Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: 6rWhdIoWqamDPIigt7fsMVCUxr2QO4BAUxuyTVjNA2A=
Subject key identifier: 0A:6E:98:85:85:B6:78:64:76:CD:64:B4:D9:E3:54:EB:4C:3A:0B:36
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 019675306058B2CF4E85CB0ECE2724DFC081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 0202
Signing time: Sun 27 Apr 2025 03:00:26 +0000
Manifest this update: Sun 27 Apr 2025 03:00:26 +0000
Manifest next update: Mon 28 Apr 2025 03:00:26 +0000
Files and hashes: 1: B5665HYy6kSNy90OpMzSYkfYZ78.roa (hash: l3LMbVnBNYo1auwulw02upGn169zVSqtpPpAH0JkHoI=)
2: BhseQy6cfY2KxD85qSiLzXh-5UM.roa (hash: 0YvZXzvsO+BZgmZ0JpcK1I5V3fjP6y+JiPN3ak5ChGQ=)
3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: f6yfjmgNEQbCPLr1XjfwQ1GJjzjfaLAz5mBhsukITE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:60:58:b2:cf:4e:85:cb:0e:ce:27:24:df:c0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Apr 27 03:00:26 2025 GMT
Not After : Apr 28 03:00:26 2025 GMT
Subject: CN=0a6e988585b6786476cd64b4d9e354eb4c3a0b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:a7:04:10:fd:32:de:07:97:49:39:7d:f6:
01:89:d8:65:ca:fa:03:62:5c:64:86:67:87:6a:e8:
89:5d:43:da:75:81:62:bf:4e:82:73:7b:6d:c4:bf:
e0:4a:59:12:1b:71:9e:69:db:cc:93:f4:7d:65:ae:
92:ae:4e:7f:07:87:0d:ee:c6:72:29:bf:99:63:0b:
62:cd:47:97:fa:40:57:ca:02:59:64:7b:fe:dd:cc:
e0:c2:5a:39:7f:c7:f8:7d:ae:bd:ab:30:10:b8:f8:
4b:df:fd:9c:76:e6:58:48:13:3a:21:a2:4e:fc:21:
bc:9b:d0:0d:bf:f9:a7:5f:86:8f:8d:5b:ca:e1:6a:
3c:cd:e6:e5:b2:d3:2f:0b:b3:f4:21:c9:a8:3e:0c:
c3:f0:4b:ce:42:aa:95:11:c5:ec:81:af:fc:4b:d1:
a9:77:ac:ec:81:b2:9e:5e:20:99:61:e6:6f:90:78:
f0:59:2c:f7:a9:28:30:d6:ab:81:62:6d:ca:25:18:
da:5b:92:5c:7c:dd:c6:8d:eb:6a:02:30:d3:6b:19:
ea:24:0b:74:04:51:52:61:12:85:04:43:10:39:e1:
22:24:2b:08:3c:da:29:7d:3d:97:9f:ee:50:85:5a:
9b:73:a9:f9:e2:94:8e:b9:f7:7a:67:92:e0:8a:45:
25:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6E:98:85:85:B6:78:64:76:CD:64:B4:D9:E3:54:EB:4C:3A:0B:36
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5c:04:70:85:f9:1c:08:dc:d1:93:ca:0e:b1:33:7f:37:dd:
16:14:2c:a0:3d:2b:00:7a:a7:1c:7a:d8:0c:08:3e:79:3c:b3:
b5:85:3e:db:90:ca:60:07:0c:7d:fe:27:49:2a:19:09:b8:0c:
93:30:c3:40:74:24:5b:df:e7:85:09:8d:3b:31:86:06:3e:0b:
da:b6:eb:4c:bc:20:3c:31:52:fe:65:a7:b3:5e:f2:fd:f0:1f:
ae:a7:4f:60:d7:59:9f:27:41:2d:52:59:02:4e:23:f8:60:a1:
6a:a8:db:62:3d:45:7b:fb:f4:0c:4b:46:a8:90:6c:a9:9f:ce:
7d:ef:85:22:6e:2f:79:4f:b1:17:47:18:0d:64:3d:b6:7d:64:
4a:69:04:f8:9e:be:63:f5:aa:c6:0e:ca:21:74:51:c8:b3:0e:
4f:fd:d5:9b:15:3f:71:e8:b4:68:74:13:fd:5e:e9:a6:1f:b6:
d7:b4:87:d9:34:97:cd:40:2a:d0:d8:c0:dc:b2:b1:be:ce:b2:
4c:9d:4e:6e:d0:a5:8b:72:e8:45:4d:f8:d8:8d:d4:6e:8e:45:
95:22:bc:a8:d9:a4:13:23:53:f1:c6:8e:9f:a1:dd:fb:11:af:
cb:c1:4f:c0:75:ef:65:15:83:33:7a:d2:e2:ed:77:66:8b:11:
22:9d:cc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:29:31 2025 by rpki-client