Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
File: Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft (raw, json)
Hash identifier: OPgPby5wV+vkStgQy0XaOk14JCE4bDSLeTMoVmZANLk=
Subject key identifier: 54:FC:26:B4:8F:C8:98:1A:9B:82:FF:07:69:2E:3C:8A:08:79:6F:17
Authority key identifier: 42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
Certificate issuer: /CN=425bf4375f17a0357019690301f9419324ff7d44
Certificate serial: 0196488E92B94B2BFB1C5C782E900CC75D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
Manifest number: 148E
Signing time: Fri 18 Apr 2025 11:00:25 +0000
Manifest this update: Fri 18 Apr 2025 11:00:25 +0000
Manifest next update: Sat 19 Apr 2025 11:00:25 +0000
Files and hashes: 1: Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl (hash: CGy1Vpus+CJ8FOgchcDWlvfrU6yEiJXovH/U+sLzJnk=)
2: RhrEJBm06vcPBY7X0Je_fY5rgcI.roa (hash: 4yKx6aLoX0+QkHu1SlH9OK51/kRC6FYJDLkFroupLIw=)
3: mSlCJZv4uLXPX9TG5FqcmvMai0Y.roa (hash: Iq0hlW5EajbykdfiIDL0asLPrwjWnTj7+DtJoBY9nFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:8e:92:b9:4b:2b:fb:1c:5c:78:2e:90:0c:c7:5d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425bf4375f17a0357019690301f9419324ff7d44
Validity
Not Before: Apr 18 11:00:25 2025 GMT
Not After : Apr 19 11:00:25 2025 GMT
Subject: CN=54fc26b48fc8981a9b82ff07692e3c8a08796f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ee:89:1f:c1:9f:34:c9:3f:38:28:bc:66:c5:
b2:6a:b4:49:37:8f:bb:6c:d4:64:a6:e8:f2:25:bc:
75:02:ba:73:69:2d:30:e9:9c:eb:5a:cd:9e:92:19:
6b:59:d5:e5:43:d0:a1:f6:92:df:39:a7:11:8f:3a:
7a:ca:9f:e8:27:52:17:3d:3f:4d:7b:5e:7f:d9:4f:
cb:2a:5e:d4:1a:e1:77:0d:a2:ad:d9:7d:85:f4:80:
50:c6:aa:1a:6a:80:3b:6f:37:e7:b6:14:4d:87:18:
6a:53:16:71:a1:37:5f:0c:af:a7:bd:4d:32:b9:8b:
4e:82:ca:58:0f:cb:a1:08:dc:6a:0c:c6:e6:32:16:
c8:a3:74:19:ef:5a:f2:e0:94:17:af:89:86:69:d2:
80:37:e2:85:c3:77:c1:6f:5c:28:1f:01:9a:43:3d:
9b:cf:6e:c6:28:5f:23:11:19:af:3f:bb:59:37:8e:
04:1d:9c:76:d2:32:17:68:af:4a:28:36:45:4c:f6:
8c:13:ac:6d:fa:31:d3:90:9d:ea:a3:05:6e:af:75:
36:53:21:be:58:4e:6d:cb:86:13:3e:1a:dc:86:e9:
8f:02:46:79:e6:b8:1c:1e:d1:1a:69:68:c9:27:c6:
e7:17:2a:d1:ce:07:69:d7:bf:99:3c:5f:a0:b9:2a:
97:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FC:26:B4:8F:C8:98:1A:9B:82:FF:07:69:2E:3C:8A:08:79:6F:17
X509v3 Authority Key Identifier:
keyid:42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:22:23:ba:8b:ae:a0:d7:2f:77:8b:1d:12:13:8d:78:47:3d:
36:70:be:37:96:49:b3:0b:cc:61:e1:fe:ef:b1:96:56:b1:f6:
ee:1b:6d:48:9a:b3:90:ba:fe:bd:9f:cc:82:95:ae:9f:63:49:
a4:99:a2:05:40:6a:e2:54:5d:b2:eb:84:9e:d2:d5:40:62:e5:
bc:a0:33:37:65:99:f3:55:dc:4b:6c:e5:48:a2:f9:44:52:69:
a2:d2:0e:07:7f:0f:e7:02:48:14:bb:a2:cd:f1:fe:cc:ce:a7:
06:3f:84:18:7d:23:61:aa:0b:1e:27:24:01:7c:9e:00:53:e7:
e7:16:b3:88:c4:0e:a4:96:ab:6b:a7:f5:1e:f9:dc:aa:e8:52:
96:7b:06:8c:a3:d6:d9:f2:1c:85:55:1b:8b:ef:01:a2:fa:3d:
be:69:3a:10:a0:ec:ed:77:94:16:92:2b:5f:c7:40:29:27:46:
db:d2:e3:8a:2b:be:32:7c:01:ad:16:34:75:e6:ba:5e:58:a2:
bf:92:8a:60:d4:5f:da:de:1d:a7:15:51:4e:f8:8d:73:97:74:
dd:59:b4:f3:f0:1b:c1:14:77:9f:fb:7f:c6:a9:24:ec:10:a1:
8f:7b:39:5c:8e:ed:1f:76:53:4b:46:54:42:03:21:9d:7a:30:
7f:21:df:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:04:15 2025 by rpki-client