Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
File: Q0XQdzx63gjUSBnjthG9KXo5idM.mft (raw, json)
Hash identifier: ESW/Sgoex5vlXjCVWGDLm3HfyQP48weKySRPqp2KXv8=
Subject key identifier: 11:63:E7:4C:3F:BB:F6:97:20:BE:BB:1D:D8:A3:01:9A:C2:32:F6:20
Authority key identifier: 43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
Certificate issuer: /CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Certificate serial: 01967FEB250B609A1A4C48E319FAF34BD013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
Manifest number: 122D
Signing time: Tue 29 Apr 2025 05:00:38 +0000
Manifest this update: Tue 29 Apr 2025 05:00:38 +0000
Manifest next update: Wed 30 Apr 2025 05:00:38 +0000
Files and hashes: 1: D7IbZMa3P-hRRIAm78DqK4wNZ34.roa (hash: 3Rvd3MmyWPzVOpIFhMlT5LNPsKGSgahML9FUxKiCMwI=)
2: O7r63uTdFaICg1i90uf5cyEl-h4.roa (hash: Efs34tr8Lub/IHxUGCrqJn6lA9J8HyHyjcZJAIyTZbQ=)
3: Q0XQdzx63gjUSBnjthG9KXo5idM.crl (hash: zHsTT5Tdpi68GgxkPF1o0/pDHcYgwU7mk6HDNEgjRkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:25:0b:60:9a:1a:4c:48:e3:19:fa:f3:4b:d0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Validity
Not Before: Apr 29 05:00:38 2025 GMT
Not After : Apr 30 05:00:38 2025 GMT
Subject: CN=1163e74c3fbbf69720bebb1dd8a3019ac232f620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:4f:39:18:3f:79:2e:6c:53:49:5c:b9:3f:
84:b8:3c:76:92:39:38:7d:f4:d8:05:69:d3:1d:41:
31:32:e7:5a:80:bb:58:4e:87:bf:ed:88:bc:7e:3e:
36:a5:1b:df:90:b1:2f:29:ce:3c:72:56:f7:e0:7c:
6a:5d:0f:0f:e0:fd:47:e3:0a:b3:08:45:fc:08:63:
cd:67:02:19:0a:83:31:25:88:91:18:0f:d5:71:97:
f2:1d:0d:77:a0:02:bf:3c:14:1e:9f:da:72:ea:ca:
25:44:ed:23:3d:86:a5:54:9b:87:d1:ab:28:11:3a:
96:9a:a8:f4:c4:fa:c4:8b:b9:72:eb:7a:f3:4e:35:
a0:9b:31:b3:d3:6d:28:cb:50:82:8f:74:27:f9:e6:
54:6a:fc:8a:67:48:86:6e:16:5f:31:a9:6b:0b:1c:
ea:2f:76:c6:b5:bd:d2:aa:0e:8f:ae:bd:92:bc:01:
45:30:28:f6:9f:df:98:7e:02:8c:2d:1f:8a:5a:c0:
92:55:a6:e8:bf:11:8b:1e:7e:54:1b:15:53:26:10:
cf:07:c2:22:bb:e4:af:41:ce:05:d2:20:1b:bb:0e:
eb:2e:23:a2:64:65:e3:42:32:ca:4c:69:26:fa:cc:
c9:1f:6b:c7:24:52:49:de:fc:f2:3a:58:d9:f8:11:
d8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:63:E7:4C:3F:BB:F6:97:20:BE:BB:1D:D8:A3:01:9A:C2:32:F6:20
X509v3 Authority Key Identifier:
keyid:43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1d:c1:4a:41:e7:d1:c2:1e:04:5d:47:c2:30:8f:b7:79:3f:
6c:32:18:01:34:bd:70:56:cd:22:57:1c:df:06:dd:af:98:1e:
53:21:3e:02:41:24:4e:7a:56:e1:56:6a:70:4b:eb:31:ba:84:
59:40:22:c1:08:44:57:d0:f6:c7:ae:5e:19:5b:17:8a:f9:69:
ed:7b:0a:15:f0:b3:f5:55:eb:24:9f:68:89:11:35:e9:c8:27:
56:b7:da:67:00:96:f1:0b:3d:96:4d:79:bf:24:33:2f:5a:dc:
5d:e6:5c:59:10:39:f9:d9:d9:57:39:86:60:2f:88:a7:64:ca:
9c:64:4e:9a:a6:fe:c5:47:ba:d7:48:c4:37:f3:1d:03:eb:71:
8b:21:fe:67:51:b1:77:55:b1:ab:dd:7b:e3:de:71:06:d6:94:
a7:de:ee:51:cb:36:45:44:b4:b2:42:c2:fb:0f:05:8f:14:ec:
e2:0a:03:40:84:ed:0b:65:56:ad:68:ee:1d:f9:69:8c:ef:73:
fb:90:e6:95:fa:62:81:ef:0f:a6:18:c3:17:9f:1a:ad:9c:55:
39:9d:a2:ae:b8:5d:87:d4:11:63:69:43:9e:1a:6b:63:d7:d0:
e0:b7:33:6a:a6:53:6b:b4:0c:1f:66:68:02:66:2d:54:90:2e:
a6:ad:36:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:30:00 2025 by rpki-client