Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
File: QiYpIEOCMfMh47gQEIiyD5DAjUY.mft (raw, json)
Hash identifier: CE5yXjcWlIBJCDa/5arm+GOXNIDhYI47a2CnzBgX1EQ=
Subject key identifier: 59:65:02:42:25:60:2C:6C:9A:E1:0F:C9:20:0B:20:7F:E0:88:68:F0
Authority key identifier: 42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
Certificate issuer: /CN=42262920438231f321e3b8101088b20f90c08d46
Certificate serial: 019685B5E8475CEDB1A1565A78DA75FE7644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
Manifest number: 0479
Signing time: Wed 30 Apr 2025 08:00:13 +0000
Manifest this update: Wed 30 Apr 2025 08:00:13 +0000
Manifest next update: Thu 01 May 2025 08:00:13 +0000
Files and hashes: 1: QiYpIEOCMfMh47gQEIiyD5DAjUY.crl (hash: YML/+2qYE89A9zdbH8pSbdCuxUwjvTPX9Sv0AuCeVxI=)
2: vzK0GcfKIhsh5S1UL0NdOS-MO04.roa (hash: tbZrlZm8dX+O2bKlUBHktkojMJRjyTWeZk1UwYb3Lj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b5:e8:47:5c:ed:b1:a1:56:5a:78:da:75:fe:76:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42262920438231f321e3b8101088b20f90c08d46
Validity
Not Before: Apr 30 08:00:13 2025 GMT
Not After : May 1 08:00:13 2025 GMT
Subject: CN=5965024225602c6c9ae10fc9200b207fe08868f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:9b:ed:45:43:93:80:b0:6f:9e:bc:38:3d:
fd:6c:78:1f:43:7e:7a:c4:19:ae:10:cd:63:95:17:
fe:f1:90:b7:d4:f3:4d:68:ee:4d:1f:26:4e:1e:99:
58:00:dd:83:97:9f:f4:d4:77:b2:e1:4e:0c:c9:53:
75:00:0c:56:6a:cf:53:38:a4:b1:0c:08:09:0a:41:
e1:c1:3f:0e:46:03:ab:b4:93:e4:9f:75:11:d9:0f:
a2:83:44:9b:73:ef:13:e3:d2:24:c2:bc:b7:06:d0:
ae:23:f5:a0:7c:4a:b0:f1:06:71:84:39:6d:5f:9e:
7b:df:5d:0d:81:83:2c:2b:cf:1c:ed:bb:b2:67:4c:
f3:72:79:20:fc:25:bb:ea:ed:f0:ea:e9:2d:c4:04:
1d:88:ad:81:ba:1a:81:ea:1f:89:22:ee:df:41:3c:
d3:f3:95:5f:e6:83:b4:02:f6:2d:45:5e:11:71:10:
0e:2e:c8:8e:0d:a4:d9:69:6b:71:d0:45:bc:b3:1a:
d1:78:93:1c:a9:35:ee:1d:b2:09:2a:2d:a8:0d:bc:
4a:ad:42:fd:e3:0b:f9:69:bd:d6:d9:d5:04:05:8d:
7b:2c:e8:2e:a4:86:2f:0c:1e:05:c8:5e:29:cd:00:
97:b0:d9:1d:dd:99:be:8f:5e:74:6b:6d:30:f4:dc:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:65:02:42:25:60:2C:6C:9A:E1:0F:C9:20:0B:20:7F:E0:88:68:F0
X509v3 Authority Key Identifier:
keyid:42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d0:2f:34:53:bf:8f:3c:c7:d4:f7:25:b8:fb:3d:9f:8e:93:
ef:1e:28:ad:4c:fc:0d:77:0a:32:b4:93:80:77:22:3f:0b:f2:
2b:e7:56:ac:30:eb:c4:25:ff:c2:18:9f:e9:c6:c8:ad:d8:44:
7a:8d:ef:c0:6c:7c:f7:96:46:de:35:19:a5:85:57:71:f4:08:
46:20:c0:3f:8f:66:bb:9d:4b:2a:1e:00:76:3b:5f:ef:5f:b7:
bf:c2:f5:51:ba:d1:b1:9a:06:fb:05:9c:9d:60:53:69:bd:2c:
86:75:95:8d:a5:e8:4e:66:2d:3e:7e:d8:0f:7f:21:3e:a2:88:
4b:34:d9:0a:cd:ea:f7:d2:33:34:47:2c:ad:e3:fb:4a:a9:38:
b4:ae:61:95:30:b1:1f:b8:7f:a0:7c:92:bb:fb:28:89:f1:60:
11:18:4f:54:22:97:3a:9f:38:36:8a:00:d0:8a:63:99:82:7c:
9f:0e:02:16:26:ec:ff:4d:c9:d9:b8:0f:a5:38:ee:ef:11:c2:
16:a6:2c:c2:e5:27:f8:f7:d0:0e:8d:4a:76:79:05:3d:44:da:
2f:f8:15:c5:46:49:e2:c3:e9:12:c8:d6:06:7e:f5:e7:14:fe:
0e:1f:96:ca:18:c7:d6:ea:9e:ae:ce:fb:43:40:48:ed:c4:3b:
37:d8:84:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:37:07 2025 by rpki-client