Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
File: Q5i1d7IjtadjUSGadP2kRnBIkPc.mft (raw, json)
Hash identifier: 7Y3GoCp2hZr8+S0Z0Hhns1zI+3eGyGRSJXTeASbdU1c=
Subject key identifier: 97:AC:35:82:C9:0E:49:4D:B8:D7:8A:31:B3:6E:70:6D:A3:E5:A2:3C
Authority key identifier: 43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
Certificate issuer: /CN=4398b577b223b5a76351219a74fda446704890f7
Certificate serial: 01964C348DC549822BCAE00966E607A082A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
Manifest number: 11E1
Signing time: Sat 19 Apr 2025 04:00:34 +0000
Manifest this update: Sat 19 Apr 2025 04:00:34 +0000
Manifest next update: Sun 20 Apr 2025 04:00:34 +0000
Files and hashes: 1: KL5bIat3Yk7dpaHmhHBN9ywSikg.roa (hash: 2Dm1yDCv5S4uhPon+c/p0fcUA41+SmoP2uLFsPOLfB0=)
2: Q5i1d7IjtadjUSGadP2kRnBIkPc.crl (hash: Jx/bybE7Zt3EO6fdQRhASi/F1iZmdp3aY6A508fL3sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:8d:c5:49:82:2b:ca:e0:09:66:e6:07:a0:82:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398b577b223b5a76351219a74fda446704890f7
Validity
Not Before: Apr 19 04:00:34 2025 GMT
Not After : Apr 20 04:00:34 2025 GMT
Subject: CN=97ac3582c90e494db8d78a31b36e706da3e5a23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9a:fa:e1:ed:af:62:a4:3a:7c:82:ac:61:e9:
05:f9:92:a2:56:00:91:d9:26:9b:09:bc:b5:09:47:
bd:13:27:42:3b:e3:4c:df:7b:a8:0e:2d:1c:f8:a2:
79:20:22:a0:e3:0c:53:36:71:38:30:0d:c0:af:3c:
c3:09:6a:d4:b6:23:85:c0:a1:b0:cd:22:53:9b:d0:
63:f5:31:94:c3:17:5e:52:c6:f7:49:6e:53:70:48:
e4:4e:5d:04:55:72:20:f6:3b:02:10:cb:7e:ad:06:
2c:ee:bc:b5:52:9c:c6:3a:c1:8d:80:43:d5:cf:2a:
58:0b:3b:f9:a2:8a:57:eb:37:17:9d:33:dd:7a:c9:
4f:8a:d0:72:64:17:a8:b8:b7:bf:ff:71:70:eb:1b:
2c:13:49:ce:29:e1:d2:dd:da:cb:5a:53:7e:c7:eb:
25:80:0f:94:30:1c:2b:71:7c:e9:92:ce:d7:6b:22:
87:a2:20:1b:b8:b2:1d:6b:e0:d5:ce:87:1b:95:82:
ba:cb:b2:ef:8c:bf:67:b5:28:15:01:14:e6:61:19:
4b:11:5d:a0:92:6f:49:f0:36:b8:7d:aa:08:76:9b:
13:27:80:04:c6:69:c8:0b:62:f9:02:28:64:cb:c4:
3f:a7:04:0f:3b:9e:b8:b2:d1:ef:5e:6b:62:97:79:
4b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AC:35:82:C9:0E:49:4D:B8:D7:8A:31:B3:6E:70:6D:A3:E5:A2:3C
X509v3 Authority Key Identifier:
keyid:43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:63:ba:e0:49:3d:dd:37:28:6f:b8:25:26:1a:39:08:f9:f0:
12:da:9f:c1:70:6b:82:a0:4c:5d:d3:e1:de:31:51:ee:7e:b1:
73:b3:e9:cc:58:04:ca:41:55:ef:be:10:d5:68:79:49:bc:43:
d4:33:11:8c:7c:91:58:be:c9:f4:e5:a1:99:d5:84:dc:3e:eb:
67:45:28:de:17:fe:24:97:24:0f:2f:6b:f6:84:b1:58:5d:fc:
a8:6d:bf:c6:e0:ba:c2:19:8b:c8:84:2f:24:0f:9b:e9:0d:86:
e4:75:79:f4:92:15:57:b8:f3:38:11:59:cb:d9:a6:8a:5f:16:
24:c1:48:54:d8:bc:a6:12:cc:61:2c:5f:28:09:1d:ca:dd:32:
f8:bf:3b:3f:d1:d8:e1:23:8c:ab:e8:6e:fe:87:19:d2:1f:74:
30:6e:b7:35:ce:57:14:c6:94:64:62:3c:07:d0:4f:bd:c8:31:
96:34:7f:6b:6d:b2:d3:90:74:d7:19:a6:e5:3a:ef:eb:72:51:
a5:1d:55:b1:78:80:d3:74:59:ee:73:7a:b0:92:a5:db:00:89:
61:1c:d1:3a:f9:78:eb:67:32:7c:1d:8e:30:cc:36:25:45:8e:
1b:f6:c2:71:27:02:3e:eb:77:91:34:56:e5:86:2f:08:5d:5f:
00:83:b8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:33:25 2025 by rpki-client