Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
File: QWUyQgoh5CuK0w2iTr9DR96V7zU.mft (raw, json)
Hash identifier: llu/0OXVP4S2FeyIybyFgZpVJ5SJJluFjiyYlpcp5Po=
Subject key identifier: F1:A9:BA:BD:76:B8:8D:B8:E3:31:F4:C9:23:62:0E:E4:60:1B:97:B2
Authority key identifier: 41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
Certificate issuer: /CN=416532420a21e42b8ad30da24ebf4347de95ef35
Certificate serial: 01967D578E911C1C8D550232841EA72206A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
Manifest number: 101B
Signing time: Mon 28 Apr 2025 17:00:12 +0000
Manifest this update: Mon 28 Apr 2025 17:00:12 +0000
Manifest next update: Tue 29 Apr 2025 17:00:12 +0000
Files and hashes: 1: QWUyQgoh5CuK0w2iTr9DR96V7zU.crl (hash: Y8HSfvtHl4bEzZI7Mg6fUEyv2VOZ/cUKdVEfeXv5DPc=)
2: eV_HY0yWE8mOE1MRDnB0YcYTccg.roa (hash: 5xM8UD0IporPo6ojXDnvNcFP3vOdI9fe0xTb6m2cal0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:57:8e:91:1c:1c:8d:55:02:32:84:1e:a7:22:06:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416532420a21e42b8ad30da24ebf4347de95ef35
Validity
Not Before: Apr 28 17:00:12 2025 GMT
Not After : Apr 29 17:00:12 2025 GMT
Subject: CN=f1a9babd76b88db8e331f4c923620ee4601b97b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:67:71:f7:22:99:a9:8f:5d:69:83:0b:63:
e1:28:ae:ec:50:11:dd:f9:d7:a2:88:50:65:de:0b:
37:e8:48:14:74:fd:c2:58:15:f9:98:2c:2d:4d:5f:
8c:95:fd:9f:f3:48:7e:08:70:4e:25:fa:42:34:93:
20:0a:b4:cb:9d:8a:9e:bd:ef:79:7a:05:09:85:09:
32:3c:bc:de:0d:e1:05:d9:11:7c:f9:5a:09:4d:9b:
00:17:e7:d0:ed:5d:bd:74:5d:95:9a:6c:76:a6:0b:
a3:9c:65:41:af:24:1d:99:c9:a5:74:18:81:8d:16:
cf:f5:46:12:e7:23:e6:fb:16:03:a2:31:36:0d:40:
2b:1f:cf:5a:69:2d:ef:34:18:22:ef:cd:9f:40:48:
ae:8c:9b:92:14:e5:eb:ee:79:c8:54:0b:0e:ae:13:
f3:c1:b1:61:59:b0:3d:92:7c:94:25:96:92:8d:db:
e7:1d:9e:e8:f7:a4:6b:dd:38:29:bb:83:26:83:60:
71:ea:b0:59:15:13:54:41:a1:bb:1d:0f:36:28:6b:
f4:3d:d5:26:8b:ee:e8:69:b0:33:66:eb:10:d6:54:
15:b1:90:19:41:53:6a:e0:de:d4:4f:8c:90:10:cf:
d6:a5:10:ea:e4:70:88:b2:15:c7:ad:67:a7:39:cc:
ac:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A9:BA:BD:76:B8:8D:B8:E3:31:F4:C9:23:62:0E:E4:60:1B:97:B2
X509v3 Authority Key Identifier:
keyid:41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:68:55:69:cf:48:4a:54:c1:09:bc:92:f0:df:10:52:c8:1b:
3c:c8:f3:5c:5f:26:aa:63:f7:a8:3d:6b:c5:71:e2:88:96:84:
e0:36:b9:51:bc:f5:5a:9e:98:68:a2:37:5f:71:76:dd:74:62:
ab:89:e9:31:50:c0:50:ea:f7:44:03:d9:70:9b:c4:76:61:42:
f6:74:5f:75:7d:a8:c2:e2:b6:7d:58:04:57:f9:0b:21:aa:12:
b1:26:7d:e7:63:e4:19:f9:88:d5:4a:c5:8d:b8:d3:35:95:a2:
11:55:10:99:6d:86:31:f9:ef:4c:b8:43:71:5f:dd:12:6b:7d:
81:72:4f:94:0f:40:d7:1a:30:32:5e:31:39:20:65:00:1f:80:
98:5c:44:f7:a9:3d:f0:9a:e1:b6:ec:98:7c:43:ae:a3:19:38:
43:85:b6:67:f7:c3:ed:10:a3:52:ca:06:57:cc:06:33:f7:62:
a4:05:de:11:7f:2c:6a:ec:9c:f3:ff:91:26:c2:2c:fa:bb:33:
3d:55:11:da:e5:35:35:1a:3c:4d:91:80:52:98:e1:11:68:a4:
1f:a1:a9:62:f1:28:6f:ea:1f:38:8d:77:0b:00:69:27:68:39:
cf:35:10:92:d5:68:54:37:0d:65:8a:5e:c3:69:fc:62:bf:a0:
86:6c:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:01:52 2025 by rpki-client