Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
File: qreGFvOzntSCDQTOCY6nwgZVMUs.mft (raw, json)
Hash identifier: MZRV+aX45khCwQqNzf7JpyABlMzbV5efl6BCDAQohzM=
Subject key identifier: AD:1B:12:EA:F9:A5:B6:DE:33:7F:35:96:78:BC:90:C4:BB:72:F1:31
Authority key identifier: AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B
Certificate issuer: /CN=aab78616f3b39ed4820d04ce098ea7c20655314b
Certificate serial: 01967A2019B994E137A131B8396EE1576EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 02:00:46 +0000
Manifest this update: Mon 28 Apr 2025 02:00:46 +0000
Manifest next update: Tue 29 Apr 2025 02:00:46 +0000
Files and hashes: 1: qreGFvOzntSCDQTOCY6nwgZVMUs.crl (hash: thBE3iMjBZW/w2r2nJwRZ/8k8rd++AXE29Otz1POtUw=)
2: rFCa92sZ57rbSlpDFnJkYc6lQas.roa (hash: F4iKR691e2AK34cFxmtOhRMANb+mE4me/fLCv0E4c8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:20:19:b9:94:e1:37:a1:31:b8:39:6e:e1:57:6e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aab78616f3b39ed4820d04ce098ea7c20655314b
Validity
Not Before: Apr 28 02:00:46 2025 GMT
Not After : Apr 29 02:00:46 2025 GMT
Subject: CN=ad1b12eaf9a5b6de337f359678bc90c4bb72f131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:ee:6e:40:5c:a2:3e:c8:aa:58:4b:cb:e5:
99:0f:43:e3:f8:bf:eb:2f:b7:f2:35:f7:41:36:56:
b5:b3:3b:f9:01:0c:0e:8c:0d:42:e5:75:7b:f3:ab:
a9:bc:37:e4:28:a0:19:8b:3f:21:d1:ba:68:5c:69:
05:d2:39:e9:f5:29:81:fe:65:bb:ff:2d:74:f8:45:
4b:b4:ce:b9:40:bf:36:80:20:62:2a:aa:d1:78:0d:
ac:f7:94:1b:8f:e9:e1:28:41:a5:dc:55:89:95:17:
29:96:e4:fc:5b:a9:38:37:06:50:c8:90:e3:11:a5:
4a:18:cc:22:50:b2:2d:5f:1b:c6:4d:70:d6:f2:20:
2e:18:02:84:d0:bd:4c:35:38:47:b2:25:fa:c8:aa:
96:43:b3:97:a8:0d:26:7e:5b:f6:68:89:3a:66:b9:
91:35:d8:19:fd:0d:62:74:84:e0:08:33:c1:a4:6f:
35:96:2f:40:cc:31:a9:6f:ce:3a:4f:21:33:f5:e1:
d4:ad:39:a9:18:90:09:a5:c3:4c:78:70:bc:77:ee:
a8:d3:a8:ff:00:bf:13:5f:bf:e3:d0:36:1f:75:c5:
bb:f2:fc:b1:69:59:8c:7d:9c:03:76:d1:92:27:83:
48:02:63:b1:ab:90:67:3f:fa:4f:ae:90:fd:c8:55:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1B:12:EA:F9:A5:B6:DE:33:7F:35:96:78:BC:90:C4:BB:72:F1:31
X509v3 Authority Key Identifier:
keyid:AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2d:67:75:a5:62:7d:ae:8c:78:8a:5f:2d:3f:30:28:32:62:
a0:89:d3:08:37:e4:a3:4b:81:d0:02:b4:e7:7c:13:5d:19:ca:
57:5e:0a:cd:72:46:47:37:ea:1b:84:49:e7:27:2a:5e:7c:8c:
dc:7b:dd:4e:af:51:0a:58:f1:42:22:12:e2:e7:6c:f1:1b:11:
7f:dd:0a:d8:fb:58:3a:03:81:15:e0:43:5d:57:de:46:82:58:
88:3b:fe:eb:ac:14:3e:dd:01:2e:13:e0:68:12:de:8d:99:dd:
24:8a:a2:ff:bf:e8:11:8c:25:db:11:0a:8a:65:49:47:7a:96:
4d:5c:47:a4:8d:ed:a7:c6:b9:1b:41:3b:d7:04:fe:3e:b5:22:
5e:ae:95:05:4d:76:9f:3f:24:4d:9b:2f:57:20:e0:ed:d2:fb:
af:d3:58:7c:ad:fa:a7:0b:32:96:9c:b1:20:b5:31:aa:83:f0:
08:52:d7:0a:68:0d:6c:69:8a:35:f2:36:08:4e:20:57:53:9f:
65:a0:ea:af:ff:91:b7:19:ac:fb:8b:0c:49:b0:e9:a5:fd:b7:
1f:15:59:bc:52:8c:16:fa:9f:a5:29:16:e1:18:59:a7:0b:3a:
e5:57:5d:57:83:f6:13:ad:52:7d:dd:b0:07:f6:97:bd:2a:29:
1d:5a:1d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:17:08 2025 by rpki-client