Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: aUOA/tyJJb0JDctmoWepgzhMC/6peFRxJ3ManDsjmO4=
Subject key identifier: B7:FD:19:EE:67:BD:C4:B1:05:BB:6B:A9:E2:82:42:55:59:D6:80:38
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 019671539F2EE8501579B1F8971E6FFC01D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 04A6
Signing time: Sat 26 Apr 2025 09:00:27 +0000
Manifest this update: Sat 26 Apr 2025 09:00:27 +0000
Manifest next update: Sun 27 Apr 2025 09:00:27 +0000
Files and hashes: 1: 1VjQoZc10lerLTuv0g4YHMLtXf4.roa (hash: IN8Xed87+TwZ0pVib4LiLY2cu5Cx22VcMoeEWlN76yU=)
2: 20RbcG86t8HtXkcLzrMiwyakZOs.roa (hash: B09OOZ6EDjWUZ2dxHE39ZhiZAqdtKGsJkWVnQD/N6aU=)
3: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: N9nuFCi/Q672IkhRIsQbF5F+uEyAxe5Y2eR5SHrbTrA=)
4: RqxbdMSh8w-5alXpfvlUin-3Y-A.roa (hash: K1mxLLRur8HwafCJYeka7QKzlM8enWjpiWi6lOKQXkI=)
5: qCfNSjbitI7Et5lSX1rtmaive_0.roa (hash: 1fS+iseUgmiw070ru2CUkkEKwBoPzkT1Bp7jleLafaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:53:9f:2e:e8:50:15:79:b1:f8:97:1e:6f:fc:01:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Apr 26 09:00:27 2025 GMT
Not After : Apr 27 09:00:27 2025 GMT
Subject: CN=b7fd19ee67bdc4b105bb6ba9e282425559d68038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:0b:b9:de:f1:98:96:ea:08:88:a2:ed:21:
1d:3f:b2:bf:c4:72:7e:67:d7:8b:60:d4:88:00:1c:
9d:fa:e5:0c:f7:b5:56:9e:4e:85:04:d6:f3:a8:ea:
38:f1:70:58:89:44:3d:98:ec:fe:ac:76:c3:b6:05:
98:08:be:79:25:a9:c5:40:93:71:52:75:0e:8c:22:
01:3f:da:6c:28:98:20:42:99:96:95:35:44:a0:61:
1d:ad:5d:11:1c:fd:b6:3d:d0:56:25:c7:c0:8b:8c:
4d:49:3d:61:a8:97:e5:99:17:3b:5d:69:ef:ed:ad:
e0:e9:b0:51:68:ad:ae:f0:26:eb:ab:dd:e3:ad:93:
68:82:34:8b:84:00:55:2e:5d:8c:19:a4:84:36:ff:
fb:58:4e:a3:c9:eb:4e:1c:44:b1:35:39:5a:29:de:
74:07:43:91:56:3a:97:8b:fd:df:74:43:74:7c:9c:
06:4d:07:c0:c7:c3:39:34:a4:17:18:dc:ca:80:38:
23:7c:11:e2:3d:1c:f1:c8:e1:45:e1:31:b5:ea:81:
10:0d:eb:ac:ea:2f:3d:2b:9b:90:02:a8:21:04:62:
a1:9a:eb:2f:a7:6b:35:33:9d:b3:52:6e:05:30:1c:
b5:13:6e:3c:0e:e2:73:9a:05:6f:2c:90:27:ad:a0:
81:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FD:19:EE:67:BD:C4:B1:05:BB:6B:A9:E2:82:42:55:59:D6:80:38
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:72:c1:c3:53:13:63:03:a6:bd:75:97:12:a8:7e:67:8f:74:
02:40:61:3a:46:83:5c:76:24:be:14:82:03:8c:c3:a3:6e:e6:
47:87:64:b2:91:86:af:86:64:11:ce:f1:08:83:ca:51:83:a5:
06:ba:7a:13:c0:e6:89:07:4c:41:8b:7b:6e:45:55:63:46:d3:
36:6d:8f:17:d4:19:c0:41:6a:82:fa:4c:e1:b6:fd:3c:16:e3:
f2:af:5a:39:e0:a6:f9:f7:c6:b2:ad:b8:4e:d1:a6:62:a3:97:
d7:87:dc:f2:08:db:64:c2:34:c0:a5:e5:65:52:22:86:d4:00:
47:d5:50:51:fa:5a:49:25:a9:d8:84:c7:be:c7:4b:17:6d:a4:
ea:98:98:65:1c:0c:b1:90:88:4d:cf:5f:fa:96:9b:c7:f4:41:
4d:b7:85:3f:d9:94:45:b6:21:ba:56:62:33:1e:01:93:aa:01:
17:49:61:43:00:09:3f:a5:09:1c:68:81:78:5c:cc:59:5a:f9:
8c:dc:54:47:17:b6:fd:b7:20:ce:8d:bb:23:51:27:52:73:5c:
8a:cd:40:e3:7b:ca:ac:1e:82:2d:7e:77:f8:61:db:ef:8f:be:
bf:a9:a6:a1:70:57:cb:a0:ef:4c:21:9a:b5:cf:a5:d7:d6:dd:
c4:89:32:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:03:05 2025 by rpki-client