4:4c:79:29:3d:e9:1c:60:ae:03:84:81:
8c:e9:b1:1a:31:29:ce:22:ac:c8:3d:38:7e:5f:90:
b0:dd:3c:46:d3:dc:f2:1c:5b:93:fa:3b:17:e5:3e:
29:71:79:8c:62:d8:cb:17:d9:62:cb:b7:f2:8b:f8:
0e:63:ce:33:58:96:fc:d6:aa:1b:14:3b:e6:ca:29:
33:82:5d:72:64:a6:8c:dc:fb:b9:75:a4:c9:aa:4d:
0b:1a:a5:92:4f:c4:16:f1:d0:7b:83:3a:ac:18:6b:
8c:40:b0:c4:f7:7b:fe:ba:95:ce:5d:6e:17:cd:25:
a2:92:f4:4b:7d:b4:dd:0f:66:45:e8:0e:d2:89:b5:
83:62:c9:99:93:6a:88:44:f8:1a:d4:83:01:27:cd:
90:f6:8a:c3:c8:39:81:74:9b:41:b8:72:8a:d4:4c:
e8:de:ff:4c:5f:10:85:69:b2:9e:09:bf:a9:ae:01:
a4:8b:68:8d:b1:fc:1f:c8:9e:45:90:9f:67:a4:63:
d9:1a:c1:56:83:61:fb:d1:1f:e4:d3:cd:30:c0:ad:
15:72:ff:a6:aa:1b:19:75:0f:81:a0:66:b8:ea:bf:
5d:56:e8:00:19:05:a1:f6:f6:a0:58:83:25:02:a1:
39:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:26:61:CF:71:37:C6:9C:CA:7A:80:69:84:77:A5:B1:26:2A:9D:E7
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ad:a2:ff:5d:0f:25:e2:e8:6c:80:f1:cf:a2:f5:5f:0e:b7:
6c:39:a5:be:77:1c:45:e1:52:96:62:e7:35:c8:7b:6c:66:5c:
38:39:f9:34:73:da:ea:8f:01:6a:b9:05:f4:96:91:42:e5:e3:
5e:88:bc:44:27:fe:d1:67:ba:04:80:4d:fe:cd:20:98:e1:38:
00:6b:af:8d:b2:9e:24:8b:a9:da:e7:ee:3f:7d:bd:3f:ef:7c:
9e:d6:d7:30:d0:d5:5c:34:35:74:8b:ca:d0:6b:e4:be:71:1b:
9b:0a:b3:40:06:49:4b:ea:fc:ac:97:a6:28:d3:5f:52:28:6a:
37:56:02:5c:a0:9f:ab:af:b7:80:2b:24:78:43:02:07:d7:83:
4f:0d:6a:83:20:c5:e9:a4:2b:bb:89:6e:4e:5a:fb:06:00:c4:
89:75:98:16:e6:94:18:6b:b3:63:0c:60:3e:fa:2d:10:5b:3a:
a8:6e:30:6b:df:e3:ef:6e:1b:23:c1:22:83:10:c9:5f:17:79:
2d:58:bf:78:ea:a2:77:a5:c9:a5:3c:3a:c7:43:2f:1f:54:cc:
3a:44:da:1b:7d:e9:7e:9d:ad:cf:b7:ac:d0:30:6c:01:07:20:
5a:95:d8:99:6e:fa:3f:ca:b7:55:31:34:bb:fe:d4:4e:07:0c:
45:1d:54:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:41:42 2025 by rpki-client