Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier: md2KjjKdbN7t74inIl8hRTT6MGjf6NAXfvckjW8gtOw=
Subject key identifier: 66:4C:18:E8:88:86:AE:E2:85:23:02:C4:BE:96:58:9A:FD:EF:8D:A7
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial: 01965C834C41EC9C5B3B978DE4DDE264FDDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 08:00:30 +0000
Manifest this update: Tue 22 Apr 2025 08:00:30 +0000
Manifest next update: Wed 23 Apr 2025 08:00:30 +0000
Files and hashes: 1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: 5i+2EvRFnWMdjpIz/+43X9W9g1Wu6ShlBkzeQo8v68c=)
2: Cw8lON9cQpyLxWLsB7DBvYnd2Bo.roa (hash: c1sm3zXHf/J5zcMO21JKPte22JewQndWNsFvlD4ZQmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:4c:41:ec:9c:5b:3b:97:8d:e4:dd:e2:64:fd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
Validity
Not Before: Apr 22 08:00:30 2025 GMT
Not After : Apr 23 08:00:30 2025 GMT
Subject: CN=664c18e88886aee2852302c4be96589afdef8da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:f3:cd:27:61:f7:50:38:c9:82:99:65:ba:
e3:b5:06:cf:49:40:14:6b:02:35:72:b7:a7:eb:59:
e2:c4:0f:f5:a6:af:69:65:cd:ac:4b:11:b4:38:1c:
54:1a:9a:96:2e:ee:88:16:f5:4e:d1:3c:72:73:92:
da:28:8b:c3:1b:1c:a5:7a:48:e4:a9:82:64:96:5f:
fb:e8:50:0a:df:a5:cb:c5:ee:67:46:47:15:3a:30:
f1:0b:e2:50:96:ef:8d:65:c5:59:12:ee:e6:4d:07:
74:de:f2:34:b0:96:07:f4:e7:60:57:64:1f:02:44:
e0:d8:31:18:87:5a:52:ec:15:a5:67:0a:39:cb:8e:
31:10:61:95:e2:cc:73:20:48:8f:3d:ab:f1:ca:f4:
46:5c:fd:76:24:ed:62:76:8b:42:e7:15:dc:c8:91:
e0:86:82:ad:89:a2:59:49:69:5d:90:b8:47:a0:b1:
90:48:32:9e:ca:b6:b6:a6:78:e5:fc:e5:17:1a:b4:
b1:7d:e2:5e:fb:08:b2:28:5d:bc:28:2f:9f:a9:fc:
d5:b6:08:0b:d0:cd:b5:45:d1:39:08:02:4d:e2:a1:
ae:b6:6f:03:e4:f4:e1:f6:a2:34:3d:50:24:12:35:
65:b2:f9:f7:c9:83:30:a8:c2:05:c5:4c:54:56:e6:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4C:18:E8:88:86:AE:E2:85:23:02:C4:BE:96:58:9A:FD:EF:8D:A7
X509v3 Authority Key Identifier:
keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ac:42:78:bb:c5:59:c0:d0:43:e0:d6:fd:4e:9c:52:fb:39:
72:87:05:51:db:a2:57:02:f8:16:5d:0b:db:0e:47:6e:43:74:
67:c8:ae:8a:ab:cd:d7:6a:3b:28:5c:6f:45:5e:f2:2a:a7:10:
d5:fb:a3:cc:17:7f:1a:f0:76:48:c8:e6:c9:1a:58:fc:a6:90:
f8:45:19:73:0d:a3:44:83:3e:c4:1b:a7:74:4a:e0:29:45:7d:
61:16:29:c9:79:5f:f7:fb:f2:22:7e:da:9d:c9:b2:65:5d:b1:
85:ed:04:9d:fa:c7:10:4d:97:1f:f9:08:31:45:95:a8:fd:fe:
71:02:b8:6a:22:80:c7:f2:3d:e2:f4:b6:02:78:c5:7a:0b:2d:
13:ae:08:9c:e9:9d:83:23:32:dc:4d:19:1a:16:8c:c3:82:2f:
5c:85:bc:1d:c8:9d:84:24:88:3c:2b:84:6e:bc:4a:e7:73:ac:
fc:cb:e8:7f:b9:74:20:97:96:6b:55:ad:55:14:16:37:dc:20:
e2:d8:6b:51:2b:0d:bb:f4:48:b4:da:58:e7:cb:89:1c:f8:49:
5f:50:bd:ce:41:7b:c6:fe:60:19:45:91:d4:47:9f:22:5d:9c:
72:92:68:5e:21:e8:f5:58:20:3a:90:ab:3f:38:c6:9d:c7:fd:
0a:76:97:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:59:02 2025 by rpki-client