Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
File: Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft (raw, json)
Hash identifier: bGdEA0CQAHecbaYzRgnXycSKSQdu2JRhKrv+6ofbaNA=
Subject key identifier: C9:03:22:71:78:50:BE:B4:E6:72:C4:B3:3C:A6:C3:59:8A:C3:23:40
Authority key identifier: 42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88
Certificate issuer: /CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
Certificate serial: 01967BA050FE3A31C68E28058C3A7489874F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
Manifest number: 0F2F
Signing time: Mon 28 Apr 2025 09:00:26 +0000
Manifest this update: Mon 28 Apr 2025 09:00:26 +0000
Manifest next update: Tue 29 Apr 2025 09:00:26 +0000
Files and hashes: 1: Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl (hash: GRl0U77LqrRQjGrxhBDUCvaHheTlL9N6q1jvEv38ijM=)
2: pGi5mprHxSOkx1tGIc-vLUmzaew.roa (hash: dSlWsgh48wgZDLLaxYVN9gYqMrT57evwFejA3CWUycE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:50:fe:3a:31:c6:8e:28:05:8c:3a:74:89:87:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
Validity
Not Before: Apr 28 09:00:26 2025 GMT
Not After : Apr 29 09:00:26 2025 GMT
Subject: CN=c90322717850beb4e672c4b33ca6c3598ac32340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0d:b1:7c:f1:0e:94:60:cb:d0:e9:aa:dc:24:
53:aa:47:b2:bc:fb:4c:f8:e8:f8:da:3d:a9:96:b3:
9d:67:db:d7:fd:d9:27:d0:2f:48:86:ca:41:f3:3d:
46:2d:ea:54:7b:d4:83:76:a0:84:c7:11:fc:12:47:
21:68:4a:30:4a:b8:9c:53:01:63:77:15:3d:7d:84:
7a:21:0f:83:53:4f:47:f8:9b:c4:dd:83:96:bc:93:
71:b4:1a:25:ce:9d:b1:a6:bb:ba:4e:0f:47:f2:86:
f3:62:79:63:d3:cd:01:f3:76:20:16:ba:87:c1:b4:
77:cb:91:bb:ee:99:23:f7:c7:e5:83:c8:0c:b7:86:
45:44:8c:0f:51:ed:04:0d:73:91:46:02:8e:3d:bf:
c3:74:08:ae:e8:84:38:69:d9:e0:a3:74:9e:b4:15:
7d:21:f0:cd:97:6d:52:c3:fa:f7:46:27:ab:ec:b5:
b9:81:dc:a1:fb:63:bc:55:36:7d:68:61:bc:11:48:
95:c1:ee:08:6b:b1:d4:40:09:b4:84:4f:59:43:4d:
5c:9a:bf:cf:f2:f4:27:9f:bb:74:1a:62:2a:1b:91:
f7:5e:17:19:32:c4:77:ef:03:b0:ae:87:cf:cf:e7:
a0:6b:3e:f6:36:41:86:39:5c:af:b8:76:7e:4b:45:
3b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:03:22:71:78:50:BE:B4:E6:72:C4:B3:3C:A6:C3:59:8A:C3:23:40
X509v3 Authority Key Identifier:
keyid:42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e8:00:20:61:59:bf:2e:ae:ca:e4:34:c7:26:8b:b4:29:bb:
5f:32:de:96:6c:18:45:a9:a5:b9:c0:4e:7a:f4:2e:84:db:a8:
46:da:7c:60:6c:10:92:c9:0b:99:ba:f4:fb:78:6a:67:36:31:
36:e4:93:c9:62:10:bd:3b:86:7e:0b:c6:33:e6:82:cb:c1:40:
62:85:13:bf:64:65:d1:19:a9:4c:e8:e0:e4:0f:69:f9:58:09:
1a:3a:f7:0e:fc:fc:04:01:78:42:71:54:c8:9f:84:fa:18:2d:
87:40:a7:75:13:34:dd:41:25:7e:b8:a7:9d:aa:49:7f:03:bc:
b7:69:0f:f4:4d:1f:85:45:d6:ca:ad:bc:58:ab:21:40:1e:80:
c3:66:26:32:f1:ef:05:15:23:d8:33:21:45:cf:49:e1:08:fb:
38:d9:85:3d:85:06:9c:d9:db:b4:78:e8:fe:9f:b1:9d:9a:5b:
42:07:1f:41:fe:ee:35:79:bd:0a:02:62:d2:2b:74:f6:01:9d:
31:7a:c2:d5:2c:ed:38:b6:f6:1b:44:33:ab:21:fa:c3:3a:d7:
c5:dc:7d:ef:a2:d8:73:87:44:9d:a5:62:01:2f:c2:9f:73:6c:
4b:bf:29:9e:a7:aa:cc:c5:d3:a3:f7:41:78:b1:26:9e:0c:df:
0f:11:d9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:20:22 2025 by rpki-client