Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: WF8yefDoDIeRtq7CL8lVBBOYYBJ7UbY7Oa95UvENdQ0=
Subject key identifier: BD:6E:59:65:61:DB:A5:FC:43:CB:BE:AB:2F:EA:A7:89:DF:C8:E1:CF
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 019681D968801B36FCCB01DD0CABE6D9820B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 06AB
Signing time: Tue 29 Apr 2025 14:00:30 +0000
Manifest this update: Tue 29 Apr 2025 14:00:30 +0000
Manifest next update: Wed 30 Apr 2025 14:00:30 +0000
Files and hashes: 1: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: Z0DjpDnS1kFtKWLYbr7VVIBjdIVybGSHb2PZNJkDG7I=)
2: s-6iu0euq8mwctWc84gynbP4Gz8.roa (hash: ix817uYIHKTbd4XoAS5Yf6A1NltjL0SfzgZQTYUowKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:68:80:1b:36:fc:cb:01:dd:0c:ab:e6:d9:82:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Apr 29 14:00:30 2025 GMT
Not After : Apr 30 14:00:30 2025 GMT
Subject: CN=bd6e596561dba5fc43cbbeab2feaa789dfc8e1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ba:2c:62:68:e0:61:3a:15:50:22:a9:94:d6:
db:c3:cd:45:ab:8c:d9:2b:ad:4f:92:19:e5:c4:7f:
12:6d:d1:18:e5:29:dc:53:8c:81:ea:7c:b9:30:f5:
67:1a:f3:ee:b6:a1:f3:0d:21:7b:c1:ce:9c:8b:02:
3b:76:22:72:b5:60:f5:e6:b5:41:f6:4e:ec:0e:1d:
fd:96:d1:f6:8e:10:61:45:f2:39:0b:5e:06:7a:3f:
a3:2a:34:c5:e4:e6:c2:f5:c1:db:8b:c0:75:11:38:
50:ef:09:e2:dd:7a:5e:ce:c3:43:40:d0:03:20:79:
ea:30:f6:bf:eb:ad:9e:0a:dc:bb:71:f4:ea:31:3b:
25:cb:41:0e:d5:9c:3a:23:9e:53:7d:ba:4b:11:be:
04:8d:56:d4:67:cc:18:36:dc:cb:be:eb:cc:70:c7:
b2:c7:f6:f9:8e:b9:6c:88:a2:52:89:3d:c7:d9:94:
46:53:47:da:e2:2a:19:0a:68:dd:e0:82:50:5e:94:
fb:3e:9d:4e:8b:e9:11:16:34:e8:9f:cc:65:65:7f:
ec:ed:3c:ac:06:c4:dd:bc:42:9a:b2:33:92:95:e4:
f9:a0:7c:5e:4b:58:8e:18:f2:12:ed:5d:5a:a8:50:
cd:39:0d:8f:f1:22:0d:b7:98:d8:90:e2:b3:06:07:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6E:59:65:61:DB:A5:FC:43:CB:BE:AB:2F:EA:A7:89:DF:C8:E1:CF
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:98:f6:40:05:78:2f:bb:7e:97:52:de:6b:6e:cc:0f:b9:94:
53:c1:f3:50:89:8c:ca:b2:09:37:f8:de:84:ae:3d:85:cc:cf:
46:96:4f:51:6c:73:19:c8:f3:d7:34:47:21:04:a1:7e:50:44:
f1:81:b3:ab:54:94:c2:44:39:70:3f:bd:9a:39:76:e4:53:e6:
b9:e8:79:cb:3e:3a:5b:0e:53:31:35:17:5c:18:e0:44:e7:b3:
4f:19:65:2b:66:e3:e4:fe:3d:67:d5:9e:99:46:a9:4d:b6:42:
28:96:72:45:b1:32:5d:af:32:44:75:00:26:ff:1f:a9:42:12:
e4:80:ef:d1:34:39:68:53:ec:ca:c1:39:9c:1e:d7:4b:af:7e:
59:f8:72:5c:d7:e8:77:1e:26:b3:41:da:97:e7:5a:ff:74:25:
05:2e:ae:e9:db:5a:bf:f3:5f:44:31:23:8f:2d:a7:36:5b:7b:
3c:0e:b3:a5:44:80:ef:45:d3:9b:17:81:bb:cf:40:54:3d:f2:
b8:ad:6b:fa:cd:46:fb:cc:50:0e:7b:86:c8:40:b3:1f:68:66:
3a:2b:17:68:7e:b2:2e:84:84:3d:78:5e:f6:99:da:dd:15:44:
16:e8:f3:a0:7e:02:9a:11:a4:3d:3d:eb:1e:d8:dd:57:4b:c5:
2c:f8:1e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:25:16 2025 by rpki-client