Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier: YtkeJfSm160XrFl7OZW7WJKmZHFSE0Wbqhp14ugbYRc=
Subject key identifier: 60:B5:B4:97:37:64:D1:01:8F:A6:51:97:DE:80:B3:54:45:1C:72:04
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 0196802216BD3FA40BB0332006BAD2EECD65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number: 12EF
Signing time: Tue 29 Apr 2025 06:00:39 +0000
Manifest this update: Tue 29 Apr 2025 06:00:39 +0000
Manifest next update: Wed 30 Apr 2025 06:00:39 +0000
Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: Wu7q4FJktMOfohMq5KAi7xr5E0X3J6tOhPyrpLi4VF8=)
2: gHlRquCMx6iwfFhK1AbziJf-SOA.roa (hash: vGvXkm75uZ6w5eWBxSl4fiUVkztcBJ6xWRWL2h8kjfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:16:bd:3f:a4:0b:b0:33:20:06:ba:d2:ee:cd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Apr 29 06:00:39 2025 GMT
Not After : Apr 30 06:00:39 2025 GMT
Subject: CN=60b5b4973764d1018fa65197de80b354451c7204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:6b:26:d2:54:29:fe:ba:7e:f2:dd:49:a2:
50:0d:6d:fd:47:98:be:9e:9d:2a:34:1d:f5:eb:f8:
fc:95:77:37:3c:84:34:23:98:8a:2c:7d:93:47:d9:
1a:b2:69:81:58:cf:96:79:5c:f3:3b:85:50:e0:da:
c0:97:46:91:b4:44:6a:86:43:e5:cb:d8:3c:67:46:
9d:1f:cd:a2:97:67:5b:82:9e:22:3a:ff:ec:52:f3:
54:8b:7e:03:ac:79:24:58:4c:e8:04:ad:70:41:b2:
3b:fc:9c:99:80:41:f8:03:b2:c9:14:41:36:c8:fc:
84:bc:86:03:03:69:a6:f8:9f:0d:77:8e:81:0d:51:
b6:80:6a:28:f9:ee:3e:e5:b6:32:a6:de:56:36:e4:
c0:38:30:8c:cf:a6:86:4f:a8:7f:e5:89:38:1d:46:
80:34:88:fd:fe:21:d0:3c:e9:f3:d8:dd:d2:c7:ce:
f0:e8:11:72:02:a3:e4:82:19:81:42:ab:39:67:19:
0c:91:f5:09:a4:0a:65:b1:89:2c:c4:a2:6e:73:8a:
03:21:59:b8:53:49:3a:42:9c:60:24:cc:ba:b8:94:
7c:5e:47:22:d7:99:e9:4d:b9:d4:9f:ce:2a:12:b0:
5a:72:c3:e1:71:54:d3:6a:ea:3e:d3:65:5e:c2:23:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B5:B4:97:37:64:D1:01:8F:A6:51:97:DE:80:B3:54:45:1C:72:04
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2a:38:a1:33:52:46:5c:b0:a6:3e:2f:15:f0:40:06:4d:f3:
ff:77:d2:1c:c9:12:fe:3c:8f:3e:05:88:1e:3a:a5:7d:68:92:
1c:d2:2e:ab:b0:38:bf:88:3f:0f:87:78:3a:ef:35:e9:f9:36:
d5:a6:cd:10:fa:ff:9a:72:7c:ae:b5:4c:e5:b3:9e:94:13:ed:
ce:8c:be:a5:1f:3f:d8:e4:87:86:f8:1b:f0:d6:8d:f3:b6:12:
e4:1a:b5:90:6c:8f:98:8a:fe:95:9b:ed:0e:eb:55:75:8a:91:
76:a5:19:07:ba:b7:10:4e:10:e4:15:e7:43:d0:c0:2e:33:d9:
6c:a1:68:4b:c6:76:78:a5:9f:f3:3b:73:2e:13:9a:29:7c:55:
f7:78:0f:08:a4:0b:a9:a1:ba:1f:d0:e9:ff:2a:95:86:ff:fc:
a0:a9:ba:cb:fb:69:e4:ee:ed:a7:e3:2d:4f:7b:1d:a9:d3:49:
04:79:d2:37:a0:70:64:0f:d7:02:92:b9:7d:5c:2f:4b:a2:eb:
30:f6:dd:2a:5a:12:ba:d7:64:46:a4:00:fa:3e:8f:ff:05:b3:
5f:c5:2b:31:8b:af:45:2d:a7:3e:b9:d1:7f:5f:c9:87:7c:85:
5f:69:d6:f3:7f:b5:03:60:bb:f9:09:6f:e4:35:fe:3e:0c:48:
58:b5:ff:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:28:10 2025 by rpki-client