Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
File: 1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json)
Hash identifier: 7mLLlIy2ngqSXKEx06El0dNyn8TTqhkwqYrC5j+dbPU=
Subject key identifier: D0:48:86:F2:39:34:EE:06:23:40:03:78:95:46:B9:C8:37:6A:EE:43
Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216
Certificate serial: 01965011F7C0541F51E19BAA38CCC232305B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
Manifest number: 053A
Signing time: Sat 19 Apr 2025 22:01:16 +0000
Manifest this update: Sat 19 Apr 2025 22:01:16 +0000
Manifest next update: Sun 20 Apr 2025 22:01:16 +0000
Files and hashes: 1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: cHoqrHy8wqX8M/So2xV/zJdA0VI1O47aU+CnaYNlnXs=)
2: hth3rJjFWs6NUkK-o0tTbHyr4L0.roa (hash: Vn4AMxs64boyWbgENvm4Of96GFQtj+G6HAjnQ0teAh4=)
3: lPDpfx3Te7zjZCAdY5UFziIAeNM.roa (hash: 5bkDE5sFGFyGe5UEk23hluwD8i8ffdDbAYDQQoPB27A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:f7:c0:54:1f:51:e1:9b:aa:38:cc:c2:32:30:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216
Validity
Not Before: Apr 19 22:01:16 2025 GMT
Not After : Apr 20 22:01:16 2025 GMT
Subject: CN=d04886f23934ee06234003789546b9c8376aee43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:c8:64:6e:90:75:60:1e:e4:3b:4b:96:44:
56:4a:74:fd:42:c7:89:7e:75:be:b0:5f:93:9d:f4:
11:66:96:3e:97:a8:08:47:6b:de:7b:38:af:10:5f:
c2:3c:ce:e3:f1:ac:0e:5f:ed:9b:63:ad:90:8a:dd:
5a:ef:7f:86:bf:68:35:8c:6d:f5:ab:4a:bf:09:ea:
94:24:eb:93:d9:88:57:ab:80:34:57:17:f3:89:cc:
b0:63:de:a3:85:41:02:12:8c:5c:dc:d4:77:9f:48:
a7:91:91:d5:bc:d0:2a:7f:6d:b8:bf:29:9b:f2:a0:
09:a9:11:77:a4:70:25:90:55:28:73:10:64:be:86:
5a:b0:64:e4:61:40:e8:d7:df:33:9c:76:dd:7a:43:
f2:3c:75:9c:b7:e3:d9:04:6b:db:2b:8b:2c:9b:ed:
27:6c:d7:be:7a:87:52:84:8a:22:ef:fe:4f:ef:d2:
69:58:4d:a0:76:d8:42:b5:c6:39:29:6e:70:6b:88:
be:12:89:6e:6f:13:ec:8a:a2:4e:81:5b:6b:ed:fd:
e6:84:49:d5:ed:33:d3:ed:eb:74:e1:ba:7c:83:d4:
20:8e:78:4b:b9:af:6a:e1:b0:68:f5:f1:fb:22:d2:
ba:90:13:11:ec:3a:b1:4b:1b:4a:2d:dc:28:41:67:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:48:86:F2:39:34:EE:06:23:40:03:78:95:46:B9:C8:37:6A:EE:43
X509v3 Authority Key Identifier:
keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:49:18:ba:d1:31:c8:14:fc:75:de:85:7e:36:31:42:b2:80:
6d:51:b0:21:89:5b:18:76:87:be:b6:ee:8a:91:27:13:a9:73:
9d:dd:06:fa:7d:07:5b:db:69:62:66:20:53:84:00:b1:77:07:
8f:17:0c:14:0e:ac:2e:7d:19:ca:e9:91:f9:6c:de:fd:fd:41:
9f:45:57:59:d4:49:4b:ad:da:f5:c5:64:e1:1d:b2:e1:ee:3b:
b6:8c:66:45:35:63:6c:e9:d1:78:c8:06:e7:b1:c7:66:19:ea:
15:83:12:7b:35:54:01:23:65:29:b7:fb:9a:2e:0d:4b:bf:75:
d3:35:2a:7f:82:b3:ec:29:19:86:49:84:6c:da:ee:aa:19:67:
64:24:f3:c4:0c:90:25:19:26:74:13:0c:ef:9b:0d:6d:bb:77:
18:5a:bc:1d:ab:55:5e:ca:49:02:66:0f:53:00:14:91:94:62:
0d:ca:44:dc:66:75:41:95:5f:fd:6a:5e:73:d5:fc:af:13:73:
a6:4b:65:49:90:b3:e5:41:a2:e2:90:e0:bf:70:20:d1:f6:43:
fb:3c:4c:4c:9d:0d:ca:be:9d:94:1f:fa:35:84:51:df:46:af:
c0:a6:1b:f3:f6:00:97:2c:95:81:55:c2:42:61:2b:c0:a4:fc:
ce:a4:21:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:20 2025 by rpki-client