Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
File: QmRGpKHLVrP3b-a03vq6072bUgc.mft (raw, json)
Hash identifier: 4YSTFUg1nAVJqkrMa3XVOcNto37FzXFvHkFK8pazcZU=
Subject key identifier: C4:BC:B5:64:31:1D:7D:8F:C1:B5:73:C7:A0:B6:A8:32:72:BC:53:11
Authority key identifier: 42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
Certificate issuer: /CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Certificate serial: 0196783178B1E17F04E39081E91D885FED66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
Manifest number: 0A7E
Signing time: Sun 27 Apr 2025 17:00:30 +0000
Manifest this update: Sun 27 Apr 2025 17:00:30 +0000
Manifest next update: Mon 28 Apr 2025 17:00:30 +0000
Files and hashes: 1: QmRGpKHLVrP3b-a03vq6072bUgc.crl (hash: uxRy8j4rUI/5YBZWBMzga+4Y09yBHLkS4w58D+73KEw=)
2: fFstVPrb_3K-jl7g58_b4ihHTfY.roa (hash: sDN8YMAsFynzsUb+KhP7tCE7b4tst1zO6K3vmsmzSlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:78:b1:e1:7f:04:e3:90:81:e9:1d:88:5f:ed:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Validity
Not Before: Apr 27 17:00:30 2025 GMT
Not After : Apr 28 17:00:30 2025 GMT
Subject: CN=c4bcb564311d7d8fc1b573c7a0b6a83272bc5311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cd:8e:cb:df:19:e0:ed:0f:61:cb:5a:72:64:
e4:28:c4:84:12:25:af:c1:af:66:3e:4b:b5:df:87:
fa:b0:0d:ad:25:1e:c7:4a:1b:19:08:6f:62:08:d6:
7a:1f:5e:eb:28:cd:56:ad:fb:7b:67:81:52:1e:12:
8c:be:c1:4b:62:76:fe:a8:13:dc:8c:fc:d6:5e:94:
e0:8e:23:a6:98:c0:22:0a:18:5b:a1:4b:98:6d:ae:
f2:e9:06:83:9f:e8:0d:d4:29:36:0d:a6:78:09:7b:
50:79:b8:12:17:c2:b3:0e:df:ae:82:bf:56:ce:60:
82:52:c9:0e:cd:d8:3f:5a:48:c3:89:7e:c0:ce:b4:
39:f4:84:f6:ae:b3:8a:2d:32:8b:ac:45:04:5f:6c:
02:18:02:bc:05:64:43:b2:76:16:ee:e2:fd:47:d7:
a4:60:f9:f8:4a:e0:52:0f:38:df:c9:05:05:9b:4a:
54:64:96:10:75:f9:ec:69:59:67:5d:58:ef:d4:74:
e3:a4:5f:bb:8b:df:77:47:9a:60:7f:15:3c:9f:39:
8d:1b:27:92:df:1a:2d:41:42:b7:b8:03:27:71:78:
d7:70:f5:3e:bf:03:e6:84:a7:ad:b9:73:05:3b:4c:
6f:b6:34:b8:aa:d6:62:db:6f:48:ad:5f:27:c0:74:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BC:B5:64:31:1D:7D:8F:C1:B5:73:C7:A0:B6:A8:32:72:BC:53:11
X509v3 Authority Key Identifier:
keyid:42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9c:af:21:7c:f0:39:15:d7:f5:83:66:9a:88:6c:44:f2:ac:
9a:6d:e9:ff:e1:bd:1a:40:71:f0:9b:08:22:32:6c:15:4b:0d:
bd:c3:52:15:7b:61:f2:0a:f1:6e:8f:65:c4:27:ee:f6:7b:ef:
55:99:ef:fb:8a:65:04:94:68:81:69:16:79:98:b6:c2:5b:73:
e0:8b:f0:f4:93:ef:68:a8:d1:29:e5:dd:b4:00:fe:f7:6b:23:
58:ec:11:b7:16:e3:84:cb:32:2a:4d:74:12:dd:63:97:59:a3:
9a:8b:93:53:04:a5:c1:29:3c:fc:b1:4d:ca:f8:88:4e:59:8c:
04:0a:8e:1f:10:25:19:cf:a2:66:f7:d3:57:25:1c:b7:54:48:
25:0e:da:30:1c:84:de:ef:0a:82:7c:a7:a9:b2:6c:39:60:16:
11:f3:ab:73:e2:22:95:2d:80:bc:18:07:42:4c:34:73:b9:c3:
c7:b2:18:d1:55:5c:93:86:8c:7c:4d:3e:e4:14:8c:df:06:9a:
dd:c3:a7:08:4f:97:32:55:da:89:5d:f5:a8:60:c8:59:57:88:
f4:87:63:63:57:fd:e9:62:18:39:e3:2d:0e:b7:66:0c:b2:90:
cf:ee:b9:3c:e8:8e:08:a1:44:a8:25:51:34:a2:ab:fa:40:9d:
e2:26:24:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:03:41 2025 by rpki-client