Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
File: DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft (raw, json)
Hash identifier: nD09YIjtYLIVfq5ue1CQjIVhoeCS3k+wqYxYVUDcZwk=
Subject key identifier: 50:23:49:1E:11:20:91:4D:D8:B9:24:09:C6:41:38:1D:CC:36:A3:BF
Authority key identifier: 0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76
Certificate issuer: /CN=0ea54639316f5cd5287f841d7f8cff16521d0576
Certificate serial: 01967AC467C30EB39957F7FA2F860D97E84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
Manifest number: 0245
Signing time: Mon 28 Apr 2025 05:00:13 +0000
Manifest this update: Mon 28 Apr 2025 05:00:13 +0000
Manifest next update: Tue 29 Apr 2025 05:00:13 +0000
Files and hashes: 1: DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl (hash: MyibiQBpl507t0NRdVF3OQYgyFmUVe6FquTdQKbA1m0=)
2: abGEnkiRCC-QdoOIOJ74wLOfNK4.roa (hash: xQuRCd3BN/tXelIZ1CEEcNjDIYPDQbZRMsaEZajsFYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:67:c3:0e:b3:99:57:f7:fa:2f:86:0d:97:e8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea54639316f5cd5287f841d7f8cff16521d0576
Validity
Not Before: Apr 28 05:00:13 2025 GMT
Not After : Apr 29 05:00:13 2025 GMT
Subject: CN=5023491e1120914dd8b92409c641381dcc36a3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:73:79:af:62:03:d1:81:8d:e7:53:3e:b9:
b1:83:ac:03:50:6b:87:ee:b6:92:9b:0b:1c:64:93:
b2:fd:d9:82:ef:c1:32:f8:d7:72:6a:67:11:22:3d:
6f:7a:d9:1c:41:6f:b5:a1:ec:a9:0d:11:60:8b:4c:
9a:a0:cf:9a:8e:1e:53:96:01:84:46:e7:86:b4:77:
ce:38:72:a6:b6:69:53:c7:b4:89:4f:1f:dc:e4:27:
8d:5e:61:13:93:03:11:48:25:14:91:b9:17:77:26:
57:f5:cb:2f:11:c5:33:b6:1c:a7:3d:2c:3e:79:31:
ff:f1:64:bd:d3:08:f1:ec:64:33:b0:5e:1f:3f:ff:
1b:90:53:60:7b:00:c3:15:88:34:e6:cd:05:a1:5a:
24:ab:1d:97:d6:ae:b9:aa:8d:eb:91:eb:63:a1:ef:
fc:a9:d1:9b:01:b5:e8:64:51:e1:2e:08:09:ab:42:
2b:e6:0c:9e:f8:fd:7b:cb:a8:20:26:b9:d8:20:87:
33:92:90:04:b2:ab:c9:84:08:d7:fe:2b:0d:29:c3:
48:e6:5b:b9:9e:a0:98:de:ea:57:c6:25:b5:b8:b5:
cf:5f:a6:c8:59:86:a8:5f:2e:10:de:16:4c:77:f2:
4f:c1:c5:b8:2e:81:ca:56:61:c8:dc:5f:88:92:d4:
f5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:23:49:1E:11:20:91:4D:D8:B9:24:09:C6:41:38:1D:CC:36:A3:BF
X509v3 Authority Key Identifier:
keyid:0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2a:37:86:db:cd:ee:16:21:d9:7e:0d:fa:67:f2:d4:9a:ad:
ae:c8:15:64:c7:34:47:2a:a2:71:e8:ca:16:6f:31:77:59:5a:
b2:3b:8f:2a:b6:c5:aa:aa:fb:ff:9a:a0:95:18:55:81:2f:97:
e7:06:60:dd:99:f2:68:69:1f:7c:74:46:17:27:11:b8:cd:22:
a3:ae:82:e7:c8:3f:64:5f:53:05:6a:c8:55:7b:ca:33:1a:4c:
13:ad:2e:56:d3:61:25:ee:f7:c5:6d:b1:f6:1b:76:a9:74:ac:
b2:66:68:90:38:dc:66:8f:c0:f0:cc:d6:cd:e7:c4:41:0c:76:
ff:9c:55:a3:ba:46:96:a7:f7:3e:90:09:ef:7f:b8:c2:f7:1a:
65:c3:64:4c:8d:bd:d1:c9:ab:24:a8:ea:3b:3d:05:d8:28:35:
35:09:29:86:b8:44:d5:5c:ee:a5:9d:28:de:81:b0:e7:e3:be:
85:ca:eb:3d:3f:26:eb:8a:a9:01:08:46:82:14:84:70:a2:4f:
4f:97:b4:41:5c:e2:b3:51:a6:8e:73:86:bf:71:95:bf:a8:d9:
e8:22:91:21:b2:a9:f0:5f:1f:33:c2:91:81:33:49:a0:95:e7:
db:54:61:92:3b:30:9b:b1:b7:e2:0a:5e:b3:f2:ae:0b:59:98:
d2:4b:c8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:49 2025 by rpki-client