Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
File: Q34DDURmGkwgHroD3kUrBLjn2eU.mft (raw, json)
Hash identifier: I13xp0Jl1RX2iKJ8S31iUIkEGLn6bJK34l83SvgVRv8=
Subject key identifier: AD:EB:A9:3F:61:CC:C3:70:EC:F7:F4:6A:6C:95:5A:95:0E:2C:BE:1A
Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
Certificate issuer: /CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Certificate serial: 01968ADCBE682D31586FEB388048EEFB3ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
Manifest number: 145F
Signing time: Thu 01 May 2025 08:00:44 +0000
Manifest this update: Thu 01 May 2025 08:00:44 +0000
Manifest next update: Fri 02 May 2025 08:00:44 +0000
Files and hashes: 1: Q34DDURmGkwgHroD3kUrBLjn2eU.crl (hash: J5k4AZuNVbMBp3O05dUPsSrmxI8HeNkWEaaWKNmnfWo=)
2: aTnDDG7156iJH1B7VtXl45Lxz4c.roa (hash: uqmE7u3SyyyiP9Dvg82dGi927wLVOacs75i5/YZ4Qho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:dc:be:68:2d:31:58:6f:eb:38:80:48:ee:fb:3e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Validity
Not Before: May 1 08:00:44 2025 GMT
Not After : May 2 08:00:44 2025 GMT
Subject: CN=adeba93f61ccc370ecf7f46a6c955a950e2cbe1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:4d:18:d8:c5:bc:74:13:43:e0:1d:5a:b4:
b9:3f:8c:8d:cb:d9:b4:b1:d8:7f:b6:59:27:90:eb:
13:f9:5d:0d:bb:ae:e5:cf:4c:8f:eb:d5:eb:b2:68:
48:d4:0e:3f:19:90:18:f9:60:69:b8:65:da:5e:ef:
c5:8f:db:c6:83:5d:1a:0e:fa:13:5d:5f:67:5d:e1:
c3:0f:78:3a:ae:cb:ca:a9:41:d5:11:06:37:a6:12:
f0:73:05:35:d0:85:e8:bc:91:49:2f:2b:6c:97:29:
c3:9e:a4:60:91:96:76:03:45:94:11:7e:37:ed:73:
ff:27:b3:f8:75:d0:23:e9:a2:ff:eb:aa:6a:75:ef:
f8:3a:ad:64:53:19:c4:a9:37:cc:91:44:65:42:d5:
35:8c:c8:3b:fe:a7:e2:f3:0c:46:ac:1e:1e:a1:01:
c1:17:55:e0:01:c2:eb:eb:8c:d0:dc:f2:8b:86:41:
75:5b:2e:e8:d2:95:ff:6a:15:fd:de:aa:d2:8b:d3:
45:3b:a1:b6:e6:4a:0c:da:9c:8e:36:37:dd:90:10:
13:04:8d:e1:d4:7c:1c:08:3e:2b:9a:08:36:05:d8:
0b:f8:5a:bb:82:d6:8d:c3:be:b4:80:ea:62:3b:5a:
cd:36:29:cd:82:95:a4:b3:fd:31:5b:82:1d:af:d6:
30:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EB:A9:3F:61:CC:C3:70:EC:F7:F4:6A:6C:95:5A:95:0E:2C:BE:1A
X509v3 Authority Key Identifier:
keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3a:3e:71:4f:ae:94:74:3e:f1:8f:6a:ab:16:7a:ef:b2:e5:
d1:b1:86:8e:ba:04:dc:5c:c4:54:5a:0b:05:9f:c0:60:b0:1c:
f7:33:34:e1:15:51:f5:af:2b:61:1e:44:42:c8:eb:b6:60:54:
2c:f5:64:84:f6:04:3e:23:1f:14:c6:1b:8f:1d:09:41:18:0d:
c1:5a:ae:c2:ce:5d:f9:5a:48:47:9d:f1:3e:26:e0:02:d1:c8:
ff:18:60:63:4f:fb:d0:9a:85:ec:53:72:36:66:97:f9:a2:c4:
48:e3:65:86:0a:3a:53:b3:13:90:8d:ae:92:24:68:7a:b6:d0:
c5:d0:9e:07:e1:1d:96:03:4e:57:39:e1:95:28:09:fc:62:ce:
97:74:39:e0:59:ab:4c:f3:32:e3:5a:7d:e8:b2:86:ec:35:94:
8d:61:b0:d8:3d:7a:e9:b9:60:83:c9:d2:5e:b6:e3:c7:51:a6:
24:a2:68:70:c7:0c:8d:ef:a5:a3:85:c8:93:1e:b6:5d:ba:83:
f1:5a:75:de:2f:dc:7c:df:62:49:7e:69:65:c6:a7:3d:c8:b6:
1b:f1:14:ad:c9:0f:47:b1:4e:5c:74:2a:cb:aa:d7:e1:ca:75:
a5:21:fc:52:4c:3b:c2:f6:a2:5a:aa:a0:2b:91:20:4b:55:95:
ab:a9:cc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:51:54 2025 by rpki-client