Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
File: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft (raw, json)
Hash identifier: kDF7YU9tjqEufJ7QUlgaZqrCP4y/WZGIPjr/w45x9Vo=
Subject key identifier: ED:D4:D6:6C:DB:94:29:C6:BF:CE:BD:CF:AB:74:20:AD:8C:E3:FE:9C
Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2
Certificate serial: 019677C3D71C2EE1C60DCD96F05240D77F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
Manifest number: 01BE
Signing time: Sun 27 Apr 2025 15:00:45 +0000
Manifest this update: Sun 27 Apr 2025 15:00:45 +0000
Manifest next update: Mon 28 Apr 2025 15:00:45 +0000
Files and hashes: 1: Fg4gfGthOyzcFXfxEYyjwrss7as.roa (hash: mWUv12QovIjIHXpuDNAMlgedx6+BQ3vMWaiHrsA7+3A=)
2: Q5e6g1WUMRG4cL4aNZtJqqD_-yo.roa (hash: T3aZ91YVxRUkDJ96e4vMqo7oCynEMTZ2Xb8h0pZbGMo=)
3: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl (hash: 1E7Hb1VS2dfP+3WVr2Sj+JSG8mX6Am9FrZuGfMjwEo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:d7:1c:2e:e1:c6:0d:cd:96:f0:52:40:d7:7f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2
Validity
Not Before: Apr 27 15:00:45 2025 GMT
Not After : Apr 28 15:00:45 2025 GMT
Subject: CN=edd4d66cdb9429c6bfcebdcfab7420ad8ce3fe9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8b:20:e1:15:78:aa:f7:1c:61:cc:d5:ad:8e:
f5:5d:33:b8:44:79:6f:63:3e:54:53:d5:95:66:c0:
8e:4c:e0:6b:6b:af:93:1a:15:3b:d3:b3:2d:8b:b3:
5b:e6:dd:8b:6c:c9:c4:96:c3:c3:97:1e:6e:19:dc:
34:3c:b7:0b:3e:8b:7d:e5:bd:26:65:89:81:9c:f6:
64:2a:b4:de:3d:0d:2f:02:4d:bc:7e:67:76:17:f3:
1d:c1:ac:b4:da:69:32:cf:d0:2e:b4:86:1d:5f:12:
d1:b9:ae:19:de:8c:f6:d1:15:5b:6e:a5:73:33:36:
40:2a:e6:67:fc:02:e3:9d:fd:0d:34:3c:07:31:3c:
e6:55:b0:d6:46:63:c9:b5:ec:41:e7:3f:64:86:a1:
af:b4:46:e0:1b:53:f4:10:b0:ec:7d:36:ce:24:ad:
02:1c:4a:c4:1b:1c:47:02:44:69:c5:64:04:be:f1:
33:e2:5a:a7:af:48:6d:f1:e0:3c:79:90:11:b1:8f:
5b:70:3c:b3:5e:2c:b4:3c:19:5d:81:f4:15:8d:d2:
72:52:7f:3f:a2:51:91:fa:4d:d4:d7:51:38:97:ab:
35:40:d0:83:e6:bc:a4:4f:05:bc:40:b1:14:b9:e9:
ba:db:b8:00:51:53:8a:8c:e1:02:86:ca:95:2e:ff:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D4:D6:6C:DB:94:29:C6:BF:CE:BD:CF:AB:74:20:AD:8C:E3:FE:9C
X509v3 Authority Key Identifier:
keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cc:b5:38:1c:f8:d5:be:fb:da:fc:80:10:e5:6c:eb:7f:e8:
c5:fd:fb:d9:a6:8b:14:17:46:81:fd:13:3e:56:77:3c:84:20:
f9:42:00:46:43:bf:ac:e4:b1:a0:84:60:03:9d:0e:e3:c6:a6:
d7:22:72:7e:bb:6f:f9:5c:7f:db:11:2c:93:88:06:7e:ed:1e:
82:4d:92:31:aa:d2:c4:87:39:76:57:9d:1c:6c:ca:13:8f:7c:
34:3b:de:db:ce:c5:13:34:17:87:44:41:a3:95:01:46:c2:f1:
8e:37:dc:96:c9:ca:eb:55:90:94:9b:cc:ad:02:9f:d3:c0:be:
94:a4:04:9e:ed:af:09:53:ef:07:3d:99:ba:b0:1b:db:11:dc:
ff:05:29:74:73:50:3a:5c:ae:5b:92:d8:6e:fc:f3:e0:a9:79:
72:a1:eb:67:15:77:21:5e:9b:7b:a2:58:bf:0a:61:c8:07:67:
4a:da:8b:f0:0d:cc:27:bb:52:5e:81:ee:6f:17:98:f3:39:01:
81:95:28:51:6c:3f:a1:f2:59:ae:73:bc:69:9c:10:bb:0b:a5:
f1:8c:2e:2c:52:b2:56:83:33:c7:d9:5b:6e:dc:4a:4d:17:f6:
5c:61:8c:22:9b:00:d5:ab:6e:5b:43:63:a8:68:d5:6e:a3:85:
55:c2:f3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:55:28 2025 by rpki-client