Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier: ytKn57vjCdTFvbd3vO/10vCrv3XDchJ0Iqa7cWK9keA=
Subject key identifier: 24:C6:FE:8A:E1:28:1A:AF:C6:25:FF:FD:7E:FC:63:63:B4:0F:F9:E5
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 019677FB9463B0BA3CD911018AD1A589C22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 16:01:38 +0000
Manifest this update: Sun 27 Apr 2025 16:01:38 +0000
Manifest next update: Mon 28 Apr 2025 16:01:38 +0000
Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: jYb1c35MVOwLTaiLUnHqwFOGQRfzsZuNOTH+WJt18Io=)
2: U_YkWvIbAgSV60H8mUEYqY805XM.roa (hash: rIv2yHmGWREBYz1rPgWWMboLSc3Q207kM2zjs8JlUoo=)
3: muAVUu1aPnEHmAc-r1xMJMX_xwE.roa (hash: t/IG40S9IeJr1JmuDkCemhTExv33uEsQ8ntTYx4HhXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:94:63:b0:ba:3c:d9:11:01:8a:d1:a5:89:c2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Apr 27 16:01:38 2025 GMT
Not After : Apr 28 16:01:38 2025 GMT
Subject: CN=24c6fe8ae1281aafc625fffd7efc6363b40ff9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:80:48:f8:d8:4e:51:b8:5e:c2:21:f1:1e:
aa:db:7e:72:ad:3c:2f:63:de:cf:5d:11:a4:8f:22:
1a:5e:4e:24:24:fb:a6:99:ff:a5:aa:60:8f:66:35:
22:f5:cb:51:54:0b:c1:7e:59:16:da:14:f8:74:b2:
f1:28:07:18:99:69:f1:77:d1:fa:d1:7f:09:9f:aa:
b0:0b:1a:c6:01:98:5b:5f:00:e1:84:66:22:d8:f6:
d6:42:3f:5c:14:b3:bc:e4:21:32:c9:32:55:88:b1:
3d:96:67:39:cc:80:ce:9d:06:f0:50:b2:ba:94:03:
bc:b7:88:32:83:3b:66:52:a4:06:25:b9:76:63:ec:
38:f3:c3:42:b8:ab:7e:0f:83:e0:5a:cb:c9:9d:c4:
47:ea:6c:d1:ff:91:20:1a:2c:13:5e:02:1f:e0:57:
94:f6:55:34:b7:2c:6d:6b:a8:1e:b7:02:d4:da:4a:
6a:c0:8b:df:30:43:4e:ad:e2:8b:71:4d:8e:31:de:
2b:62:f8:a4:a1:76:af:fe:dc:fa:ff:88:92:9c:1a:
d4:10:0f:23:a8:62:94:6c:fa:06:9f:6b:10:1c:5b:
da:09:56:99:ac:39:07:60:b2:23:b0:94:33:43:3a:
d2:14:52:7c:48:7a:96:9a:a2:52:50:f9:10:70:4e:
0d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C6:FE:8A:E1:28:1A:AF:C6:25:FF:FD:7E:FC:63:63:B4:0F:F9:E5
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:02:f0:91:5c:1d:e5:cd:74:9d:2b:c1:bb:7b:da:e9:e6:36:
b4:ca:96:40:dc:b3:87:c2:26:2e:7a:f5:a3:1d:4b:e0:f4:16:
2f:84:cb:d6:42:0c:bc:91:e6:a2:de:7b:54:9e:28:96:94:d0:
70:f1:fe:22:f1:9d:08:a8:22:da:ef:b6:aa:2b:34:44:4a:d9:
21:fb:70:a9:f0:c3:d8:48:cf:ca:38:5d:56:3b:d6:66:6b:c9:
71:9d:1a:54:e5:c8:1c:e7:fc:4d:49:66:30:f9:de:56:e0:cf:
4a:ee:7d:20:26:d7:3d:d6:12:4b:a3:fe:38:b8:34:60:02:ed:
4e:e4:50:98:00:c6:9a:6a:bd:40:b6:e0:14:f8:e7:1d:ed:0e:
5e:fe:7d:1f:39:1f:00:bc:9e:bd:6f:84:04:88:18:fe:e7:2b:
1d:1f:82:9c:38:1d:b9:a8:1c:30:42:61:2f:d5:cf:60:cb:11:
9c:05:9c:f9:79:05:56:a1:12:66:69:b0:a8:ca:11:cb:db:de:
89:4e:bb:4e:a2:f8:36:76:84:54:94:f9:96:32:82:5c:e8:a1:
92:3e:4d:df:a3:dc:bc:4b:17:4f:1e:c4:7c:80:f9:06:0d:23:
85:33:2f:e2:95:c3:a6:f0:74:88:c8:b0:9c:e0:be:66:13:ab:
e3:ef:da:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:27:53 2025 by rpki-client