Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
File: qIrVRvGg74z3XJKnSL1chjYuIJs.mft (raw, json)
Hash identifier: ERvbHS/Z3wR27bOy3sS87Mtc5sJelSoHWv7IO8PRdkI=
Subject key identifier: A6:BF:68:43:30:A2:07:C6:7D:DE:6A:47:CF:36:13:6B:AE:C1:E9:2E
Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Certificate serial: 0196797B4A46246AEBBA6F29D4720409A4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
Manifest number: 0EBD
Signing time: Sun 27 Apr 2025 23:00:45 +0000
Manifest this update: Sun 27 Apr 2025 23:00:45 +0000
Manifest next update: Mon 28 Apr 2025 23:00:45 +0000
Files and hashes: 1: Y18PuvKbRb3I33NFZERrmAggZBw.roa (hash: ulNop87p1OPj11wBSOeR/0XOStdPoDj14N+Cgskicec=)
2: qIrVRvGg74z3XJKnSL1chjYuIJs.crl (hash: Ur7R92UYVBalO4y6ekJHEnXmQNCC1OQ+bls566Xfjko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:4a:46:24:6a:eb:ba:6f:29:d4:72:04:09:a4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Validity
Not Before: Apr 27 23:00:45 2025 GMT
Not After : Apr 28 23:00:45 2025 GMT
Subject: CN=a6bf684330a207c67dde6a47cf36136baec1e92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:5d:d0:36:30:72:cb:24:97:86:29:07:38:
45:2a:ab:0a:ef:fc:aa:1f:9e:19:02:8b:a4:bc:cc:
2e:16:b2:13:50:56:aa:92:a5:12:3c:13:5f:97:cd:
10:5a:c1:90:a1:b0:aa:1c:8c:a3:10:0a:dd:10:72:
86:63:95:b7:25:8b:3d:df:9f:75:29:0f:41:4f:34:
54:4f:55:b4:87:66:16:a2:31:c6:c8:3a:12:1e:ec:
06:6f:fe:9b:b6:ac:5e:e5:05:c4:18:0a:80:30:04:
59:71:d1:3c:50:85:96:1f:9d:0c:cc:0b:b8:ac:4b:
5e:1b:41:c7:1f:c7:02:3b:93:e8:75:de:fb:e4:04:
8e:f5:c4:2c:8e:50:fe:33:17:fb:a2:5b:a5:41:c2:
a8:ed:c3:78:c9:c2:c9:4d:55:d4:84:30:b7:86:c5:
53:c3:40:25:d9:ea:f4:d8:d5:49:26:85:21:00:bc:
31:88:be:b6:64:1a:4c:16:6a:c8:35:72:96:5a:84:
be:81:f1:61:0f:66:00:f4:97:cd:b8:19:e7:8a:07:
2a:bf:ec:1c:6c:e1:92:cc:da:90:27:e8:64:13:c1:
ee:02:21:a0:28:73:95:e9:e2:c2:8a:7b:a1:92:ce:
83:52:41:51:3d:de:ff:41:22:ec:d5:21:92:97:3b:
74:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BF:68:43:30:A2:07:C6:7D:DE:6A:47:CF:36:13:6B:AE:C1:E9:2E
X509v3 Authority Key Identifier:
keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5d:34:0f:13:1c:be:e0:99:a9:a1:3d:31:0e:5e:1f:75:ca:
75:a1:ad:3a:8f:b0:a8:2a:af:73:be:b0:40:51:6f:08:ba:1b:
c7:7b:6f:15:f3:90:aa:99:95:17:7f:40:99:ac:aa:93:89:65:
63:4b:5c:bd:bd:bf:6e:ce:6e:cd:f4:3a:bd:19:cf:7f:fd:69:
f0:81:7c:ec:b4:8f:08:2f:0f:3b:f1:06:19:3c:df:7a:4a:d4:
c9:8b:7b:24:58:6c:79:f6:bd:c5:c1:d9:f8:91:69:de:d4:f7:
7f:8f:24:34:74:ad:8c:67:2d:2c:86:5c:a2:a8:0c:e9:f0:ba:
35:57:c8:14:12:b0:0a:49:08:3d:71:b8:ff:cf:dc:29:0a:6b:
d2:42:a6:27:64:7a:06:7f:b0:37:c6:26:5c:08:a6:81:14:9b:
69:f4:0a:85:bf:f2:d2:3c:31:6b:d6:46:c8:62:9f:be:8e:39:
31:c8:4f:08:a8:bc:d8:47:95:57:8d:91:60:4f:ef:31:64:cd:
a1:24:31:ec:05:cb:f6:cb:72:72:31:7d:fc:53:f7:e2:36:78:
2d:92:2e:12:76:18:74:7d:50:16:70:70:35:13:36:62:0c:9a:
d2:23:f0:27:7b:19:b6:15:b3:90:06:a4:7d:09:4c:b4:d7:b3:
89:58:2a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:36:01 2025 by rpki-client