Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
File: QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft (raw, json)
Hash identifier: q36F5NA2zO/+n1/PZ+bXjAiAW1T79IiiXVJI0qOMsGc=
Subject key identifier: 9C:B4:BB:46:05:2D:33:F7:4F:DF:2B:4E:58:F9:42:EE:85:C8:58:43
Authority key identifier: 43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
Certificate issuer: /CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Certificate serial: 0196789F7D63A4E48D3956964C1272B542E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
Manifest number: 1054
Signing time: Sun 27 Apr 2025 19:00:40 +0000
Manifest this update: Sun 27 Apr 2025 19:00:40 +0000
Manifest next update: Mon 28 Apr 2025 19:00:40 +0000
Files and hashes: 1: C3yypRlZtvO4qRUDoeqrvhpXXFU.roa (hash: U5x8oZ9ETTHkITHFM+Dz7ZwF5Z54RJdp83tFjx6Le08=)
2: QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl (hash: yY110eRbbz8hioJEBUWNC2UPCLvVj6BUF1uBJzKAuy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:7d:63:a4:e4:8d:39:56:96:4c:12:72:b5:42:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Validity
Not Before: Apr 27 19:00:40 2025 GMT
Not After : Apr 28 19:00:40 2025 GMT
Subject: CN=9cb4bb46052d33f74fdf2b4e58f942ee85c85843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:3f:30:aa:30:43:82:e8:31:9d:c7:5e:94:
3f:10:a1:20:17:bc:23:cf:17:73:f0:27:35:c3:5b:
bf:50:04:66:fb:cf:27:60:13:5d:14:9c:7b:3a:e6:
a9:2c:7e:9d:12:bb:74:7d:b5:a8:e3:d1:81:bb:6b:
83:6c:b9:c0:92:52:11:c3:78:60:f3:a9:2e:cc:28:
c4:eb:51:b9:58:40:f1:b2:55:db:80:f5:9e:c7:31:
61:e2:0d:7a:3c:1f:2d:53:34:b5:7e:01:17:a5:72:
47:bc:6b:79:e0:ac:8c:8d:d6:01:23:99:0f:64:aa:
2e:1f:9e:9f:31:8b:ea:8a:94:a0:09:9c:db:42:1a:
d5:84:95:bd:b1:1f:f6:b2:9a:52:ca:0f:3f:68:65:
e0:12:83:4b:a6:6f:20:99:f1:10:87:73:d4:9b:b4:
a5:34:f3:31:29:30:df:c1:eb:dc:6e:d4:ae:44:99:
ea:53:76:61:1d:44:28:c4:6d:06:5c:42:ac:fc:cb:
c5:85:f9:42:46:b3:df:25:ce:3a:4b:0d:02:1d:13:
55:9d:c6:62:58:d8:e0:a2:c1:34:be:17:1f:d7:e5:
81:0a:c8:91:52:eb:d3:a6:36:6c:71:67:28:de:04:
ca:4b:33:79:d1:b1:2f:55:07:af:46:a9:31:71:59:
e9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B4:BB:46:05:2D:33:F7:4F:DF:2B:4E:58:F9:42:EE:85:C8:58:43
X509v3 Authority Key Identifier:
keyid:43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3f:5c:6d:26:fb:ce:84:c5:a9:4d:a7:38:75:2d:b6:6f:f5:
4a:2a:5b:23:3f:4a:c0:8f:a9:6d:9d:1a:3a:5c:05:4c:57:f4:
e1:6f:f3:98:ea:b2:c4:6d:bc:70:55:6e:3e:9f:0c:20:f6:11:
20:d0:d1:22:f5:1a:d9:2f:10:a9:fe:f1:0e:eb:3f:23:d8:18:
bf:89:6f:14:17:a8:cd:7e:51:0d:00:8d:0f:63:55:fe:ab:2d:
78:9a:13:3f:f1:b0:17:2a:95:f7:90:a9:f8:d7:b8:33:80:8b:
16:fb:9e:f0:f6:1c:a8:c6:16:77:51:74:64:e2:d8:70:78:7f:
ab:35:06:26:55:af:31:67:fc:9f:78:91:62:c9:8e:2d:54:4a:
ca:18:d2:b2:e5:d8:16:10:73:cf:34:72:5d:c6:5a:63:6a:ad:
fb:be:e6:c9:f7:f9:ca:9d:74:4d:73:c3:91:b5:7c:49:f3:69:
7a:ee:6d:60:73:a9:63:bb:b8:04:21:f3:97:da:70:19:aa:dc:
f2:5a:d6:cc:82:b5:7d:8e:0b:5b:19:bd:c3:d4:4f:ce:fe:25:
2d:c3:2c:0b:8d:34:41:6c:a4:22:46:42:84:c7:1d:26:4d:89:
b7:45:e5:4c:fa:29:d6:49:c0:60:2d:e7:4e:95:aa:9b:ee:cb:
12:bf:aa:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:05:20 2025 by rpki-client