Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: +YAXALHzHlVSj7R6Y4nlyGPy4hecteLJqY7AcIGo1I4=
Subject key identifier: 1D:BC:E6:FA:21:85:A9:F3:18:8E:5A:CA:FF:53:6A:C1:08:DB:67:8C
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 0196767A697320E8F35F0FF2912EE56FD804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 07DA
Signing time: Sun 27 Apr 2025 09:00:55 +0000
Manifest this update: Sun 27 Apr 2025 09:00:55 +0000
Manifest next update: Mon 28 Apr 2025 09:00:55 +0000
Files and hashes: 1: 7k7oD7LKN8vmFjmpoHJyZ78ZDsM.roa (hash: 3i6TmeuMJzO7qcqrnXXMfF/eObFiTQ7d5LzNvTE3yPI=)
2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: h8JCsXCcYIfT/UHBvNbgiW92Jy4NndDem1TDJClAxEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:69:73:20:e8:f3:5f:0f:f2:91:2e:e5:6f:d8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: Apr 27 09:00:55 2025 GMT
Not After : Apr 28 09:00:55 2025 GMT
Subject: CN=1dbce6fa2185a9f3188e5acaff536ac108db678c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b3:c2:d4:50:a7:d6:6d:0b:7b:aa:76:25:85:
8d:b9:0c:b8:b5:49:cd:79:27:30:ca:15:6a:ad:2e:
2d:9a:45:f7:ac:aa:86:2c:54:08:9a:18:34:ed:e0:
d4:0f:66:d7:4d:70:0e:e5:40:57:7c:73:e4:cf:98:
80:05:2a:c0:ad:54:37:ee:4a:08:ff:97:df:a4:78:
0e:1f:f0:83:c7:48:92:02:bf:3c:cb:7d:03:d7:2f:
38:12:f9:25:b8:70:bf:aa:33:ee:07:d8:b6:c9:b9:
5d:1b:f6:13:65:68:ee:d7:e9:38:a4:fb:3c:87:07:
c8:fd:18:4c:50:be:a6:47:3b:05:ab:72:7e:1d:00:
7e:24:d5:9b:8f:cd:a5:9b:cd:d0:b3:43:3b:4c:c5:
e7:ba:f0:39:ae:1d:f1:b9:43:19:e8:22:9a:c4:f5:
8e:09:8b:ad:dd:24:a4:dd:da:5f:0a:44:d4:28:71:
3b:ea:13:6b:b2:ba:6e:56:ac:91:76:8a:d7:bb:48:
bd:9d:91:c9:0d:ff:a9:76:cf:dc:07:bc:50:54:2e:
6b:c7:2a:84:ed:82:44:8d:3f:0a:9c:ea:f6:0d:bf:
b8:8b:c1:47:3c:3d:68:4c:ee:97:d6:a2:1c:99:49:
b9:0c:d2:f2:55:a0:6b:c3:1d:d5:8f:89:b9:08:5e:
d3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BC:E6:FA:21:85:A9:F3:18:8E:5A:CA:FF:53:6A:C1:08:DB:67:8C
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6f:5a:6e:76:93:09:67:69:6f:7c:e0:9b:6c:01:f4:a4:f8:
d2:c8:94:10:e3:05:f0:a8:13:cb:85:ae:31:43:63:e6:cf:57:
fe:73:c2:56:3c:70:c4:2b:9d:ac:e6:33:30:47:69:b6:a5:f5:
21:16:82:20:ab:7b:da:f9:9a:b9:5c:cd:df:60:87:f6:1a:11:
78:18:9f:0f:42:c7:b5:65:00:c1:77:74:4f:5a:50:fc:d3:24:
c0:75:a7:45:a1:73:60:cf:d9:c1:46:1f:7e:72:53:0c:10:01:
58:6b:45:f3:57:ba:20:d1:b2:01:ab:c8:4b:0b:f2:7e:cd:2d:
50:f2:64:85:ec:ed:a3:31:43:df:49:62:5c:98:9c:cf:17:c5:
2b:bf:ad:9f:ac:09:75:f9:f4:c8:0b:1e:66:6c:5e:d1:f4:6e:
35:bc:72:c0:d5:ca:63:64:68:1d:73:78:5a:7c:d7:87:02:d1:
60:f6:f6:14:67:ee:d2:cd:cf:74:7c:f4:ba:4c:4d:c9:4e:f5:
fe:b7:f8:85:c7:41:53:0e:d5:d0:73:33:59:8e:e8:fd:32:47:
5e:38:3d:5e:d6:37:97:53:b4:34:82:16:6a:ab:f8:7d:f9:9f:
2f:dc:4a:2b:28:e8:07:f2:28:b4:02:96:87:6d:61:74:2f:a3:
54:90:20:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:18:24 2025 by rpki-client