Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: PZvoCZumBhNWVGF2ztg5+HxYB2A77gFaCZLYvr2161s=
Subject key identifier: 1A:4E:6E:5B:FE:22:54:8F:55:84:AE:4E:91:C4:1B:9B:D4:51:3B:AB
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 01965EDF7E916ECA15421E42E5FD08895676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 1505
Signing time: Tue 22 Apr 2025 19:00:27 +0000
Manifest this update: Tue 22 Apr 2025 19:00:27 +0000
Manifest next update: Wed 23 Apr 2025 19:00:27 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: XcFHCOmx2wMCLfQX79ehRB8HP2VlOJbcTWbrinlQgeo=)
2: tktnNkqo-Ucay9gG5szDFherVRo.roa (hash: fENlsqvH8zzdUmZ9S6kxqqHzh2VPnW1ALr3bQ6F8fDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:df:7e:91:6e:ca:15:42:1e:42:e5:fd:08:89:56:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Apr 22 19:00:27 2025 GMT
Not After : Apr 23 19:00:27 2025 GMT
Subject: CN=1a4e6e5bfe22548f5584ae4e91c41b9bd4513bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:af:82:74:f1:2e:5e:77:12:2d:e9:b1:35:ad:
15:06:f9:20:e9:15:61:7a:fa:d9:dd:af:e5:ec:31:
21:1e:51:f9:05:fe:4e:74:1a:e4:8b:ed:ff:c3:82:
b4:f0:09:53:1d:5d:5a:64:f7:1e:80:eb:ae:34:40:
42:c0:fe:9f:d9:35:cf:82:b3:83:a8:e0:a4:2c:00:
85:66:be:f8:7e:4b:59:25:40:cf:4f:26:90:63:04:
ef:93:8d:7e:8d:c4:f3:9c:37:bb:38:6b:4c:49:50:
68:3f:8b:09:8d:96:d3:9d:57:53:b8:9d:bb:df:d4:
8a:93:5e:81:eb:08:bf:9b:33:07:79:d8:6d:12:35:
f8:1d:1e:fc:d1:6d:79:2a:2c:49:92:df:e3:b7:9e:
1f:a1:62:f0:ad:42:01:65:8b:57:6a:a9:53:46:90:
f0:56:d5:f8:1f:98:1c:3d:0b:ea:a7:86:1b:06:cc:
d5:67:5f:2c:e3:3b:96:6f:1e:d9:35:86:5a:f6:72:
bd:89:72:cf:cd:9f:80:47:47:82:79:cd:a5:66:32:
03:7c:b0:76:3b:ef:7f:3e:d9:87:71:70:28:23:ff:
f5:57:40:ac:45:c7:c3:84:10:78:be:9e:51:3e:1a:
3b:00:f8:6a:39:83:b2:0a:e7:5b:e6:75:36:4b:bc:
5d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4E:6E:5B:FE:22:54:8F:55:84:AE:4E:91:C4:1B:9B:D4:51:3B:AB
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:74:c4:33:60:6c:26:1d:92:a6:a8:4e:26:2d:f9:0d:b7:77:
80:64:cf:e7:bd:ae:d6:aa:82:5a:56:a8:95:ec:e7:11:08:23:
e2:60:e7:49:2c:ef:00:9d:b2:fe:05:de:dd:c9:93:4d:44:df:
31:fe:f9:00:56:16:25:ec:73:b7:6c:01:82:30:f2:ca:9e:a3:
24:55:bf:21:c9:ab:bf:9d:4d:6f:c8:2d:3c:c3:6f:07:dd:89:
9c:e6:e7:2b:d2:cb:43:93:26:e1:78:45:21:59:7e:80:23:e9:
a4:09:06:ac:5a:a9:3a:37:7a:d3:6b:4a:0d:5d:7c:6e:e1:27:
17:09:77:ca:fa:ea:71:59:51:db:dc:ee:8b:da:87:f4:8e:4d:
dc:9b:0d:91:44:02:e2:44:e6:03:c9:b0:a7:8f:80:89:cb:8a:
29:86:96:26:e6:fd:d4:ad:52:47:c6:70:8a:e2:38:59:c2:c0:
b2:59:8a:f2:cc:d3:63:b8:0a:06:ef:c7:6b:e6:5c:ec:9d:28:
dd:71:dc:75:af:86:b7:21:9f:94:1c:0b:af:7b:58:09:6a:21:
d0:1b:ec:98:88:35:29:2e:b6:cf:5c:14:51:4c:8b:a7:af:08:
f2:f1:c7:26:aa:39:18:c4:49:5f:2a:b2:b8:c1:c5:7c:3c:ee:
7b:a7:6e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:57:38 2025 by rpki-client