Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
File: 5qowZQKj7IBJPXU0jChYsa9-z4A.mft (raw, json)
Hash identifier: cOpMQUG2ZBaYGl24hdYfIFres63DYyBPUcrGy9y9PgA=
Subject key identifier: 49:E8:2D:20:DF:53:04:52:EA:BA:D7:F0:26:3A:87:0F:28:F5:CB:AC
Authority key identifier: E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
Certificate issuer: /CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Certificate serial: 01963E0B4A82E721A9D26F48D937F08BB068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
Manifest number: 0377
Signing time: Wed 16 Apr 2025 10:00:49 +0000
Manifest this update: Wed 16 Apr 2025 10:00:49 +0000
Manifest next update: Thu 17 Apr 2025 10:00:49 +0000
Files and hashes: 1: 5qowZQKj7IBJPXU0jChYsa9-z4A.crl (hash: pPUfmosk263o3AmqhA7Qcw6QMyNCzGQvrFbAIA8lvyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0b:4a:82:e7:21:a9:d2:6f:48:d9:37:f0:8b:b0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Validity
Not Before: Apr 16 10:00:49 2025 GMT
Not After : Apr 17 10:00:49 2025 GMT
Subject: CN=49e82d20df530452eabad7f0263a870f28f5cbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:42:c8:bc:88:fd:0c:64:c6:a7:85:e6:4a:56:
8d:89:2d:0c:76:19:e7:45:02:fb:07:b1:af:88:ea:
f8:b2:bd:0f:ad:65:ed:9e:4c:62:ed:04:d7:e8:0a:
be:43:40:15:5f:e8:cf:12:b7:36:15:05:2c:e2:79:
1e:08:a7:95:6f:7c:bc:38:96:37:bf:42:90:cd:3b:
f3:96:5c:4e:20:c1:6f:a7:b5:2c:7f:7c:32:01:73:
06:dd:73:d9:01:7a:00:62:95:3d:e1:8d:f7:b0:4d:
81:b3:b5:d4:c4:f3:fd:9d:67:22:3a:d6:23:ec:8a:
c1:79:15:fd:eb:00:10:39:be:d6:68:85:80:92:61:
83:34:54:78:81:ca:74:c1:cc:02:2f:ec:84:d5:20:
b0:6d:82:50:f2:88:1a:ed:78:c8:0b:1e:cf:21:cb:
05:c5:39:20:aa:20:36:d9:e9:52:e7:59:a8:de:57:
56:f5:42:99:32:e8:4f:80:61:7e:cf:55:2c:e8:38:
59:48:ad:89:44:cd:f9:71:70:1f:e6:8a:a8:a6:02:
a2:b0:81:a6:75:7d:6d:93:06:71:b9:fd:eb:98:72:
8f:0b:df:eb:e1:79:3e:b6:fb:c3:31:b7:fe:01:df:
43:9f:68:e0:86:23:b4:1e:31:0a:26:a8:b2:51:54:
83:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E8:2D:20:DF:53:04:52:EA:BA:D7:F0:26:3A:87:0F:28:F5:CB:AC
X509v3 Authority Key Identifier:
keyid:E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3a:ef:1d:cb:f3:97:29:0d:4c:16:7c:78:3c:1a:c7:ee:39:
12:68:dc:86:43:9c:25:c3:67:fd:13:df:bb:21:12:76:05:c8:
33:10:ce:ce:67:0f:32:37:a7:e1:3c:73:69:68:4a:8f:26:78:
4e:21:0b:cc:01:5e:91:ed:ea:67:98:31:3e:4f:e1:e3:7e:9e:
55:5a:84:b8:85:1f:06:87:85:0c:49:3a:f8:65:72:20:5c:0e:
6f:20:60:2c:47:8b:d5:21:56:df:46:e9:55:d5:b8:ca:c9:6f:
08:ea:a0:89:ab:d1:fe:23:dc:6c:bd:4d:5f:48:fb:d6:f8:13:
23:06:f0:42:e6:65:f0:69:10:98:a8:42:77:ac:d3:78:a5:8a:
ad:0e:62:62:b8:2f:f6:95:8c:4e:1b:a7:ce:71:2e:9f:b5:1b:
30:73:3f:f1:9e:0e:6f:0c:70:14:e5:dd:21:85:74:3b:6b:a6:
3f:ee:7d:6b:9b:6b:ac:7b:7d:23:84:ff:ab:ce:76:71:4a:4c:
c1:ca:ed:90:27:07:f1:f4:57:14:ee:49:80:26:b4:85:f8:8a:
a3:e7:0c:33:a4:2b:f6:fc:2a:79:ae:3b:3f:0e:f0:6e:4e:f7:
46:b3:a7:37:0d:62:71:12:7a:ba:ee:42:97:58:dc:e4:65:12:
63:2b:13:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:06:27 2025 by rpki-client