Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File: _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier: BJbtlS7GT8D5/tQGMiB56CrQxj6p4gxA3d7igQ7XLT0=
Subject key identifier: 48:F5:58:92:C5:2B:09:28:3B:6B:55:4B:91:37:A7:D0:9C:B2:47:20
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer: /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial: 01963EE6E7B353615DAE4F73B4E5550E12A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number: 0521
Signing time: Wed 16 Apr 2025 14:00:42 +0000
Manifest this update: Wed 16 Apr 2025 14:00:42 +0000
Manifest next update: Thu 17 Apr 2025 14:00:42 +0000
Files and hashes: 1: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: FyuvrXWt3vysFLvdo1g2WUSB4rjjfYPXOHLWhzYt+/Y=)
2: lZoUgcddrDnXe4fT6Iyd3y19EFw.roa (hash: XV7kQikecJKDAAiTDNdfiups4qb65I8y80bxuDG+ZNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:e7:b3:53:61:5d:ae:4f:73:b4:e5:55:0e:12:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
Validity
Not Before: Apr 16 14:00:42 2025 GMT
Not After : Apr 17 14:00:42 2025 GMT
Subject: CN=48f55892c52b09283b6b554b9137a7d09cb24720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:99:7c:50:a8:33:98:af:d0:2c:29:8b:4a:
ba:4e:4a:84:7c:4a:66:92:7c:34:04:ad:00:33:b9:
11:a7:b4:33:44:77:a8:59:0f:7c:1a:6f:96:b2:22:
50:e5:34:c7:2e:b0:0b:d3:b5:58:ca:54:dc:fc:e6:
52:59:1c:80:c9:d5:fd:83:04:0c:19:31:39:ec:d4:
73:1c:fe:0e:e2:35:09:7e:1c:f4:f8:e7:7e:f5:3a:
80:e9:a9:7e:b1:34:0f:d0:64:ed:2f:29:fd:33:2d:
a0:43:b3:30:de:6e:14:14:93:d3:a5:b6:8d:92:e8:
35:56:5f:c5:3e:f5:2d:5b:31:64:d6:83:1f:2b:0c:
80:93:5f:d7:14:4e:a7:19:ff:32:e5:f1:64:05:d1:
67:5d:c3:8b:6b:bb:e2:93:c3:13:6d:d5:7d:d2:ce:
ee:0e:5a:80:cd:59:3d:37:f4:1a:89:d3:93:c6:f1:
46:34:fa:1d:8f:fb:ef:f3:5a:d0:68:9c:9c:d8:97:
5b:c3:9f:54:e7:88:23:da:e4:ef:23:d9:d0:69:54:
36:65:92:81:af:53:50:11:bb:c6:5a:fd:8f:57:c5:
e1:f5:60:df:a8:58:62:0e:c6:3a:7d:c2:5f:84:d2:
36:97:4e:8e:07:c7:30:4d:2d:80:bc:0a:d1:69:d0:
19:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F5:58:92:C5:2B:09:28:3B:6B:55:4B:91:37:A7:D0:9C:B2:47:20
X509v3 Authority Key Identifier:
keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9a:92:f9:70:e8:34:3b:1f:d4:f0:3d:b8:7b:32:39:58:b0:
a1:f4:32:10:c4:3c:f8:2e:42:c3:0c:41:ac:8c:c4:6a:c5:9f:
9f:90:3a:34:4d:91:b3:2f:7a:c6:49:9d:b6:57:fb:1e:51:35:
c3:69:4f:26:d3:a1:b5:5d:c6:62:40:84:02:0f:dd:86:25:e4:
ba:4f:fc:ef:df:dd:91:2b:6d:b8:cb:23:1d:40:90:06:3a:eb:
bd:ad:8a:cd:9d:7e:1e:c5:c7:29:e4:49:ad:f2:c8:ef:eb:bc:
78:48:9e:4d:97:69:a2:29:bf:ee:d2:a4:95:dc:4b:5c:33:af:
bc:ad:32:13:18:05:df:61:c0:41:28:18:d9:02:17:bf:6a:b8:
5a:7c:d6:aa:05:09:2c:f4:c8:e1:95:51:ca:8a:03:bb:91:15:
8d:52:2c:ba:bb:54:46:71:45:ac:95:25:a7:c2:23:1f:c7:44:
38:8b:2f:5d:84:6a:67:4f:34:08:04:e2:ae:d4:d9:55:78:3d:
38:c0:b2:86:25:8e:d6:88:60:39:1c:94:08:30:12:d9:be:46:
2f:d4:03:30:a8:34:cf:a4:80:43:e9:fa:1a:3a:af:55:19:a9:
11:fc:18:70:7a:d2:97:a9:be:7d:e3:71:24:f1:a4:f7:ab:fe:
f7:4a:d0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:51:22 2025 by rpki-client