Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: G2LweUv/J4qNDZi6VzivFEnGTNvNcWjyLUlUIYCNk44=
Subject key identifier: F8:69:A3:E6:5A:82:BB:EA:0D:3C:8E:CE:BD:A3:C7:C4:28:DD:FA:D3
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 019678D629129CA8026B942AD47AEE0679D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 103F
Signing time: Sun 27 Apr 2025 20:00:23 +0000
Manifest this update: Sun 27 Apr 2025 20:00:23 +0000
Manifest next update: Mon 28 Apr 2025 20:00:23 +0000
Files and hashes: 1: 1-Ofv8tDBMWs_4Hbhr7lMN_HF2TI.roa (hash: uH/td80fED56QPX1k1oOVphRVZ11UL29yzqyURnsYnc=)
2: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: QvjNefuscMbbOgZKJsOo03pDjw/W1s33tUu9wTJdwlw=)
3: ptc21Pv_RMZdbmNfwt1t43MswfA.roa (hash: mrzhJeNsIe6my5EK8oo2DkozZxDWWdzOh94g4W2m17U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:29:12:9c:a8:02:6b:94:2a:d4:7a:ee:06:79:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Apr 27 20:00:23 2025 GMT
Not After : Apr 28 20:00:23 2025 GMT
Subject: CN=f869a3e65a82bbea0d3c8ecebda3c7c428ddfad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:56:3d:33:50:78:f2:e9:d7:70:90:85:d5:1c:
e5:23:19:a0:39:52:ba:d3:6a:20:7a:6f:5f:61:b7:
68:ec:1b:52:53:43:0a:b9:9b:0a:cc:a1:43:f5:a8:
d1:ce:ff:e3:de:51:65:9d:fc:73:79:97:be:65:f2:
3e:5c:ca:c4:02:67:db:6e:56:ec:78:d0:2a:a9:ce:
11:6c:ae:f3:55:46:90:df:42:d7:01:d2:17:1b:35:
79:c5:94:15:8b:f1:59:a3:8b:00:f7:29:ae:4c:07:
03:83:e0:cf:e2:93:a3:1a:d0:9a:65:81:cd:91:80:
35:8c:ec:c3:24:46:0c:98:30:7b:1a:a3:3d:86:10:
1a:b9:ed:94:f8:49:04:ac:e0:0e:1f:9d:cf:7b:2e:
f5:62:cb:d3:af:cd:83:02:f4:50:7b:68:03:4f:66:
f7:9e:31:bc:8a:3f:71:f8:c8:8c:b9:cf:53:f2:dd:
f7:89:2c:4f:21:ba:05:84:a9:04:47:ba:e4:a3:ac:
0f:6d:62:4e:37:c2:7a:61:9a:10:75:72:fd:a2:77:
0d:16:fe:c6:ed:74:cd:e3:fc:8f:c5:e3:98:03:46:
40:01:6b:cc:ab:21:a9:cd:43:6d:c6:36:03:d8:aa:
50:c0:cf:9d:74:f3:d7:c8:dd:c5:33:e7:ee:b8:db:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:69:A3:E6:5A:82:BB:EA:0D:3C:8E:CE:BD:A3:C7:C4:28:DD:FA:D3
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:96:92:f8:19:2b:14:d1:78:3c:29:8f:0f:2d:a0:2c:bb:62:
4f:da:44:0c:4f:b4:de:39:26:8b:34:6a:42:4b:63:74:89:08:
28:cb:c9:ad:1b:85:1e:18:79:29:46:61:ef:a2:e7:37:a2:7f:
de:4d:37:8d:65:87:bb:98:54:d3:5c:c4:c1:60:89:59:80:fc:
20:ec:4a:b7:0b:46:fc:76:e9:09:5c:85:3c:78:a2:05:a5:8b:
53:62:d1:bf:e3:d0:52:66:c4:d1:07:08:b5:d5:38:04:2e:82:
cf:4d:d2:34:30:cb:5a:b0:8f:c8:b3:f3:1f:6b:d9:76:a9:6b:
52:de:b3:56:81:5b:7c:58:9d:7f:6a:48:2c:a3:79:d8:7d:88:
f9:d4:11:ad:2a:87:d1:6d:99:4f:5f:3a:2c:73:9e:2e:55:a2:
9b:ac:e5:e2:8d:cd:8b:7f:f0:70:e1:08:31:9f:91:da:47:9a:
a5:b0:60:cd:3d:69:73:b0:ba:43:64:c1:00:06:3e:03:b5:b6:
5a:78:a7:0f:b9:52:40:2c:da:57:38:b4:b9:38:5c:f6:c1:86:
e6:a0:bd:cf:70:7f:87:d5:77:81:c6:9d:2d:b9:e2:63:19:aa:
8b:44:a0:94:51:97:75:f6:2b:af:49:a1:be:f9:bf:0a:65:a6:
59:ab:a4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:02:55 2025 by rpki-client