Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
File: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft (raw, json)
Hash identifier: LL0lBgd3t2dJiDa3KUoDal6/yK2y2UXfPVGNXwjjPfE=
Subject key identifier: B7:D1:8A:B2:FD:04:49:6D:0B:68:10:44:16:88:EC:F3:EF:56:81:7B
Authority key identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
Certificate issuer: /CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Certificate serial: 0196760CF83EB27AAB71100EB1608D120CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 07:01:23 +0000
Manifest this update: Sun 27 Apr 2025 07:01:23 +0000
Manifest next update: Mon 28 Apr 2025 07:01:23 +0000
Files and hashes: 1: Uebp0JIuP3hxZnZ2gSrGEbFlcC4.roa (hash: ioWjN07GA9Wdsf4jPQTmSsjSBf+lcaQHQxBmquaB1Tg=)
2: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl (hash: k71TEAlZNk3pcdw9FB1ukg2/34Sy9Z+ttAQlvJVHsTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:f8:3e:b2:7a:ab:71:10:0e:b1:60:8d:12:0c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Validity
Not Before: Apr 27 07:01:23 2025 GMT
Not After : Apr 28 07:01:23 2025 GMT
Subject: CN=b7d18ab2fd04496d0b6810441688ecf3ef56817b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:d3:3d:50:7a:69:01:cd:50:b7:1f:22:4f:
19:34:67:47:c6:1d:49:d7:93:69:0d:fb:16:b8:40:
b4:52:a5:68:72:a5:9e:18:d9:e2:b9:74:17:4a:d3:
15:ee:f4:91:db:50:84:ec:ab:35:00:53:a5:36:5d:
57:51:a7:db:42:10:89:1c:8a:a4:b3:a2:eb:ee:9e:
6f:46:22:0e:20:87:18:22:07:79:bb:27:9f:7b:21:
11:9f:b9:16:a5:d1:1a:05:84:55:ac:15:eb:be:e2:
cb:ee:20:05:c5:03:ee:59:57:93:64:f0:fa:cf:49:
44:4e:b6:e8:ae:be:6e:95:23:1d:1d:fb:8e:9c:e6:
b5:3a:f6:03:90:4e:74:2e:c4:bd:ae:6b:f8:ed:3d:
51:14:77:6f:6f:6e:22:30:90:ba:97:4c:44:b9:bf:
9d:b0:6a:c0:1f:db:b6:74:ed:94:5a:c9:0b:a2:ff:
75:a0:c9:e0:d6:0d:a6:3e:9c:e3:82:2e:09:83:09:
83:09:f0:06:a9:85:ce:1d:ec:0d:b6:d2:de:c9:60:
2e:18:ad:30:7c:86:c4:dd:e5:f0:a3:c6:ee:46:2c:
cd:ef:0e:f5:b2:dc:8a:b4:21:f9:94:86:97:56:16:
7b:ce:85:13:5b:c9:97:9a:f3:cb:d2:f2:aa:28:5f:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D1:8A:B2:FD:04:49:6D:0B:68:10:44:16:88:EC:F3:EF:56:81:7B
X509v3 Authority Key Identifier:
keyid:A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2c:a4:27:04:cb:9f:cc:1b:41:14:3d:91:4c:50:5f:29:05:
76:e0:ee:53:d1:08:50:db:04:ff:39:94:56:8c:7b:0f:ad:6a:
aa:31:fd:ea:6b:29:b1:83:a5:3d:c1:e8:8e:1a:6d:42:da:b8:
ca:f4:d6:98:5e:c5:0a:fd:b7:ec:fa:fa:4a:a6:ee:20:16:c5:
e6:f1:8d:ea:5a:6c:d2:cd:a5:fc:50:30:21:eb:85:59:0a:9d:
e3:fd:0f:84:69:71:a0:b1:af:20:0a:30:c6:b6:ac:e2:56:6a:
d3:c4:58:e9:01:20:f7:f5:9b:fc:39:e9:c3:bc:a2:f7:67:b9:
4f:eb:2f:66:9e:ac:57:5d:3b:ff:12:be:8f:37:16:08:7b:1f:
1d:9d:cd:4b:73:a0:55:7c:e7:15:eb:a1:1e:f5:75:ab:1c:e2:
11:73:b8:39:c0:fb:cf:25:88:d6:f5:07:59:c5:36:23:89:37:
03:3e:80:c3:79:24:a4:9f:48:77:9c:b5:8b:c4:57:3e:69:56:
4c:25:20:31:92:db:e9:f5:d0:17:91:13:4c:d8:1c:52:39:b2:
e5:e3:21:65:74:c1:54:86:9a:a3:73:56:ad:7d:9d:f3:02:73:
64:70:88:ef:31:2f:18:3c:65:aa:f4:bf:72:7e:bd:5e:95:fe:
f4:ff:fa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:30:23 2025 by rpki-client