Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
File: Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft (raw, json)
Hash identifier: DJqI/h6qrlfBv5fZfXwlVxq67Vx2gfFCmT2UsYh/xL8=
Subject key identifier: 1B:A8:A6:2A:BA:A7:ED:0D:91:68:D9:17:FF:2F:0F:3E:DA:B5:5C:96
Authority key identifier: 43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
Certificate issuer: /CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Certificate serial: 019677FADC9D04E6440C33BA4FB7767F9634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
Manifest number: 0524
Signing time: Sun 27 Apr 2025 16:00:51 +0000
Manifest this update: Sun 27 Apr 2025 16:00:51 +0000
Manifest next update: Mon 28 Apr 2025 16:00:51 +0000
Files and hashes: 1: Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl (hash: +ebrvhCyvMEl1FtoBw78/Fgur3mazcflWzurzXyMNHI=)
2: VMxe0uGWpSo7MC38AuPyARm4ELw.roa (hash: tdke4bTnyhBCQowtj7hvI4mzPoyXG8N51jhjgyuQaj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:dc:9d:04:e6:44:0c:33:ba:4f:b7:76:7f:96:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Validity
Not Before: Apr 27 16:00:51 2025 GMT
Not After : Apr 28 16:00:51 2025 GMT
Subject: CN=1ba8a62abaa7ed0d9168d917ff2f0f3edab55c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:88:a7:17:be:0e:a2:33:1a:c7:d5:3d:d7:bc:
7b:34:cf:0a:94:b2:0b:4c:86:36:00:99:35:6e:6c:
e4:a5:e1:31:a6:83:c9:bf:6b:5a:cd:bb:28:ae:5b:
a7:da:82:c1:80:1e:60:e1:96:0f:17:df:52:3c:95:
f2:4e:31:98:1c:67:9c:e0:c6:a8:91:14:5a:a1:d5:
e4:98:99:db:a0:7b:0a:ed:33:60:5a:b1:71:7a:e1:
b0:26:73:44:a9:56:67:41:36:44:25:bf:76:8e:14:
b9:d8:c4:48:98:49:15:8a:18:39:f7:64:4f:da:81:
01:3a:fe:89:99:4c:37:57:7b:e8:a9:19:bc:10:cb:
96:d0:3a:b1:c5:43:02:a2:c3:56:b5:57:4b:55:48:
6f:e9:fa:f3:7b:b0:be:33:d2:b7:9b:91:85:62:97:
6c:1c:25:ae:a8:2c:2b:72:e8:de:0a:2e:0b:22:70:
27:2e:8d:ae:e9:47:37:5b:0c:59:3c:8f:64:a2:02:
c2:ec:b0:e3:28:51:06:99:85:cb:c9:99:5d:94:69:
99:91:a9:5e:9c:af:a6:4c:d6:b1:96:01:89:93:f9:
a0:1b:6b:fa:6f:4b:a9:92:db:2e:9c:b6:fd:74:00:
61:86:7a:6b:e6:93:d8:21:6e:af:28:a6:fa:82:3d:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A8:A6:2A:BA:A7:ED:0D:91:68:D9:17:FF:2F:0F:3E:DA:B5:5C:96
X509v3 Authority Key Identifier:
keyid:43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0f:97:28:a5:63:68:93:9f:a7:d7:bc:a1:7a:fd:d7:96:ef:
9d:ba:0f:55:b6:4c:2e:9d:3a:60:cd:5b:3f:93:1d:92:eb:0f:
7e:f7:82:40:d4:36:2e:bb:f7:d1:91:a5:28:e1:52:04:83:ba:
4c:0b:98:87:2f:4c:f7:58:82:74:2c:6a:f1:90:37:33:03:f3:
d1:a6:3b:46:aa:c7:e8:da:91:90:03:e8:a9:4e:7f:08:f5:0f:
df:5e:8a:fc:ae:60:5f:9d:08:8e:01:c8:8f:16:d3:56:bc:23:
30:69:31:68:ae:21:bb:3f:2c:3b:1a:9a:86:87:10:78:2f:5f:
1e:05:4b:69:22:7f:25:87:15:ee:a6:09:70:ce:48:b1:11:ed:
bc:2e:57:e3:52:f8:1d:0f:67:02:20:01:07:75:38:59:a6:1c:
1b:2d:19:0b:46:8f:2e:29:e5:3b:31:e3:68:63:c2:10:94:d6:
b7:8a:e1:03:8a:ca:ee:74:7f:69:20:77:7d:8c:54:a0:68:db:
a6:67:f3:58:dd:45:d1:f3:b8:d4:50:99:5d:0a:54:6f:f1:33:
23:02:da:49:66:88:a5:40:a6:46:38:42:72:1b:87:1a:cb:78:
7c:22:9a:67:3c:90:74:d9:c3:41:fd:19:36:ee:b6:27:f6:99:
ad:fc:86:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:56:59 2025 by rpki-client