Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
File: 1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json)
Hash identifier: HJxb03o0tfKjL0Z1aBrAZ6TjAMvIpxwFWNtPd8Dm+a4=
Subject key identifier: C4:C7:A5:8F:02:CD:28:28:61:E9:F4:3B:02:75:AC:4E:E0:A8:1C:47
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial: 019678313972C3A7076AE2B24F32F3F8B29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
Manifest number: 123F
Signing time: Sun 27 Apr 2025 17:00:13 +0000
Manifest this update: Sun 27 Apr 2025 17:00:13 +0000
Manifest next update: Mon 28 Apr 2025 17:00:13 +0000
Files and hashes: 1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: Alvah6x8B0NaOdgOisVOBQiFIqJwNr6hJAOhtOrplaM=)
2: B9xdpXPKaKD7kATBDRUYPDrfJHM.roa (hash: xUpn/6yW+QKWLSXqnG2abjnoqVCxULjYMRU+slTa5PQ=)
3: YYzrkPDEMpFz0VlMFyfkPlvrIPc.roa (hash: ZTbSueGcUA5J+8KJD8a0DCRWPR/FrTGgSZg4efTERpc=)
4: z0hWnzSRmHLyAYMYl1nKCZOWbgw.roa (hash: GQY4W56WRkuweljajSL0/DPkbwKgksUsLIAtILepWM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:39:72:c3:a7:07:6a:e2:b2:4f:32:f3:f8:b2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Validity
Not Before: Apr 27 17:00:13 2025 GMT
Not After : Apr 28 17:00:13 2025 GMT
Subject: CN=c4c7a58f02cd282861e9f43b0275ac4ee0a81c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:68:36:4f:27:0b:6d:bd:71:49:e0:a5:45:ab:
ce:71:7a:13:29:76:f8:f6:30:34:35:79:eb:af:dd:
09:59:74:f4:ab:0c:47:6b:38:f4:aa:8f:db:cb:bd:
f7:d1:94:6a:43:90:6d:a2:f6:a7:5a:41:e2:b4:e0:
6e:02:de:08:de:6a:59:22:7e:72:7e:f7:30:6b:6b:
6f:d3:be:ae:0d:4b:5e:ce:a6:1a:46:38:a5:73:07:
78:99:df:6e:86:75:bb:f0:8b:e6:31:6a:6b:8e:b9:
c5:99:40:65:43:c8:b1:7d:a1:fb:35:1f:4d:7d:c5:
59:d1:8c:61:f4:69:28:b5:3b:0b:85:89:6d:ef:a5:
95:13:44:ac:04:de:b3:49:16:84:4d:e2:91:82:2f:
6b:6f:f5:e1:5f:5c:8e:cb:ee:e8:1e:20:4c:e3:9e:
53:54:78:96:b2:2d:1d:8b:21:38:d8:01:cf:14:7c:
49:75:c7:0f:bc:5f:a8:ec:ff:75:0a:bf:2e:13:9d:
d2:29:14:ed:25:bc:79:11:fe:61:83:b0:31:ca:ee:
d7:4e:24:0b:49:89:09:f2:ec:14:2a:9d:c2:17:8f:
24:77:db:39:18:b5:01:41:fd:55:bd:bb:28:0c:1d:
59:47:bf:30:fe:31:0d:a9:02:b5:00:4d:fe:83:35:
84:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C7:A5:8F:02:CD:28:28:61:E9:F4:3B:02:75:AC:4E:E0:A8:1C:47
X509v3 Authority Key Identifier:
keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:71:90:7e:57:f3:a1:83:40:41:80:7a:b6:e0:a0:f0:74:35:
7e:d0:da:08:36:88:9e:ce:32:53:a1:69:d0:ad:e8:30:d2:ff:
58:13:fd:00:aa:e6:7d:94:d3:6e:05:4f:8d:3f:a9:30:a1:46:
74:2e:83:63:1c:b3:ff:36:85:f0:a8:4b:b1:29:7c:0b:dc:35:
66:e7:62:a4:58:9f:8d:19:75:04:84:80:1e:f9:bc:df:6a:30:
fb:4b:51:92:b9:d1:f6:bb:0d:5a:c0:a6:a6:a0:a6:d5:56:d9:
3a:04:b2:c3:02:6f:34:98:e8:46:b3:04:84:eb:46:c4:02:ed:
ce:7c:06:18:f5:ea:63:31:39:14:71:5e:0d:1a:ef:73:d2:14:
89:78:f9:f7:04:8a:2f:cf:8c:4d:be:17:f3:9d:44:7b:d4:82:
d6:8a:f5:68:ce:39:95:ea:56:17:c5:f3:2d:dc:9e:11:07:3b:
33:8c:f6:c5:40:22:79:cb:da:82:7b:a2:61:35:f8:b9:61:81:
76:e8:65:0f:56:5e:12:76:7d:9f:cb:16:d3:21:9f:9b:59:a7:
97:e8:37:3b:22:7f:aa:39:52:52:f8:9a:27:69:e6:18:ed:0a:
75:fb:0c:38:e9:89:3f:f1:ef:47:41:8b:5c:43:72:ac:3d:7a:
5a:72:20:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:47:20 2025 by rpki-client