Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
File: QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json)
Hash identifier: EnkkmTbkApVdCUEUawFJqVrkaPWzeDOlwc1oOdzFEn4=
Subject key identifier: BC:68:1E:91:62:6F:10:25:C6:32:52:D2:A1:08:7E:59:AB:A8:1C:6A
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Certificate issuer: /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial: 01967868286FD5556FEEB5E5BEBE3306EE54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
Manifest number: 05D6
Signing time: Sun 27 Apr 2025 18:00:14 +0000
Manifest this update: Sun 27 Apr 2025 18:00:14 +0000
Manifest next update: Mon 28 Apr 2025 18:00:14 +0000
Files and hashes: 1: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: x+OBhuAHtFz+S176PR5ss/pvNz0XGVHAP4cp8p8+7Fg=)
2: t9VupHYPOlXRe5J5x5F4CIePTBk.roa (hash: Fm6IUpzI362dwSd1jnTljFQdqkkno6k0hmV6iA3oMoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:28:6f:d5:55:6f:ee:b5:e5:be:be:33:06:ee:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Validity
Not Before: Apr 27 18:00:14 2025 GMT
Not After : Apr 28 18:00:14 2025 GMT
Subject: CN=bc681e91626f1025c63252d2a1087e59aba81c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:04:eb:d4:f8:eb:49:6b:71:71:f9:87:a1:
77:04:3e:13:fe:99:0e:d9:b7:fb:75:02:1d:45:aa:
45:d5:f7:66:e8:b0:5a:c2:74:c6:03:72:57:f7:97:
64:bc:f0:1d:55:30:cd:42:1d:31:23:da:db:2e:b5:
93:ee:ed:96:a1:2d:bc:66:21:d8:9c:36:a4:7e:b6:
06:c3:97:db:d7:f3:a2:44:b2:79:06:f0:cc:5f:ae:
e7:ff:bf:09:48:a8:77:c9:ab:1a:b5:55:36:3a:25:
87:a1:e9:92:ab:27:3d:46:54:42:ce:fc:89:05:c6:
27:b4:c3:75:da:c3:70:e5:21:14:1d:d4:d9:25:6b:
81:26:e8:e4:3f:82:f6:9c:3d:3e:6b:83:25:81:52:
f5:35:36:eb:9b:98:a7:38:e6:fe:3b:24:4a:bf:09:
2a:5f:b6:91:8e:19:e5:30:ee:39:f2:16:e0:17:08:
9f:23:12:b3:af:da:ec:bf:58:0f:23:61:4e:4d:1b:
68:10:7c:66:41:d6:c7:99:02:b4:99:16:0c:d8:63:
e7:e4:07:6a:1f:42:68:12:fa:78:9a:ea:ea:e1:bc:
dd:3b:f4:d2:32:22:1e:42:54:9d:d6:6f:e4:da:2e:
aa:ad:ab:78:9c:c0:da:30:1e:f0:40:85:2f:77:8a:
ea:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:68:1E:91:62:6F:10:25:C6:32:52:D2:A1:08:7E:59:AB:A8:1C:6A
X509v3 Authority Key Identifier:
keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1d:75:7f:d4:58:22:d3:dc:b6:4b:8a:ee:ab:87:d6:e0:63:
1b:4e:6f:7e:3b:33:e3:8e:5f:67:5a:6e:d0:2d:bc:a2:43:d0:
9f:f4:00:95:26:24:6b:0c:ed:85:b8:4f:6b:b7:38:e9:0b:78:
44:81:2a:78:7c:2f:e7:c9:fb:e0:9a:9d:e5:0a:71:cd:c5:80:
8b:23:a1:50:86:73:e4:95:db:76:d7:3d:53:5a:ec:19:c9:34:
a6:d8:8e:0d:4c:dd:05:c3:fe:8b:64:dd:57:d1:17:82:e4:93:
e5:65:54:75:55:30:28:5c:2e:86:af:48:7d:b4:05:9a:fa:35:
61:a6:a3:05:d3:e4:a2:6e:9d:a4:d0:70:cb:5a:58:ac:58:ca:
6b:16:07:0b:fd:6c:c8:ce:af:bc:cf:66:c9:d4:97:49:d7:43:
76:6a:93:43:bd:20:37:68:3c:b1:80:86:72:2f:3f:7c:c8:d3:
3c:74:38:95:4c:00:7b:f6:e3:47:86:02:00:83:f0:f9:a8:28:
d3:55:fd:b6:82:f8:a4:f5:1f:3c:8f:c9:81:be:02:57:63:dc:
fa:8b:ad:15:1f:12:d7:cb:77:c6:8f:3a:57:0c:f4:c1:5f:03:
af:4a:d8:37:09:8c:43:0e:38:ab:04:43:01:f5:d5:55:6f:3f:
36:c8:25:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:53:56 2025 by rpki-client