Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json)
Hash identifier: EL/2WPmvuOe9CJlvHDcM7tFjPSSS1Hi5P9l/b8APIdU=
Subject key identifier: A9:A0:8A:83:D6:E8:F9:BA:8D:F0:52:A0:4E:4A:7B:3E:A9:11:D2:17
Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c
Certificate serial: 019676B0D623676F749D374ED9C3009DDD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
Manifest number: FA
Signing time: Sun 27 Apr 2025 10:00:22 +0000
Manifest this update: Sun 27 Apr 2025 10:00:22 +0000
Manifest next update: Mon 28 Apr 2025 10:00:22 +0000
Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: dAQKlS+pGMcJiXJdqmNAC5brm6AXU3aj49MqkWe0by4=)
2: wVZ7Q_yh7vY87ipQHKXps_Y5QUU.roa (hash: F0pmi/wk6PrJmlY3U42fDKf/ChECXrlPOqHq8mmS3J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:d6:23:67:6f:74:9d:37:4e:d9:c3:00:9d:dd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c
Validity
Not Before: Apr 27 10:00:22 2025 GMT
Not After : Apr 28 10:00:22 2025 GMT
Subject: CN=a9a08a83d6e8f9ba8df052a04e4a7b3ea911d217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1c:92:5c:b5:6d:e2:df:a8:02:54:a9:79:48:
9f:f2:98:94:2c:b7:92:07:ed:02:9f:02:05:b2:5d:
ba:9e:8e:4f:7e:de:81:fa:ce:f4:42:b3:80:ef:97:
92:b7:7b:2a:1e:fb:45:61:b8:8f:af:41:d7:4d:95:
90:8e:2b:ab:3a:f3:93:eb:9d:43:62:f0:22:91:de:
84:e3:58:ab:0a:fb:73:f2:6d:1c:16:ab:2e:f6:7f:
e5:a4:a9:2d:12:15:de:e7:f6:9e:0c:fd:d5:4b:12:
88:23:96:bb:7f:ed:dc:83:5e:20:7d:ca:6f:a6:d6:
42:b3:64:93:fd:2e:13:55:26:25:c3:2b:36:6b:91:
7a:21:9e:73:64:8a:f2:17:81:ff:97:98:fe:5d:97:
67:25:8f:5a:25:64:06:f4:82:e7:e0:85:f8:f5:04:
9d:01:00:04:73:6f:9e:d7:09:2e:bd:90:2c:e6:54:
51:2a:f9:a7:6b:5a:36:31:53:f4:eb:62:73:9d:13:
19:10:e5:b8:e2:0b:0c:7b:5a:df:8d:f2:ef:1d:2e:
f5:0f:fb:79:8e:f0:d0:ce:15:2a:be:61:a7:5d:9e:
b2:23:4f:83:5e:80:84:4e:c8:58:36:53:b6:82:9d:
4e:98:3f:ed:5b:b7:3d:4a:89:33:7c:43:b4:11:5d:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A0:8A:83:D6:E8:F9:BA:8D:F0:52:A0:4E:4A:7B:3E:A9:11:D2:17
X509v3 Authority Key Identifier:
keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9e:4f:b8:59:5d:af:b4:43:93:52:48:82:de:fa:3e:70:ad:
f1:1d:9c:e5:ea:1c:e6:66:d5:da:99:78:11:13:b5:d9:c9:2d:
ef:ac:ec:9f:b0:55:94:6f:a0:38:3b:29:63:66:9e:2f:65:79:
67:18:84:25:44:82:55:ce:d3:bd:45:cc:bf:57:e4:0c:90:0c:
50:a3:fd:9d:72:d9:c6:7b:d2:aa:14:b5:b3:3d:6a:69:12:ea:
40:a1:f6:28:93:0b:a0:24:03:3b:0d:06:74:a4:4c:0e:9b:9d:
06:ba:ff:57:e3:28:72:6c:2b:2a:b0:22:fa:a7:ff:4d:70:0d:
df:b3:2c:0e:b7:11:f3:b1:86:1b:f8:3e:2a:22:cb:28:de:57:
47:53:e5:c9:26:45:8e:4d:ff:a6:3d:99:e7:71:cc:2e:e4:9d:
e1:c8:13:fe:7d:44:2f:7f:42:74:72:92:81:c7:a8:57:fa:42:
3e:c6:03:cd:42:1a:1e:a7:33:00:e1:b5:84:e1:5b:c6:7f:c0:
71:95:c0:79:d5:26:62:1d:0d:b6:14:62:f1:ad:55:c9:35:fe:
32:fa:57:b4:d2:83:fd:c6:3f:33:32:98:34:8f:f4:2c:d3:d6:
06:3e:e8:2a:09:f9:5a:d4:26:fb:b0:ab:eb:dc:03:4c:81:27:
60:3a:89:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:49:28 2025 by rpki-client