Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
File: 1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json)
Hash identifier: RH7PfZTUkiNyop4lsPpOWLvhC4SGbKkPUV9Lnf00oiQ=
Subject key identifier: E4:88:B7:07:61:82:66:60:55:90:A1:66:7F:2B:4E:55:81:16:9C:20
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Certificate issuer: /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial: 019678D6AA2223EAE9E49B6C4907A3D7A839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
Manifest number: 091F
Signing time: Sun 27 Apr 2025 20:00:56 +0000
Manifest this update: Sun 27 Apr 2025 20:00:56 +0000
Manifest next update: Mon 28 Apr 2025 20:00:56 +0000
Files and hashes: 1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: YcApAPwQWvqGjUCFWbjJ1K/ygdb/FP0TsQEcQFbvRpE=)
2: Y_oNEiPJWS2zLwFvLL35UCRFKWA.roa (hash: q2i0iB2Ep81QHqaDB0CnMDZLGuww93ap90YlQXqqvaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:aa:22:23:ea:e9:e4:9b:6c:49:07:a3:d7:a8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
Validity
Not Before: Apr 27 20:00:56 2025 GMT
Not After : Apr 28 20:00:56 2025 GMT
Subject: CN=e488b707618266605590a1667f2b4e5581169c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:8a:4a:36:17:0c:a2:63:1c:02:0a:83:e8:
6b:54:83:13:1c:f0:a3:e6:38:43:67:42:4a:37:8a:
c1:b8:a4:24:10:41:de:41:11:d3:3a:88:4f:36:06:
01:1b:0d:0f:91:33:b8:a0:71:51:b7:f4:50:71:8b:
ed:95:9c:84:90:88:af:0b:e5:2a:fd:34:5f:e1:9e:
52:b5:78:8c:e3:e2:b5:f7:67:1c:4e:28:49:75:2b:
2e:c5:89:34:f0:24:6d:93:69:2b:e2:6f:3a:14:42:
53:c9:23:bd:10:eb:21:ae:59:d3:8b:e6:0c:c2:ba:
f9:ff:30:ad:ad:cc:3b:5a:b0:1f:37:71:5d:1c:15:
58:ae:bc:cd:2d:eb:36:b8:01:7f:52:a2:95:cc:6e:
81:49:5a:47:6a:d3:c2:e6:39:55:59:ba:20:fd:3b:
e6:c4:3b:4b:b6:4d:55:f0:49:fc:5e:89:da:46:bc:
99:cd:bc:ba:52:0b:0c:48:32:b8:58:e8:3a:62:f1:
31:d2:5e:18:81:55:3b:31:df:03:18:33:13:09:03:
09:e8:1b:20:ab:ae:ce:b3:e9:f4:8a:23:b6:e4:e9:
47:12:51:56:d8:af:38:a0:7e:4e:14:b4:d8:e1:88:
2c:93:97:3f:88:6d:e6:05:57:ac:fa:9f:e5:29:1a:
88:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:88:B7:07:61:82:66:60:55:90:A1:66:7F:2B:4E:55:81:16:9C:20
X509v3 Authority Key Identifier:
keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:b1:ce:30:35:2f:13:72:70:ad:42:1a:46:30:dc:7a:5d:6f:
db:25:74:0e:7b:aa:bf:89:33:ce:3c:e6:56:c0:85:18:1e:46:
4f:23:02:98:03:0d:c9:84:96:01:37:85:de:d6:2d:ba:19:eb:
05:78:e8:6b:08:b8:93:1a:c7:32:07:fc:4c:92:24:40:40:5f:
23:7e:6f:e8:e6:63:23:8a:ed:2d:b9:79:71:fa:72:ab:6e:cd:
89:ac:8c:ac:45:23:72:fb:f7:5f:63:cc:8b:16:c6:05:02:15:
13:76:b6:61:45:f4:78:fb:9c:fd:d6:a9:76:bd:0f:12:98:45:
4e:e3:a5:41:5b:bc:40:c5:42:0f:7c:59:c4:76:22:ad:6a:8c:
bb:76:7d:2b:25:38:de:0f:04:f0:ba:b1:fd:af:68:14:3f:bd:
f9:7d:8a:81:f5:91:9f:30:d7:db:c0:56:05:4d:c2:d3:f3:f1:
4d:7b:dd:5f:1a:cb:2a:02:95:9a:df:d7:5a:62:1c:76:ce:06:
65:21:c8:a7:ef:8a:19:0d:07:7e:fe:89:51:9d:14:8e:e6:7c:
80:5a:69:27:ad:11:7f:63:ea:54:9f:79:6b:a0:d3:94:18:56:
ee:f8:35:69:cf:11:45:c2:36:47:18:fa:63:58:1c:8c:22:50:
4b:1b:10:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:54:59 2025 by rpki-client