Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
File: QpXD7wDP_s4vcbYZkcbG09pJwRA.mft (raw, json)
Hash identifier: OZRK/Sijq+eGi9yrk1yptMPI7l7/pcR5SuUhY0tA0yQ=
Subject key identifier: 78:F2:D0:CE:57:E8:E2:0B:05:10:A1:5B:02:59:5B:BE:B3:6F:16:3D
Authority key identifier: 42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
Certificate issuer: /CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Certificate serial: 01967755736AEC724B12A6469D0FBA09ACAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
Manifest number: 01F9
Signing time: Sun 27 Apr 2025 13:00:10 +0000
Manifest this update: Sun 27 Apr 2025 13:00:10 +0000
Manifest next update: Mon 28 Apr 2025 13:00:10 +0000
Files and hashes: 1: QpXD7wDP_s4vcbYZkcbG09pJwRA.crl (hash: tcKr+Q/hvgdBzI0/PFnF+b5twuBEMyxBhwPBB1zYitE=)
2: SGxwV5wEplv2xVzvW6jMMH0Hi4k.roa (hash: p0OjWToBEfnkzQw/yjz+AdE3+kwiUg0q1pmwBXRywUk=)
3: eC0FosjTUlbZcnWZVWIH359Lcd8.roa (hash: qDWdvtB5VIYnR+iPBmUfW1ayU92Br+j2BjK1vo1fUg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:73:6a:ec:72:4b:12:a6:46:9d:0f:ba:09:ac:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Validity
Not Before: Apr 27 13:00:10 2025 GMT
Not After : Apr 28 13:00:10 2025 GMT
Subject: CN=78f2d0ce57e8e20b0510a15b02595bbeb36f163d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:8c:ba:33:df:3d:3f:32:f5:e5:30:5b:20:
86:57:e4:2f:cc:f1:4b:7d:9a:ad:2b:8f:39:cd:02:
f6:1a:6a:16:41:95:d2:71:ec:87:10:48:9b:70:13:
ee:dc:5e:f4:d0:e9:41:0d:db:6d:0b:54:35:0b:73:
91:da:84:9f:65:95:da:a2:e8:a4:bc:20:c6:09:3c:
24:f6:e3:d9:a9:c5:8a:7d:5c:60:9c:fd:d1:18:02:
0e:84:ad:f9:99:2b:08:80:3e:3e:b9:88:8c:86:62:
3b:5d:98:71:17:05:21:98:fb:36:36:5c:c0:ad:b5:
34:42:a9:31:07:c0:8a:cd:8a:6f:1c:56:a7:f6:de:
45:57:99:92:ee:0c:ed:b9:2e:0a:ed:98:79:5c:48:
b7:a1:84:ad:50:00:df:ba:ce:13:d6:01:c6:7c:11:
b3:ca:5f:e3:10:d6:fd:56:e0:aa:da:26:75:07:01:
59:49:ae:2a:75:3d:60:a3:cb:f1:97:ad:2d:da:f8:
1b:af:c0:28:fb:9b:43:e0:30:5c:23:88:7c:ff:03:
dc:ab:8f:2d:fc:46:56:76:cd:ed:f5:0a:e1:a3:32:
12:c1:74:41:0e:7e:06:ad:3d:72:72:81:ac:30:dc:
d6:9d:af:0f:bf:b9:5b:1f:ab:a5:5d:65:a5:d4:7b:
54:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F2:D0:CE:57:E8:E2:0B:05:10:A1:5B:02:59:5B:BE:B3:6F:16:3D
X509v3 Authority Key Identifier:
keyid:42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c3:f8:52:df:29:cd:9e:31:e2:5a:da:60:7c:d6:39:33:32:
8f:1a:c7:cd:27:04:85:d8:4e:88:ce:2e:99:39:de:19:4e:ac:
07:93:16:7f:57:55:03:67:c2:b5:41:b7:8d:38:c1:26:98:49:
2d:84:f3:4f:e3:07:35:43:c8:8d:0a:cb:89:d5:f0:44:8a:6e:
30:a9:d4:f6:66:bb:49:8a:56:a0:ca:70:d1:d7:bf:aa:5a:e4:
03:9e:71:65:d8:fb:41:e2:29:49:f4:06:37:9e:9f:22:80:4b:
b9:df:bd:de:5b:a6:2e:0f:a0:62:c1:12:6c:8f:cb:e7:04:fa:
92:99:37:e5:a9:27:e6:ef:52:3d:6a:c1:8a:05:6a:ed:f6:30:
2c:84:68:ac:f8:62:8a:66:ef:2e:d0:d1:54:94:fb:83:b3:3b:
8c:77:ac:7e:a6:3a:57:cf:de:05:ab:ff:cf:8c:dc:27:2b:38:
92:fc:41:e7:6e:48:46:5d:ef:74:50:72:2b:c9:d0:11:53:66:
76:5c:c5:9f:13:74:26:79:db:93:3b:92:a1:4d:14:71:17:43:
b1:81:0b:7a:3e:45:53:57:52:c7:46:0b:86:43:d5:3c:c3:9a:
87:5f:89:67:49:e8:90:84:7d:03:d8:97:dc:38:f4:f2:6e:b8:
a5:53:95:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:17:01 2025 by rpki-client