Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
File: _QV2-GPffjIbHKUFDOLC3S_K2wk.mft (raw, json)
Hash identifier: 3jJ93VnFbWqxurr3dBNIwtWl1430JxtbWtHy7k1aZb4=
Subject key identifier: CC:D9:BF:8A:E7:03:27:8B:F9:1A:06:CE:BA:90:6E:7D:F0:C1:8C:25
Authority key identifier: FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
Certificate issuer: /CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Certificate serial: 01967D20FABB5D48D474EB67F43F9CA6D55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
Manifest number: 0B93
Signing time: Mon 28 Apr 2025 16:00:35 +0000
Manifest this update: Mon 28 Apr 2025 16:00:35 +0000
Manifest next update: Tue 29 Apr 2025 16:00:35 +0000
Files and hashes: 1: _QV2-GPffjIbHKUFDOLC3S_K2wk.crl (hash: zeqA4sPz8hESN1sw5LxDahEJBQPq9XIV4RZ5NxGm4ZI=)
2: pV6U6t20LPmoE06QzHTKIt1mCdk.roa (hash: 4w6WEHf882+u2XxLJjz6oTPtOsIJ8lQmZFWVpNl8GG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:fa:bb:5d:48:d4:74:eb:67:f4:3f:9c:a6:d5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Validity
Not Before: Apr 28 16:00:35 2025 GMT
Not After : Apr 29 16:00:35 2025 GMT
Subject: CN=ccd9bf8ae703278bf91a06ceba906e7df0c18c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:60:cc:17:4a:9c:ef:06:9e:44:33:4f:1a:
62:22:34:ab:77:17:98:00:4b:dd:cf:6e:15:5f:65:
42:41:37:69:70:0b:fd:a2:ea:fe:56:2c:26:84:35:
e4:72:3d:8c:81:b0:a9:b3:ce:b1:a9:db:c3:2c:33:
81:f4:49:10:29:af:bc:3c:44:8e:e0:5a:6d:a4:6f:
5f:b5:a0:01:a9:63:cc:21:db:ed:d1:b9:a4:7b:fb:
99:d9:a8:7b:a3:3c:d7:84:66:0e:e2:6c:a0:39:e4:
93:b0:4b:ec:4c:28:28:33:e8:2f:d6:0e:88:41:87:
9e:92:f4:bf:11:d9:0b:dd:e7:46:3a:38:3c:c2:bd:
da:03:98:f0:9f:c8:62:35:25:56:59:4d:f6:88:58:
8d:88:d8:fe:d7:99:7d:99:38:73:d3:e5:79:49:3c:
64:a9:5b:20:99:7f:7c:a9:02:52:86:8d:76:7e:87:
95:c7:fc:a3:82:24:a4:61:d5:c8:aa:95:f5:9c:04:
72:d4:f8:e5:a9:9c:1d:a2:b3:34:28:6f:dc:78:7e:
d6:bf:a2:6f:a0:c5:a7:13:84:f4:6e:68:38:0d:ad:
9e:97:52:b4:b5:1a:14:f0:df:93:f3:2c:82:2f:cf:
39:cc:3d:e6:2c:62:69:c3:b9:8b:b8:ec:cf:5c:2b:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D9:BF:8A:E7:03:27:8B:F9:1A:06:CE:BA:90:6E:7D:F0:C1:8C:25
X509v3 Authority Key Identifier:
keyid:FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:20:49:5b:33:dd:ec:bc:5c:fb:e5:2d:6f:c1:79:f9:cf:d9:
cb:37:22:0d:8e:39:97:9c:fb:40:d5:de:08:0e:a0:5a:be:38:
43:60:38:9c:c7:24:73:82:6a:95:47:8d:22:cb:7b:77:b4:2a:
ab:e4:f3:d4:e7:93:f1:5c:e2:e8:f2:01:f9:44:d4:0e:3b:ae:
73:93:54:bc:9b:ab:15:56:54:e5:58:95:32:44:85:0b:55:83:
45:48:ae:08:c2:ee:b1:cc:2b:52:34:3d:a4:c5:26:69:c7:0f:
f9:58:cb:cb:13:fb:1a:95:05:5f:b3:00:14:12:42:13:2c:f9:
bb:cb:e0:95:92:cc:bd:e3:8b:99:9f:30:98:be:08:b7:3a:d8:
35:7e:61:6d:f3:aa:2f:94:62:ce:46:c5:e3:5b:67:4c:98:cc:
47:ac:b2:2b:24:91:ea:a8:e8:24:e0:73:c6:7a:95:2f:4c:3b:
5c:d8:f0:3b:d8:56:26:3a:08:d4:1e:28:d6:3a:29:a2:88:fb:
70:db:a8:0a:c3:73:64:c6:d0:18:b8:f3:d0:65:7f:2f:a6:4d:
b2:53:56:8c:be:ee:0f:fe:81:ae:cb:fe:fd:cf:42:3a:86:20:
25:80:e9:84:1d:3a:85:5d:bf:30:ed:9a:fc:f0:01:30:9f:ea:
d9:67:c5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:32 2025 by rpki-client