Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
File: Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft (raw, json)
Hash identifier: 73MkUdICi0Ie4oxVGlUN/yueBcVNp3skzwuWRJdoaSA=
Subject key identifier: 60:43:50:01:4D:72:D3:E4:8E:2C:54:97:20:F3:92:D7:CA:E3:99:52
Authority key identifier: 43:44:21:CF:6A:02:B3:8A:F5:B6:BB:CA:6D:BD:37:64:44:8B:6C:B7
Certificate issuer: /CN=434421cf6a02b38af5b6bbca6dbd3764448b6cb7
Certificate serial: 01967F465897A5D4F991A1623D0683C0780D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0Qhz2oCs4r1trvKbb03ZESLbLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 02:00:38 +0000
Manifest this update: Tue 29 Apr 2025 02:00:38 +0000
Manifest next update: Wed 30 Apr 2025 02:00:38 +0000
Files and hashes: 1: Q0Qhz2oCs4r1trvKbb03ZESLbLc.crl (hash: Y2Ad1BhEDo7qdVPxFkmAcj/g/V0U0lJ8Nw9tcf7S5kg=)
2: tBcUVtef6rZ0kSSzgGFNQ0aGmXk.roa (hash: axGcXX34atfoTeccVW4HcK4Aoj164U97BqMvxhWQBsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0Qhz2oCs4r1trvKbb03ZESLbLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:58:97:a5:d4:f9:91:a1:62:3d:06:83:c0:78:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=434421cf6a02b38af5b6bbca6dbd3764448b6cb7
Validity
Not Before: Apr 29 02:00:38 2025 GMT
Not After : Apr 30 02:00:38 2025 GMT
Subject: CN=604350014d72d3e48e2c549720f392d7cae39952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:48:74:61:19:cd:13:60:49:da:52:77:7a:
9c:56:41:58:ca:a5:a3:19:0d:1b:af:89:46:2d:12:
08:33:ba:43:f1:ae:d9:bf:99:d0:40:57:74:f7:b8:
4d:12:86:50:21:f8:aa:93:da:69:c5:19:b0:80:90:
d0:c9:ae:4c:15:c5:66:c9:b7:f9:9b:df:85:62:1a:
77:8f:c0:e7:0b:48:59:6c:b6:d9:7c:3d:3b:9e:5a:
bf:f2:dd:3e:04:5a:fa:38:d1:04:0d:f2:c6:90:b8:
fe:ff:30:f0:c4:62:f6:74:1d:00:62:52:0d:af:41:
83:57:ac:d7:a6:41:f7:01:2c:a5:83:96:05:ca:1e:
48:db:45:75:b1:46:ad:5e:0c:27:5f:d9:48:f8:18:
cb:45:bf:f7:6d:e6:41:89:8b:71:a4:16:fd:25:3c:
5b:71:b3:01:29:53:cc:f4:fb:dc:11:79:7f:f1:fb:
43:0c:ea:bd:85:d9:79:2c:c4:95:3d:05:1b:d3:90:
0f:5d:62:42:7e:50:20:98:24:c6:cd:9f:68:ae:91:
bc:3d:b6:39:8f:1e:b5:e0:53:c5:55:da:ed:4a:ed:
8a:62:b2:31:b8:2f:dc:8a:44:7e:9b:01:ce:e5:87:
f9:c3:7c:44:45:c0:1e:0b:1e:c9:d6:70:88:e6:92:
8e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:43:50:01:4D:72:D3:E4:8E:2C:54:97:20:F3:92:D7:CA:E3:99:52
X509v3 Authority Key Identifier:
keyid:43:44:21:CF:6A:02:B3:8A:F5:B6:BB:CA:6D:BD:37:64:44:8B:6C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0Qhz2oCs4r1trvKbb03ZESLbLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:a9:59:a9:e2:e4:22:89:e5:29:2c:23:0b:43:e8:e6:0a:4f:
95:92:88:e5:8b:b5:8f:10:b0:71:6c:a7:82:2b:49:e9:a4:54:
44:4f:93:75:73:58:3b:5d:51:44:07:34:48:57:10:8b:37:10:
b1:d2:86:b6:30:ee:d1:8b:31:75:e6:56:64:6c:43:e0:b8:60:
9d:75:cb:9b:07:d6:4c:a4:8f:ad:71:d6:7d:8f:a5:2d:88:50:
0a:d1:10:3c:44:a2:04:f3:51:a3:16:3c:15:54:63:ba:f9:c6:
95:81:1b:16:95:17:f7:92:e1:fc:22:88:df:15:a0:a6:1a:9d:
c2:ed:36:00:e3:ae:b0:0b:24:7c:a9:a5:51:7f:11:24:a4:e7:
78:c2:61:90:fc:17:db:33:19:4e:c7:f6:f4:b8:3d:d7:a8:a4:
84:1b:b7:6e:37:ac:1a:73:22:4b:f1:56:b0:0a:65:98:67:6f:
24:ad:6c:b3:7e:22:c5:c0:62:a8:0b:6e:46:72:94:13:32:1a:
18:df:87:e4:f3:11:9d:cc:e4:b6:3b:96:86:e9:e8:c9:00:a5:
6a:3d:13:03:c1:e1:96:37:d8:cd:2f:ab:8b:82:c3:98:97:22:
ed:7d:a6:42:ef:30:9d:55:3b:c4:1f:ff:96:c5:67:1b:d1:1f:
3c:a6:38:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:42:45 2025 by rpki-client