Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
File: cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft (raw, json)
Hash identifier: 0J4l9/fB9C/ykh6gBklsv413BBjWbk/GTP/tMZj+Zwc=
Subject key identifier: CF:B5:17:D0:58:BC:9D:D6:61:3E:CD:3F:55:CE:DA:9D:5D:E8:A6:26
Authority key identifier: 71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
Certificate issuer: /CN=710068d5bf1bffd79174e37501bfa17f917b313d
Certificate serial: 019678D6821B59058FD5821D4F17045CF416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
Manifest number: 0D3D
Signing time: Sun 27 Apr 2025 20:00:46 +0000
Manifest this update: Sun 27 Apr 2025 20:00:46 +0000
Manifest next update: Mon 28 Apr 2025 20:00:46 +0000
Files and hashes: 1: cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl (hash: 3+bMsdf6ypIrmBSTuytruO4wdQ8fueUhQgxURHnxtRw=)
2: q8epYF3ITJmcTk7KzU9-ybVTiI8.roa (hash: ynf0gvvVwgf87WpAamEBJq2+/MA1NpfszumEHpnlxfU=)
3: uDM7F8LY5WouCO7a0kMUmT3QPVg.roa (hash: 2/WNOkYZ2Hjr/CS7x76w5+dnVkOCkqa3HT6PAApsbQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:82:1b:59:05:8f:d5:82:1d:4f:17:04:5c:f4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710068d5bf1bffd79174e37501bfa17f917b313d
Validity
Not Before: Apr 27 20:00:46 2025 GMT
Not After : Apr 28 20:00:46 2025 GMT
Subject: CN=cfb517d058bc9dd6613ecd3f55ceda9d5de8a626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:f8:0e:93:a5:e5:56:8b:a0:89:76:6e:00:
64:ff:5d:0c:90:68:98:14:4b:4d:98:8c:8c:70:84:
af:38:f4:1d:c4:c0:07:56:86:20:87:3b:49:66:24:
78:fc:06:c4:f8:a3:99:82:91:ac:7d:7f:77:c3:e5:
21:4b:b2:db:33:ba:29:96:64:69:dc:70:86:06:87:
ce:d0:8a:ad:4a:f6:74:da:00:61:e9:3f:30:c0:49:
54:08:84:79:f4:d9:6a:a1:3b:2f:76:9d:54:16:02:
33:9a:65:7e:ad:ba:3f:a5:05:f3:69:37:86:2a:48:
d8:c1:0a:dd:26:20:bd:41:fd:83:71:9b:36:42:51:
c0:b3:52:cd:3e:17:67:84:b7:bb:a9:5f:56:72:db:
2b:8f:fa:3e:46:82:c2:da:19:a6:92:fc:2a:32:0f:
d1:bf:3c:f9:51:10:6c:46:8d:5b:3d:86:f9:4b:59:
97:9e:9f:a1:a0:ca:c2:d1:7d:5d:42:a0:ab:eb:32:
64:08:0d:a4:79:d0:50:e8:59:d7:96:09:57:3c:34:
09:28:ed:88:83:21:42:aa:67:3c:ec:2c:61:ef:95:
8e:b6:43:2a:06:1a:b0:eb:70:68:04:61:c5:47:cb:
94:62:74:be:65:c6:3a:25:8a:fd:87:3d:28:5a:3d:
6e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B5:17:D0:58:BC:9D:D6:61:3E:CD:3F:55:CE:DA:9D:5D:E8:A6:26
X509v3 Authority Key Identifier:
keyid:71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:be:4a:20:c6:8b:f1:9a:04:6c:10:0e:32:ed:18:76:59:54:
38:10:fa:99:45:fa:dd:af:b6:fc:2c:05:b0:70:10:97:98:19:
47:b6:ca:30:7b:5d:85:b3:ca:8d:7c:6e:5f:34:79:6e:2e:e3:
56:bd:e5:66:99:4d:b3:6f:71:f5:e4:88:26:68:64:b8:05:5a:
2d:fe:cf:b5:f2:b0:7e:d2:b1:13:63:d5:ca:47:0f:e0:0b:80:
5c:11:59:57:5d:d6:ed:19:cb:66:04:a5:80:d5:76:b2:c0:18:
e3:9b:70:e3:a4:e0:ba:0c:b0:60:05:d7:0d:3b:2e:26:9c:12:
6b:ea:32:3a:7e:88:70:d1:ed:4f:b6:1e:7f:02:83:25:37:74:
41:82:52:06:91:4a:c3:b8:6e:1c:db:17:40:73:ee:1c:8d:0f:
9b:50:ec:42:b1:68:6b:8e:e3:5e:ac:dc:26:35:30:15:2b:6b:
8c:37:de:f0:ff:08:39:d6:d3:17:43:89:bd:85:21:ba:41:14:
88:30:a8:10:0b:1f:e4:81:10:5e:59:10:a2:25:98:43:6e:b8:
46:1e:44:83:8b:0b:aa:97:c3:fe:f0:11:68:9f:15:66:5e:63:
3d:1e:42:d8:96:3f:20:ff:9e:e1:46:6d:65:df:66:68:ab:c6:
f0:41:7a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:50:52 2025 by rpki-client