Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
File: Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft (raw, json)
Hash identifier: B4L3UfcaB9hhlz9SEKWjrE1s52WIiKQYlBga03g1jDg=
Subject key identifier: 26:8D:CE:91:73:DF:F9:A2:AB:D9:BF:DD:41:43:0E:E8:74:1E:BF:F7
Authority key identifier: 43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
Certificate issuer: /CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Certificate serial: 0196545BB4CF9F561E1BCFDB236548E4CB6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
Manifest number: 0336
Signing time: Sun 20 Apr 2025 18:00:18 +0000
Manifest this update: Sun 20 Apr 2025 18:00:18 +0000
Manifest next update: Mon 21 Apr 2025 18:00:18 +0000
Files and hashes: 1: Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl (hash: T5yXq/kjSeXNoLPPtc7Tae8mELFMVoIfb4cwqY1rxdk=)
2: oskd316tBTAUTSHf0wsKURHXyDc.roa (hash: IsLUQsw+ev9Voy8iNeiPun8V5Wlg4SPwA/B548IB55M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:b4:cf:9f:56:1e:1b:cf:db:23:65:48:e4:cb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Validity
Not Before: Apr 20 18:00:18 2025 GMT
Not After : Apr 21 18:00:18 2025 GMT
Subject: CN=268dce9173dff9a2abd9bfdd41430ee8741ebff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8b:ed:b5:4b:39:10:ff:a8:42:2e:c1:f6:94:
7d:8b:52:01:81:38:b1:84:23:ee:24:19:5a:c9:ab:
e9:2a:59:4e:88:68:35:f6:94:5b:b6:51:e4:bb:c3:
32:f5:21:01:f3:1c:96:93:14:72:45:f6:0b:3e:83:
a9:77:01:f2:fc:fd:da:45:e7:f4:1f:76:60:d6:ad:
c8:d3:13:23:fb:c1:6e:82:d1:05:4a:a0:ab:3b:33:
c6:1b:38:ec:30:c9:fb:f1:ec:6a:5e:b5:af:4d:e2:
93:3b:dc:3d:f7:14:48:45:11:68:9e:90:07:7a:5f:
30:94:ce:26:3a:e6:38:ba:04:44:c6:6f:ec:20:e4:
27:29:13:82:f4:7f:89:8f:13:63:c0:23:84:c0:4a:
72:2a:26:99:b3:95:a2:12:e6:f7:d1:74:9e:95:f1:
30:01:b0:ed:9d:ad:0b:5a:c4:2b:17:85:0c:98:94:
6f:d6:1d:c3:98:70:0b:9a:e0:0e:e8:9c:53:1a:3c:
50:ae:6f:84:02:ef:46:47:56:7b:de:4c:b3:71:05:
15:c5:4c:13:ad:cd:b4:08:5c:94:b4:f9:e5:63:2a:
f3:b7:88:0c:a0:3c:16:5a:2f:3f:ea:56:da:3a:3e:
96:53:da:ac:01:7c:e9:bb:62:7d:ff:42:f9:eb:09:
4b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8D:CE:91:73:DF:F9:A2:AB:D9:BF:DD:41:43:0E:E8:74:1E:BF:F7
X509v3 Authority Key Identifier:
keyid:43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8f:a8:a8:40:b8:ad:37:af:15:05:6e:9b:53:90:94:df:3f:
4f:6c:1d:c5:47:ae:ff:14:57:f5:a5:85:a7:c8:68:e6:0f:dc:
21:e1:b1:62:e2:96:43:95:4f:44:d8:3d:cd:d5:e7:90:ec:20:
32:6e:43:88:6b:5f:82:f3:0d:74:d9:27:53:7e:f9:50:fa:d6:
35:1a:c9:83:98:54:94:c5:76:92:10:36:ce:ac:1e:b7:6e:ff:
19:ff:02:05:98:5f:51:f9:de:16:d4:4b:d5:b9:b7:b7:cc:f4:
32:7d:70:04:8e:1e:38:17:63:c0:1f:a1:99:e6:cb:ed:26:69:
42:57:60:3e:bd:d6:3a:8a:90:7b:9b:18:a0:cd:c1:93:c4:42:
40:23:4c:8e:2c:aa:42:64:c1:11:f7:be:da:19:4a:8a:33:df:
c0:42:ce:c1:e4:64:0b:2c:b4:99:48:1d:44:22:a2:41:01:ea:
59:a4:4f:ad:eb:f0:00:92:cd:f7:48:6b:d8:e5:0e:8e:b0:01:
a6:99:5b:49:a3:a1:47:25:25:50:e2:04:09:80:1a:fa:ca:4e:
94:ff:7b:09:e2:51:eb:f3:5b:20:e9:fc:99:97:02:d9:25:af:
55:52:ae:2b:2b:19:04:60:21:6b:9c:9e:2c:45:3e:ff:40:4f:
e3:a0:f6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:46 2025 by rpki-client