Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
File: P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft (raw, json)
Hash identifier: 28WJwjtneqBErJHNzLeIuT456yhejxV/OiD5RVzpBTY=
Subject key identifier: 44:16:81:90:5A:0A:E0:9A:4E:AB:58:A7:7F:15:8C:F5:36:13:4A:18
Authority key identifier: 3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D
Certificate issuer: /CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d
Certificate serial: 01967BD846301BEB196828D9A42AC42E8604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
Manifest number: 1227
Signing time: Mon 28 Apr 2025 10:01:33 +0000
Manifest this update: Mon 28 Apr 2025 10:01:33 +0000
Manifest next update: Tue 29 Apr 2025 10:01:33 +0000
Files and hashes: 1: BfNexY5OqoQ7WOolPlzeDpCCs5M.roa (hash: rSm9EPZuoDpFIDuTgtzeM5a6uFOK9MrJk+o4deyRBsw=)
2: P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl (hash: pmuOqfLyTqL4GJJimlWMSCSYgxVN0EsG3/3F+Pc35AU=)
3: uq8LGKG3oEbowZ7v4iuP9ClmWdw.roa (hash: hgRaSL//DCXKQ88iWICAvE3iKVN2MVceZAG3WSssG0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d8:46:30:1b:eb:19:68:28:d9:a4:2a:c4:2e:86:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d
Validity
Not Before: Apr 28 10:01:33 2025 GMT
Not After : Apr 29 10:01:33 2025 GMT
Subject: CN=441681905a0ae09a4eab58a77f158cf536134a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b7:f0:d5:a0:93:b5:c9:24:9b:8a:5f:9a:91:
9e:af:e6:76:1a:dc:03:1e:b7:c9:4d:85:1a:38:78:
cd:b7:24:d6:13:a8:69:0a:03:16:18:3f:c3:95:86:
4a:f2:9b:8c:ee:8d:c4:b6:6d:e6:33:05:50:b0:43:
3a:68:27:dd:53:a7:be:88:bf:e6:5f:60:22:28:1d:
cd:70:23:27:97:06:b9:04:c0:b6:6b:07:2c:fa:35:
2a:29:a1:2d:f5:29:17:0f:42:fe:f2:1a:02:51:1e:
73:de:ee:0c:3f:97:63:67:65:c9:ba:4b:8a:8f:72:
c1:07:fb:d8:75:ae:33:5e:56:a3:32:69:50:2d:33:
72:c6:01:d0:0b:64:c4:ed:31:dd:76:29:88:23:33:
7d:07:c5:a0:ad:8b:83:38:28:30:41:92:a6:78:53:
9b:a3:35:b8:90:96:3e:a0:e7:ef:2c:e1:13:07:02:
79:1d:cd:f8:5c:1a:43:a5:1f:c3:75:ee:24:7e:e0:
f3:78:6b:cc:d1:7e:0d:59:08:45:d2:db:8c:39:0f:
69:11:59:9f:4a:91:8b:a6:4e:83:7a:04:b4:ef:bd:
60:19:ed:11:d2:14:20:09:49:a0:33:fa:e7:14:9c:
e6:57:79:fd:74:b5:74:28:19:4f:f6:96:4f:8d:58:
52:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:16:81:90:5A:0A:E0:9A:4E:AB:58:A7:7F:15:8C:F5:36:13:4A:18
X509v3 Authority Key Identifier:
keyid:3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a3:76:ea:59:0f:02:6c:07:2f:13:c6:5c:f0:2d:e3:0d:07:
f5:dc:6c:7e:10:02:2b:e5:6c:29:42:ba:f5:23:8f:12:a1:37:
5e:83:23:4f:cb:3d:88:84:0e:c5:38:34:24:c9:2d:b0:f8:70:
33:9d:7f:97:35:0a:cf:0e:8a:48:f7:9e:2e:6f:0f:f0:2f:ad:
33:13:d4:54:e9:d0:70:45:ed:f8:6f:80:44:5f:93:d9:bb:67:
7c:41:f3:8b:9c:12:b5:2a:1d:77:a0:93:99:2f:44:ad:24:ab:
6a:08:6d:a5:d5:39:5c:c3:30:fe:54:af:63:ce:39:d2:7c:55:
75:a2:db:da:be:66:b7:aa:d4:ec:e3:e0:d9:87:a4:23:a5:78:
bf:8c:c1:b7:e8:40:6e:26:14:e5:82:38:fb:34:21:ae:53:1f:
b1:a1:6d:31:f7:85:2a:e0:45:bf:42:83:8c:10:40:e3:da:6a:
1c:e7:0b:34:9b:27:ea:c9:1a:f6:db:90:28:f0:df:27:0b:f1:
20:ed:f8:0c:6d:85:ee:1f:1b:46:2d:94:c1:bf:f8:7b:9b:5e:
07:9f:32:0b:a5:fb:78:33:b4:66:30:5b:34:33:8c:42:7b:44:
65:93:6a:1a:27:be:72:dd:27:31:f1:ac:08:7e:8a:33:a6:68:
83:54:e6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:27:08 2025 by rpki-client