Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
File: Q-BF0CHUiuhhoM5n040VoGdlOjE.mft (raw, json)
Hash identifier: smACdslbg1yQoshBROE9sjQSzmcxzJRRCiGT4s3ruZs=
Subject key identifier: CE:6C:5C:9E:2E:41:0D:44:72:E3:34:91:80:D0:A3:FF:1F:00:41:17
Authority key identifier: 43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
Certificate issuer: /CN=43e045d021d48ae861a0ce67d38d15a067653a31
Certificate serial: 019678315566F1214692E2AAB05C017972C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
Manifest number: 0AFE
Signing time: Sun 27 Apr 2025 17:00:21 +0000
Manifest this update: Sun 27 Apr 2025 17:00:21 +0000
Manifest next update: Mon 28 Apr 2025 17:00:21 +0000
Files and hashes: 1: Q-BF0CHUiuhhoM5n040VoGdlOjE.crl (hash: zO4mhSvsbZR8g3OePx+K2vkAvbBRlYh9kYPNe3yS8Uc=)
2: XNqUza-1RrV34b84oczapxMF-Cs.roa (hash: Cr97r6Z1ePJazya6FJNCZUabXsw1/WFse2z8LJYuBQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:55:66:f1:21:46:92:e2:aa:b0:5c:01:79:72:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e045d021d48ae861a0ce67d38d15a067653a31
Validity
Not Before: Apr 27 17:00:21 2025 GMT
Not After : Apr 28 17:00:21 2025 GMT
Subject: CN=ce6c5c9e2e410d4472e3349180d0a3ff1f004117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:82:ec:0a:d4:75:6c:67:51:20:3c:26:a7:
f8:e3:3b:44:c2:7b:bd:ad:ef:06:8d:7c:7d:85:a5:
80:90:4a:6c:18:33:6e:eb:fc:f4:e9:46:8b:c1:4c:
71:c9:e0:dc:11:92:d4:db:5e:33:5c:05:bd:96:ee:
a9:e2:af:0b:1d:3c:bf:20:0d:30:42:b9:67:5b:f4:
a8:86:da:33:c8:e4:ff:a3:80:ea:e9:5f:6a:ae:14:
dd:7b:b5:5e:2f:d2:be:c7:18:38:b2:b5:17:9b:ac:
7d:d8:ca:12:6e:db:96:03:0d:e6:46:8b:26:5e:f5:
1f:c5:8c:95:43:9f:d9:4a:ee:6f:c3:fe:14:dc:05:
f0:12:3d:47:1b:45:6e:3b:bd:63:ef:6c:78:6a:67:
fc:33:6b:aa:bd:46:8a:f0:c2:ab:20:8a:3d:b9:99:
c4:2b:f8:bd:ac:80:4c:23:73:a3:56:d8:cf:bf:6c:
25:b3:ea:95:46:73:6d:ba:f6:ba:62:48:d8:a5:b0:
d6:58:ac:3d:4d:22:11:0a:d0:5c:62:cb:e1:82:fe:
2b:5f:68:1f:b6:21:fc:ab:d8:12:bd:19:49:13:dd:
a7:69:18:a1:10:4e:41:e9:89:5e:50:6a:22:1a:0c:
20:09:0d:d5:d1:84:6c:0f:91:1b:98:69:16:ee:cb:
dc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6C:5C:9E:2E:41:0D:44:72:E3:34:91:80:D0:A3:FF:1F:00:41:17
X509v3 Authority Key Identifier:
keyid:43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:69:ce:f8:92:13:17:06:e6:31:d1:49:b5:21:27:5e:6f:15:
37:61:70:7e:49:a4:21:d9:54:80:88:f1:c5:b6:23:3f:4f:af:
11:66:cc:14:dd:81:38:5f:23:90:9a:ca:56:7c:2f:4d:eb:44:
a9:17:ec:98:22:05:28:5f:9e:04:05:f4:0d:d9:f0:f9:07:f9:
0a:6e:88:26:e8:29:67:c2:a2:7a:c1:08:3e:b0:50:25:61:6f:
c2:01:c6:79:9e:ac:61:eb:08:c6:66:7b:65:5f:db:8b:9f:f6:
1f:e8:8e:b2:4b:ea:56:f3:3f:72:23:a7:fe:9c:a4:cd:2f:73:
b8:f7:ae:d1:56:21:f5:1c:4b:63:ca:ee:9e:48:f1:cc:80:e2:
4a:ec:72:be:d3:87:7f:bd:cc:3d:30:5c:90:ac:a6:84:43:40:
e0:dc:53:92:24:81:79:aa:a9:b8:fa:52:d9:de:c4:4a:47:cb:
68:a5:c9:e5:72:ca:33:c7:dd:17:39:58:19:7f:33:df:6c:af:
bb:f3:55:84:80:19:90:91:f5:ef:3a:78:41:78:c7:7b:69:a3:
f8:e0:4b:54:2f:a2:c2:0d:5f:b7:ee:87:d4:00:4c:66:0d:0d:
6f:ae:f8:55:41:29:f9:18:3e:ac:56:00:24:58:88:74:cf:15:
e8:2f:28:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:04:00 2025 by rpki-client