Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
File: Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft (raw, json)
Hash identifier: OA4FEGxcCyn0v9kEuBUcHNViYlJwlksb/nNE2NxoMAk=
Subject key identifier: 51:EB:66:11:6F:3F:DE:ED:73:3C:2A:A4:64:F5:1C:DD:B0:02:1A:B6
Authority key identifier: 43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
Certificate issuer: /CN=43772b99993b0608d2782af45a22eb93c7fda63b
Certificate serial: 019678D64699EE4E9E1E529641F0CB72B0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
Manifest number: 11E3
Signing time: Sun 27 Apr 2025 20:00:30 +0000
Manifest this update: Sun 27 Apr 2025 20:00:30 +0000
Manifest next update: Mon 28 Apr 2025 20:00:30 +0000
Files and hashes: 1: Jz6Plky4nRwLQTJJcOF7jGNXrSw.roa (hash: /BEPfzyhvzI281lagKYoLrBP/3LTnv9Sk0+qZpDUYPQ=)
2: Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl (hash: yQmgeAreLWtKctivJq5u7ZM1rl3E29bp5kuw9gp9NH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:46:99:ee:4e:9e:1e:52:96:41:f0:cb:72:b0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43772b99993b0608d2782af45a22eb93c7fda63b
Validity
Not Before: Apr 27 20:00:30 2025 GMT
Not After : Apr 28 20:00:30 2025 GMT
Subject: CN=51eb66116f3fdeed733c2aa464f51cddb0021ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:94:cb:b4:c5:68:bd:eb:01:aa:df:ce:73:b7:
b1:17:4d:b6:5b:3f:2f:88:7a:2d:9d:5e:35:d0:42:
e4:a6:66:87:27:b8:28:fc:79:f9:7b:f7:f4:e0:18:
b7:32:83:20:f1:b9:33:9c:73:5f:b5:4c:2b:5f:74:
0d:82:52:bf:e6:71:f6:7b:d6:4f:8b:fe:14:8d:c0:
b5:1d:d0:a5:c6:25:4e:02:70:1e:7c:f3:34:6f:ef:
98:a0:d9:53:41:0b:7e:cc:51:ac:37:ca:9b:a7:ce:
a4:61:d7:97:ae:e2:23:59:34:47:29:b4:53:b7:85:
eb:93:03:5c:15:97:ea:f3:a1:4a:20:f5:2d:e9:f6:
a7:e4:4a:3f:ad:fd:05:0d:6c:5e:2c:f1:77:24:db:
63:3d:87:47:81:22:7e:46:07:a5:2a:3d:0f:66:a3:
16:91:97:71:72:76:d1:f5:4a:8a:af:b5:84:ae:b2:
68:29:6b:ee:82:61:1b:53:28:7d:01:87:af:e0:b7:
de:53:40:5a:2b:11:f2:2d:38:0d:bb:c4:84:55:b7:
63:1a:81:79:de:6b:98:5c:91:be:5c:db:a3:60:ab:
34:d7:b8:16:93:08:a1:a6:5a:c1:30:dd:d3:0a:40:
f5:85:23:25:6f:3f:0b:0a:e5:f8:82:59:0d:70:28:
c1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EB:66:11:6F:3F:DE:ED:73:3C:2A:A4:64:F5:1C:DD:B0:02:1A:B6
X509v3 Authority Key Identifier:
keyid:43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b5:fb:fb:0e:15:28:62:ee:fd:95:15:af:8e:58:dd:33:26:
6c:39:53:eb:c8:c1:6a:c6:56:3e:82:71:e0:3f:61:2d:c3:58:
63:79:d6:19:6e:cc:d6:ef:72:76:61:25:a0:51:56:bc:c6:20:
2a:95:8e:96:40:e5:2d:07:74:1f:2a:6a:93:1d:29:19:2e:c6:
ab:bf:95:9c:b8:a7:79:6e:8f:00:3d:f9:4e:4f:72:e3:d3:86:
8e:4c:c6:7a:b9:eb:6a:b8:03:1a:9d:5e:a0:e6:5b:3d:10:02:
28:09:8c:e8:89:9b:a1:03:c3:df:51:dd:4f:1a:d6:c0:e4:1e:
c6:c6:77:63:45:ff:2b:85:06:5e:d4:41:e6:fe:40:ee:7d:a1:
35:6d:51:82:bb:e8:26:0f:d5:d5:da:62:a4:7f:c7:fa:ca:2a:
83:76:df:fb:11:cc:81:a7:2c:37:ee:b7:28:56:aa:62:5a:cd:
50:9c:8a:0f:cb:53:ca:16:18:b1:75:87:43:18:b2:ba:f3:69:
a5:bd:58:de:c8:04:fe:2f:57:a2:31:5d:7d:4d:e0:61:6e:0f:
86:80:52:d8:8b:77:41:1a:50:78:df:29:89:33:ec:5d:78:78:
0d:d8:3c:17:a8:b2:9a:65:17:17:7a:f2:14:14:71:5e:e1:b1:
79:80:bc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:08:19 2025 by rpki-client