Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json)
Hash identifier: 74VUMipqg7p+FdrOnupq8HVJA6Bw1qnjx1ed03o0Ig0=
Subject key identifier: 50:27:22:1C:E3:C0:AD:57:35:C8:28:F3:4F:BF:7D:0C:A5:7F:B4:53
Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Certificate serial: 019659F04552AB6C8F067C50A900ED76B4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
Manifest number: 0436
Signing time: Mon 21 Apr 2025 20:00:40 +0000
Manifest this update: Mon 21 Apr 2025 20:00:40 +0000
Manifest next update: Tue 22 Apr 2025 20:00:40 +0000
Files and hashes: 1: Ku3HRyioj0ql8ozTbPCiAHlL8-E.roa (hash: gtf9gLEz02KrYfoccfEAryEzPGbpHsjqTO4FxJ768C8=)
2: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: hn67YD1LB74mN9dYNYG+tJUdjCiGCVsffxiqipz6PYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:45:52:ab:6c:8f:06:7c:50:a9:00:ed:76:b4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Validity
Not Before: Apr 21 20:00:40 2025 GMT
Not After : Apr 22 20:00:40 2025 GMT
Subject: CN=5027221ce3c0ad5735c828f34fbf7d0ca57fb453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:71:76:e7:68:7f:a0:0d:5a:ad:56:e7:3f:
b6:58:84:9c:07:4f:ad:17:b7:9f:59:45:45:91:0a:
f3:c8:75:f0:ca:76:d7:5a:52:05:90:34:1f:d9:d1:
a1:06:5d:e3:f8:24:04:f9:e2:74:f5:19:b4:27:63:
e9:71:ef:9a:be:3d:1f:83:78:16:61:0a:35:75:ca:
ba:29:1d:58:d6:96:d4:e4:ff:89:bc:76:c6:dd:38:
af:3f:5d:48:83:4d:e1:39:ee:ac:12:bb:ad:c9:69:
e6:76:70:d0:ea:0c:2e:07:88:36:86:27:b2:f0:5e:
ec:85:d0:ba:dd:0c:9c:54:8c:17:66:23:38:05:4e:
60:18:22:e7:d9:b5:eb:ea:a5:16:07:df:f1:a8:39:
32:62:86:0b:64:86:70:95:ea:a4:d1:ec:dd:1e:0e:
ba:7b:f7:09:8b:c6:9d:8e:e0:71:62:03:2a:70:e8:
66:3b:6a:9a:3c:6d:32:3a:8e:2c:1f:d9:33:51:c1:
90:e8:14:9c:7d:b5:ba:03:b1:9c:42:a6:fe:0d:7b:
e7:e8:a3:5b:af:e2:eb:f2:af:bf:4f:8c:c7:06:69:
d4:6a:da:42:94:5a:a1:6f:32:5b:25:5f:b7:d0:ef:
f2:af:41:c8:15:70:d2:e4:26:85:a3:12:b0:25:db:
08:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:27:22:1C:E3:C0:AD:57:35:C8:28:F3:4F:BF:7D:0C:A5:7F:B4:53
X509v3 Authority Key Identifier:
keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1b:2c:a2:d7:fc:2b:0e:bc:35:b6:42:86:e6:df:0d:a3:1c:
d2:6d:ce:a5:1f:6c:1c:05:10:ea:1a:5a:d2:92:94:93:ca:a9:
23:d7:ea:9a:c1:39:84:25:10:6c:a9:59:dd:ce:60:ae:6c:26:
49:29:23:b8:89:d2:17:67:f1:a4:97:ad:64:32:58:75:99:ec:
13:2d:15:41:a4:07:df:bc:dd:fb:6c:5c:9d:63:99:d0:e3:21:
02:b4:05:a7:d7:92:15:12:26:7a:8d:f0:83:e2:db:68:b0:e4:
70:1c:50:a7:6c:7c:44:e0:22:d0:6b:6b:a9:1a:ee:f0:8a:1e:
03:72:f4:8e:2f:70:b1:cd:d6:66:c5:46:a2:ff:a9:6d:ca:4e:
d6:04:1c:ec:a8:fe:04:03:8e:6b:42:b1:2c:af:ee:c4:95:82:
6c:65:b9:b3:80:88:f9:f9:27:42:9d:6a:b8:a9:57:7c:b9:a4:
ca:89:55:bd:40:56:3d:a5:7a:db:12:27:9f:33:c5:07:c1:fb:
07:f0:67:5d:42:28:66:44:8e:fa:24:6d:b2:e1:7d:71:77:b7:
0e:f7:f7:5a:96:f8:42:7a:16:b8:12:a0:bf:66:6f:39:7b:4d:
b6:bf:56:c6:18:95:fb:cc:c6:f5:78:07:df:a6:e8:5a:3e:bf:
6c:bb:d1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:46 2025 by rpki-client