Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier: cea01LOOoMj47pRqBTm86ALdaXRph47qiaO5Xv7bFPc=
Subject key identifier: F3:CA:BE:5D:B8:6B:92:59:50:5B:00:88:6D:6A:B3:9A:95:23:D3:55
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial: 0196759E68B2CE2117CFB6526172A76714B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 05:00:37 +0000
Manifest this update: Sun 27 Apr 2025 05:00:37 +0000
Manifest next update: Mon 28 Apr 2025 05:00:37 +0000
Files and hashes: 1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: QqwDsjxm4RayQbsn7NmK0x6D9t4ZqJiAlev29l/9cos=)
2: Cw8lON9cQpyLxWLsB7DBvYnd2Bo.roa (hash: c1sm3zXHf/J5zcMO21JKPte22JewQndWNsFvlD4ZQmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:68:b2:ce:21:17:cf:b6:52:61:72:a7:67:14:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
Validity
Not Before: Apr 27 05:00:37 2025 GMT
Not After : Apr 28 05:00:37 2025 GMT
Subject: CN=f3cabe5db86b9259505b00886d6ab39a9523d355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:88:35:c2:83:f3:93:08:02:fe:cc:84:de:38:
89:4f:60:be:ac:d7:ce:43:83:3c:73:97:d2:5e:a6:
fe:5d:33:db:69:7b:88:62:c8:4a:7d:36:9b:7e:39:
42:55:48:bf:c7:cc:72:c3:17:7c:c1:fd:2d:0d:8c:
16:f1:6c:07:54:0d:29:59:48:4f:26:39:9e:a9:99:
fe:87:92:b2:0e:ae:49:1a:2b:e1:d7:4c:28:61:cf:
7d:4d:97:c5:02:58:ea:06:6b:48:e0:16:7a:27:2a:
4a:e6:36:d9:17:8c:9f:e6:13:65:33:40:33:52:bd:
c9:79:7f:77:a5:5a:ef:7d:66:da:35:2e:a3:47:02:
e5:75:71:43:61:40:eb:d8:79:15:b4:15:3a:af:f0:
96:1b:4b:91:66:a9:90:23:60:16:5b:5d:66:99:b7:
c2:bd:be:d2:a3:d9:de:c3:4a:63:34:ee:60:83:7a:
68:26:3a:33:22:c4:32:7b:08:50:99:8f:b2:60:2e:
ca:5a:bf:57:4a:01:90:04:aa:92:37:15:f3:83:f6:
41:06:a4:ab:a1:33:16:dc:c4:b2:68:84:53:96:2d:
12:25:a1:cb:b5:83:05:d7:6a:7b:3e:84:d0:17:87:
5a:16:ee:ee:25:3e:90:13:55:bd:ec:04:ee:18:38:
a1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CA:BE:5D:B8:6B:92:59:50:5B:00:88:6D:6A:B3:9A:95:23:D3:55
X509v3 Authority Key Identifier:
keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1b:c7:aa:3a:79:cf:d6:eb:3b:bb:7d:ac:91:16:59:55:f7:
4a:c5:4a:3c:7e:f9:2f:92:05:4d:db:bd:aa:98:aa:44:27:ac:
dc:2a:dc:54:56:c9:a7:e0:aa:3b:27:67:0c:91:eb:33:82:fe:
ea:ef:8e:0e:27:46:6f:6c:d1:15:53:a3:1c:f1:e9:f4:21:4e:
fd:c9:19:33:b6:d2:fe:3e:66:50:53:88:c5:a7:6b:7f:a4:61:
1c:1c:53:c2:54:a9:ce:0e:0b:86:10:8f:91:00:6c:22:4d:33:
4c:c8:32:db:2d:da:ba:99:66:03:4b:13:47:6c:72:67:fd:16:
50:52:e7:e7:7b:79:a8:8f:b8:5f:6e:31:6f:4c:1b:73:5a:02:
8e:08:38:b0:fc:43:56:32:4d:f7:55:62:e0:35:d7:81:bf:ef:
2f:54:7d:a1:eb:6d:d3:18:79:49:c7:78:3f:58:f9:71:c2:04:
ba:15:0c:50:15:9a:d6:ec:3c:18:31:88:e6:d8:88:42:d8:0d:
32:0c:01:6b:5d:5d:d1:f9:b8:dc:69:02:74:d7:ae:17:5b:c9:
f3:92:a2:48:5f:69:ba:cf:9c:b4:50:8e:ee:80:a3:15:25:dd:
18:cd:a2:38:b7:d0:a9:60:48:e0:fc:5e:50:7a:94:0e:7d:9e:
da:65:a3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:59:25 2025 by rpki-client