Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
File: rqruHwkj4UojcfJAVA_dIVSbFKY.mft (raw, json)
Hash identifier: QiA9A0AaViKu/Ej0Cet2txtmUfsbuSOzBXnZ9q4zuOs=
Subject key identifier: 51:86:BF:41:9E:9D:6A:12:17:62:27:D4:34:6F:A0:BF:D6:5D:AA:F5
Authority key identifier: AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
Certificate issuer: /CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Certificate serial: 019674C27450E7E1477D801985D9AEC99365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
Manifest number: 0F09
Signing time: Sun 27 Apr 2025 01:00:22 +0000
Manifest this update: Sun 27 Apr 2025 01:00:22 +0000
Manifest next update: Mon 28 Apr 2025 01:00:22 +0000
Files and hashes: 1: Prl9jiIf5yTV5DsYzdlJSoaKLUM.roa (hash: Z5P6WiB+sh7qt8RUQthul2w53RzYUIGwq58APY2ZYXU=)
2: rqruHwkj4UojcfJAVA_dIVSbFKY.crl (hash: hTjHjjZiVrGiNN7PyrLUZ4RRMtTAjyN8fBx2yCHrQ4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:74:50:e7:e1:47:7d:80:19:85:d9:ae:c9:93:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Validity
Not Before: Apr 27 01:00:22 2025 GMT
Not After : Apr 28 01:00:22 2025 GMT
Subject: CN=5186bf419e9d6a12176227d4346fa0bfd65daaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b5:7f:d6:55:39:55:68:b7:4e:5d:4c:b6:10:
3f:e0:45:a8:9f:b9:32:49:56:73:8a:fd:7b:19:4d:
bd:82:a0:2e:9a:08:3b:c3:b0:d0:35:bf:6d:7b:89:
93:02:a0:8b:0c:e1:89:48:f5:20:53:e5:35:7a:91:
c0:79:19:2d:03:9a:0d:98:bc:1f:b9:eb:82:e0:1d:
b7:eb:ce:f7:0e:73:aa:a9:30:c0:e1:d2:eb:7d:a1:
10:b9:42:95:34:9f:db:24:8e:d9:2c:25:9f:23:e0:
58:a0:1d:21:31:c8:2b:a2:ff:80:41:b5:6e:12:c0:
4b:e8:ed:ce:71:41:d4:55:25:e9:0c:b9:c1:17:f3:
99:06:b5:0e:48:41:b5:5f:da:7d:39:be:61:78:d6:
02:73:46:9b:2b:17:78:58:1e:74:2d:f0:67:d7:b5:
85:9b:bf:e9:54:06:3d:ce:3f:6c:d1:80:f8:41:8c:
0a:63:ef:c5:0c:b8:0a:73:f3:ff:9c:04:89:30:e8:
2d:1c:cf:70:3c:1c:f7:06:8b:83:6a:53:7b:98:95:
eb:b3:da:7c:4e:9b:97:80:ad:57:b4:b5:98:fc:ec:
c9:14:c5:77:a4:0a:7a:2b:62:16:67:7d:21:dd:d6:
2d:d3:96:82:2b:0a:81:3b:0b:55:36:cf:f6:fb:ff:
43:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:86:BF:41:9E:9D:6A:12:17:62:27:D4:34:6F:A0:BF:D6:5D:AA:F5
X509v3 Authority Key Identifier:
keyid:AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:96:1c:1d:37:dd:d7:13:e6:16:3d:02:86:5f:c8:fa:01:a9:
25:43:76:3b:1c:2b:95:25:2f:b6:67:ea:62:d4:0f:06:84:b3:
3e:3e:59:25:79:9b:cb:ad:a4:0b:5c:24:b6:c1:04:7c:a6:fd:
cb:bb:c5:5c:d7:19:2e:43:00:bd:d8:00:b5:0f:ac:f3:d7:d7:
8f:22:e7:70:28:f3:6f:10:9e:08:c0:4c:d3:67:2a:16:f6:fb:
08:e2:ff:8f:5f:2c:d1:4a:2a:6c:1b:40:e2:2f:f4:5e:d6:11:
3b:46:0b:17:bf:e3:59:cc:68:52:f0:27:d9:8e:a1:5a:d6:1d:
ee:ba:35:87:f6:5c:59:ec:ce:ca:d7:85:6d:fd:5f:e0:d3:7e:
66:84:2f:73:41:ef:85:8a:0f:73:5f:94:cd:e5:07:30:47:75:
2a:8d:14:16:45:e5:b4:f8:cc:f5:51:ab:20:1b:87:69:83:4e:
7b:28:53:2a:e1:08:d0:1c:97:bc:1c:2d:21:ee:46:27:d5:08:
8d:ec:54:8e:04:57:f8:92:4a:ae:29:8b:d7:fa:b5:a7:1d:2a:
98:3f:e4:fa:27:46:57:41:c8:f5:90:9f:8b:65:60:04:43:d0:
93:20:be:66:a8:83:54:23:bc:34:f0:08:75:e1:df:ec:51:8d:
77:56:fc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:12:07 2025 by rpki-client