Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
File: Q1QWsigrRTPDUJwY6VfODINryDc.mft (raw, json)
Hash identifier: 0LrVL9E/QdXMulxANn/NbNuxOV4bO9FfVTrPnuQKLxg=
Subject key identifier: A3:88:2E:6A:F5:E8:06:BC:69:18:94:0C:72:9A:F8:94:A4:4D:42:7F
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 0196783158FD1218D19B7A1ED977E89EC898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
Manifest number: 0CFF
Signing time: Sun 27 Apr 2025 17:00:21 +0000
Manifest this update: Sun 27 Apr 2025 17:00:21 +0000
Manifest next update: Mon 28 Apr 2025 17:00:21 +0000
Files and hashes: 1: Q1QWsigrRTPDUJwY6VfODINryDc.crl (hash: +F+qgD7PhxrrogpgFovQS9xp0lk3XV8IWVwzB2M6E1M=)
2: Tt9cDnLqp2SOeeoElhH21A1JSmo.roa (hash: g7FEq0smlg0TkkjLfygzTEzTD8KkWT+7GvQHUxPqdJo=)
3: pSYXiKXGXABhmANIG0Y2vhGLRUA.roa (hash: kjXcWabBcy+Nz9B+eKiIbdHIvrnXu/XwD/9ZftdegXw=)
4: uJ1wgWjtfF_PUvxzUj8noSaLQx0.roa (hash: 5K3mYspcTrH8J1dlAJJG2SBHWuIALi8AQG16SYzuq8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:58:fd:12:18:d1:9b:7a:1e:d9:77:e8:9e:c8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: Apr 27 17:00:21 2025 GMT
Not After : Apr 28 17:00:21 2025 GMT
Subject: CN=a3882e6af5e806bc6918940c729af894a44d427f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b2:b7:92:73:2e:c8:66:2e:c8:d1:81:cf:b4:
ef:70:24:07:1a:b5:03:43:d3:4d:00:9a:79:b9:51:
fa:d8:67:66:59:b0:7e:fa:85:f4:a4:db:b6:65:69:
9b:63:67:c4:47:0d:89:df:78:74:7c:e5:6d:4c:98:
ad:7e:a6:63:5d:24:00:b2:3d:97:91:d6:d7:eb:82:
3d:e0:62:35:78:b4:be:38:18:e1:40:6b:46:b3:2f:
de:e8:2f:0c:2f:17:5d:2d:cf:7b:cb:11:08:21:54:
d4:19:da:e2:8e:d9:83:43:0b:de:15:de:21:0c:90:
fa:58:99:bc:35:3e:1e:c9:c0:0b:bb:2c:2b:39:8a:
c8:61:11:f0:96:b6:6c:d4:b1:5e:d2:e7:a9:41:7a:
30:3d:2e:61:32:8e:57:c9:f8:bf:2e:ad:2f:c8:8e:
54:b3:90:85:bd:13:24:26:05:96:4c:1e:37:ff:9b:
e2:06:bb:24:ec:72:66:ff:d2:b3:bc:77:43:41:99:
ba:88:c9:09:b3:d3:2d:72:b4:b0:a9:ff:a4:b5:0e:
29:79:fb:a8:6c:03:c7:e5:19:46:30:c1:96:b5:34:
0c:64:9a:d4:51:df:70:86:49:46:c2:bd:72:c4:b4:
4a:86:75:9a:2d:9b:fa:99:5a:fe:20:33:c3:e9:cb:
25:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:88:2E:6A:F5:E8:06:BC:69:18:94:0C:72:9A:F8:94:A4:4D:42:7F
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7c:99:cd:db:e2:28:41:58:85:ec:f4:af:a2:68:0b:16:f3:
b1:cd:87:6d:37:56:bc:83:a1:e2:94:90:2f:b1:84:b8:3c:bf:
4c:d1:34:da:7e:11:4b:99:e4:91:03:68:1c:70:bb:c6:3c:cc:
3f:f4:9d:bc:03:d9:19:dc:7e:1a:27:7a:0b:e6:24:0c:71:3e:
b2:54:12:94:94:e1:61:ab:4e:bb:92:23:b4:bb:55:70:17:0e:
ab:ae:a1:1d:78:9e:ce:1d:57:d2:4d:db:16:e1:6b:4f:ef:2e:
12:dc:cd:1e:c8:43:85:89:ad:03:e8:01:de:04:b3:41:79:a0:
d8:40:ba:87:95:06:4f:32:07:1d:99:8c:7e:a1:5a:a9:63:1f:
f1:40:15:7a:20:bb:a7:99:47:92:94:43:62:2e:a4:e7:1d:01:
95:56:89:92:6a:87:2e:dd:bf:bc:74:69:1e:af:5a:66:d8:1b:
e5:97:3e:97:71:c2:8e:46:c5:29:b8:23:48:b8:01:18:9b:ae:
d4:bb:f3:22:d6:43:2f:9d:a4:3d:36:68:81:39:e3:29:9b:d5:
c6:75:74:90:18:ce:a7:df:4f:57:41:0a:7f:83:ac:b3:60:ba:
b1:74:60:74:4a:94:6f:a5:cb:fa:25:cf:d6:a8:70:af:49:c2:
e2:82:77:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:20:58 2025 by rpki-client