Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
File: QOxdgqjrXZjOduYdr-UXZh_E5nU.mft (raw, json)
Hash identifier: ublP9wCx8rTRI2pY825UFIq/7Nd5byOG29pplLrVN88=
Subject key identifier: 67:1B:DB:3E:77:81:0C:B9:A7:59:05:16:61:73:20:E9:98:7C:FE:EC
Authority key identifier: 40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
Certificate issuer: /CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Certificate serial: 01967CEA19D306B57313D34E4A3067A5F95C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 15:00:38 +0000
Manifest this update: Mon 28 Apr 2025 15:00:38 +0000
Manifest next update: Tue 29 Apr 2025 15:00:38 +0000
Files and hashes: 1: QOxdgqjrXZjOduYdr-UXZh_E5nU.crl (hash: AGqsWp+qduGjxYMbS8DbX3+/EXBw1gyiDtPBLL2hZdU=)
2: y8Eeia8hdhX_DpCgeBhu63E2X4A.roa (hash: wzZxfTRF1LtzRT1r6hfEh3O3egTZFWx9R6sOBFN3GRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:ea:19:d3:06:b5:73:13:d3:4e:4a:30:67:a5:f9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Validity
Not Before: Apr 28 15:00:38 2025 GMT
Not After : Apr 29 15:00:38 2025 GMT
Subject: CN=671bdb3e77810cb9a7590516617320e9987cfeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:e9:28:bd:f4:f0:ee:74:f4:00:84:6e:2c:
29:40:70:d9:35:65:df:30:4a:84:a0:1f:48:6c:5a:
a2:5a:68:86:7f:6c:cf:5c:3f:f9:94:12:4b:4c:75:
12:2e:5a:04:1e:e4:74:ba:59:e4:03:15:2f:92:71:
d0:f5:51:ce:e6:27:fe:02:87:2f:e6:fd:eb:74:9b:
b4:56:e3:20:16:33:fb:db:8c:35:b3:fc:6e:78:bb:
51:54:4a:8a:d9:79:81:97:96:59:0a:1f:aa:21:b1:
60:bd:f6:87:20:6d:4c:37:e8:c0:91:66:b8:1f:3c:
0d:c7:62:d4:fb:f1:fa:c5:b4:02:6b:93:5e:19:1f:
98:36:09:85:e7:c5:64:2b:3d:be:b5:fb:0a:e7:3c:
cb:41:06:45:62:aa:d3:9d:f9:c6:97:ac:f6:8b:55:
f0:e8:09:fd:a0:52:f3:6d:84:38:bd:71:fd:9d:37:
d3:8e:69:d1:ae:4f:90:69:25:07:26:71:3f:7f:94:
3f:d3:3d:15:d1:d7:06:02:69:07:2e:fc:cd:25:5a:
30:1e:3b:87:30:44:3e:d6:d9:77:61:60:a5:4c:db:
43:8b:70:56:86:fb:45:24:06:f6:89:57:af:80:ee:
9b:33:6f:a9:f6:ba:06:df:b9:d0:e2:d6:5b:1e:d0:
ca:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1B:DB:3E:77:81:0C:B9:A7:59:05:16:61:73:20:E9:98:7C:FE:EC
X509v3 Authority Key Identifier:
keyid:40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:81:92:9a:4d:ed:a3:16:0a:bc:6f:23:47:0c:9d:5b:5c:c0:
d4:b0:35:ed:66:f3:8e:b9:5a:28:7e:7e:5e:65:ac:87:24:e7:
58:2c:7c:48:dc:bd:6a:8a:45:d2:15:36:e3:e6:9d:d2:44:04:
74:12:fc:16:78:7d:a1:d6:64:83:24:e0:66:cd:85:9a:1b:2f:
05:d0:3f:34:96:74:34:9f:bd:69:ba:ad:01:22:e9:05:a3:8b:
2b:74:ca:0e:61:7f:15:19:bb:b1:39:b8:c0:7d:d0:62:41:b9:
36:5e:c6:bd:91:f2:04:cc:8e:4b:c7:b3:f0:83:c4:dd:1d:34:
f2:a3:d6:28:a4:0e:41:d8:4d:d4:35:1e:32:3d:50:25:70:ed:
0b:d5:b6:c0:2a:c4:4a:b4:55:ad:62:9d:b6:b6:3f:78:a1:b0:
e3:50:d8:89:e5:43:d2:f1:de:79:6b:d0:78:34:2f:88:3d:1e:
01:0c:aa:18:2f:20:0d:18:70:ca:3b:6e:9c:a8:ea:36:83:ef:
9f:17:c3:9e:33:8d:cc:64:bb:8c:e5:19:ea:fb:6a:40:8f:49:
45:01:0c:47:8a:b1:03:b7:d7:3d:69:cd:87:1c:d7:c1:48:89:
43:6d:c7:7d:76:5b:fa:e1:68:81:41:5b:ba:8b:a6:f4:e7:31:
51:8a:cb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:21:01 2025 by rpki-client