Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier: 6ovBnnFPGMQltdB00aoV5/zVVuXEIYMcQ+bkqGKSJm0=
Subject key identifier: 3D:07:07:55:63:3C:1F:7D:75:DF:10:39:97:C3:70:37:5F:05:99:C9
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial: 01967D8EC9DFA2C53BAE48FCFD2135B71DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number: 0981
Signing time: Mon 28 Apr 2025 18:00:31 +0000
Manifest this update: Mon 28 Apr 2025 18:00:31 +0000
Manifest next update: Tue 29 Apr 2025 18:00:31 +0000
Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: 2zPvntLpFl2/vLottzYOpJi28baeoLA+pTuircNN328=)
2: UJVJt5_Arh5oP7MnvKcbCGODOc4.roa (hash: cSJe9mPxkDM+ny/+GoKSWRH8dkU4qbTNsxlZ1deFGeo=)
3: epRoE1oSS28-kMoVUvbovqDaftI.roa (hash: vf7QEJn0ywPdqhUagZXAfAdq0fp3vefGorgZKG9IKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:c9:df:a2:c5:3b:ae:48:fc:fd:21:35:b7:1d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Validity
Not Before: Apr 28 18:00:31 2025 GMT
Not After : Apr 29 18:00:31 2025 GMT
Subject: CN=3d070755633c1f7d75df103997c370375f0599c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:6e:2f:a1:73:2d:f5:74:d0:25:c3:c8:5b:
14:8c:56:51:c6:48:08:4d:15:33:08:ac:ba:72:1c:
9d:0f:75:60:b0:3c:66:cb:8c:c7:7d:98:33:4b:c3:
c7:88:c1:30:90:f1:92:a0:96:87:61:ed:8a:4d:42:
9e:bd:6c:f2:99:aa:5d:2e:7f:b1:c0:b7:b2:7c:e2:
6b:d4:ea:bd:b1:66:35:33:1a:e0:b1:37:64:12:90:
7c:17:c3:8c:a2:11:33:85:be:6f:b9:d0:18:bc:17:
36:a5:c6:18:25:a4:03:86:98:da:99:2a:2a:a9:45:
51:35:60:12:3a:5d:28:60:d3:68:98:b9:e7:d1:58:
df:f8:16:49:ef:89:f6:26:08:77:89:7d:36:a8:d1:
35:17:a1:32:d4:a0:1d:1c:4d:13:9b:e2:95:63:3f:
6e:6b:b3:98:ea:16:46:5d:a3:5a:4f:c2:8e:56:58:
46:fe:b1:53:dd:bf:f9:53:ac:61:59:99:57:18:ee:
0b:7a:45:57:77:45:69:b2:91:c3:4b:92:e2:cf:95:
2f:fa:e0:e7:fe:7c:f9:2f:2c:9e:7d:36:a0:c9:80:
fa:47:74:7f:e3:d7:e1:b3:0f:57:f4:75:5f:73:d6:
63:80:69:2b:5e:a3:84:d5:a1:25:10:69:1f:2e:e7:
c9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:07:07:55:63:3C:1F:7D:75:DF:10:39:97:C3:70:37:5F:05:99:C9
X509v3 Authority Key Identifier:
keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1b:4e:2b:a3:f0:89:f7:76:88:21:93:5c:f2:09:c5:7e:61:
1f:d4:b9:35:07:ef:ce:51:f6:dc:18:a5:59:04:23:28:be:ce:
b2:61:19:8c:98:09:45:6e:58:2d:6a:e8:67:82:d3:2d:db:ec:
36:ee:a7:9a:d4:e2:6b:2e:87:b9:22:d6:36:00:52:20:e1:f8:
a0:c2:f8:9a:71:d6:96:99:e1:58:30:76:b7:5d:3c:5b:15:4b:
60:5b:ca:90:ec:42:7c:32:3c:6d:e9:12:4a:8b:d5:f3:18:e9:
6c:8a:b7:4c:72:d7:88:ea:aa:f8:09:19:d8:c8:68:35:b8:39:
64:1c:a7:d8:59:1b:29:57:a1:20:aa:28:87:5b:73:4a:e6:97:
5c:72:29:ff:1a:8f:a6:b1:e5:e2:ed:06:37:bc:c7:a9:bb:44:
f3:22:ad:2d:f6:12:58:6e:ef:f7:07:12:f6:af:5d:b8:94:4a:
ce:72:f1:49:60:ba:b0:eb:64:86:bc:9d:f8:a1:65:e1:06:8c:
06:0b:cc:c9:d1:02:39:b4:f7:73:88:87:32:ea:3d:52:79:f7:
71:3e:a5:69:95:6e:ba:0e:39:3c:1d:74:c2:96:61:a5:e1:61:
3c:fd:2d:7b:12:47:60:2d:b8:ee:94:4f:93:74:ef:95:49:60:
3c:4b:2a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:16:03 2025 by rpki-client