Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier: JNEet44+Exr/x9nGseuocOTgoSNt6wf52Nm3ErseAuk=
Subject key identifier: C7:87:42:92:09:CF:85:8A:D1:4D:0C:00:18:31:ED:E9:7A:26:89:F0
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial: 019677C3A6E00F33037010468E892132A0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number: 0E90
Signing time: Sun 27 Apr 2025 15:00:33 +0000
Manifest this update: Sun 27 Apr 2025 15:00:33 +0000
Manifest next update: Mon 28 Apr 2025 15:00:33 +0000
Files and hashes: 1: NpEQQ6T9aVptT2KcAU9qB9-deTo.roa (hash: V25DurbdNpjhByTtNYzzliIkfyOB4iKBrQpwxulmxQk=)
2: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: TOCrwVB2I1hKmMznb2Q5i/1NYslC1KdUMarhsDtHOpA=)
3: dXU4DETp8nIDnLG7KEh2JLzmLfs.roa (hash: 6MeBPQNbwHlZMr7MIfbBomU5a0ddmvu6v9rTAYtxlHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:a6:e0:0f:33:03:70:10:46:8e:89:21:32:a0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Validity
Not Before: Apr 27 15:00:33 2025 GMT
Not After : Apr 28 15:00:33 2025 GMT
Subject: CN=c787429209cf858ad14d0c001831ede97a2689f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:b9:ed:8e:29:39:96:e1:52:7d:12:ee:3b:
f4:f8:ab:ed:80:9d:14:96:aa:59:a8:a3:83:0d:3b:
4f:8a:9b:9e:e8:5f:be:1c:d7:e8:be:5a:d9:a0:a8:
b9:90:41:32:3b:1a:2e:a8:aa:5b:0c:23:68:dd:cd:
6f:9e:5e:5f:16:f7:a1:c8:f8:33:2b:5e:ce:29:73:
83:a9:78:b1:86:ee:21:e8:64:5c:aa:30:0c:c3:03:
41:c4:c2:9e:33:a4:e4:25:9f:5c:f6:3d:5f:2c:c3:
b4:97:24:56:6d:58:5b:31:8a:d0:16:86:d9:6f:a0:
c8:46:80:05:f4:bd:6a:25:c7:4d:58:50:eb:d2:5a:
bb:f9:fb:dc:97:d7:ac:b2:f2:fd:56:05:ca:a9:69:
0f:cf:a7:9b:38:a0:83:9f:1a:9e:2a:35:4e:39:9d:
11:24:06:e7:62:6a:f9:c6:2a:50:e7:57:c8:cf:45:
43:dd:64:16:aa:07:d3:db:8c:5a:2b:76:cc:9e:05:
0c:36:85:e7:b0:4d:1a:a7:22:ce:7f:1f:2d:ed:b9:
f0:0c:49:84:6a:d4:d8:93:dc:0d:9b:54:cc:94:e7:
ea:58:02:85:b5:3f:18:73:d5:0b:ab:ca:fc:2f:76:
43:70:e7:a4:9a:5f:85:e4:38:c3:e3:22:92:6c:29:
29:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:87:42:92:09:CF:85:8A:D1:4D:0C:00:18:31:ED:E9:7A:26:89:F0
X509v3 Authority Key Identifier:
keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:81:ef:43:29:83:60:28:b6:78:89:46:e5:4f:25:fc:68:ab:
dd:76:7a:21:89:92:e9:53:fe:ee:45:38:89:0c:0e:81:c0:60:
21:d9:30:f3:a7:05:e9:22:ad:e4:5c:65:af:cf:0b:b9:f2:b0:
36:10:e0:7a:b0:b6:ee:d5:9a:1c:84:b3:dd:70:b4:7c:dd:55:
c1:18:f6:b3:18:af:30:8a:ea:b6:ab:f5:e9:1a:e4:4f:d9:ee:
36:62:09:66:ce:b5:1c:e3:41:cf:e2:a5:27:08:1b:f4:5b:18:
7a:3f:02:69:71:e8:45:bb:17:0d:e2:6f:a3:1c:20:47:3d:fe:
e3:0a:35:6e:41:32:b2:05:66:1c:b7:57:43:5d:ac:8a:0f:c6:
3e:31:f3:d8:a5:a2:b4:8d:16:16:b0:83:b9:22:e4:db:cc:39:
9c:c4:bb:13:28:f8:91:b3:94:84:7e:d9:6b:da:b5:95:48:d0:
c6:1a:71:53:30:1c:4c:b7:e1:9e:8e:23:f4:fa:98:71:15:51:
06:92:84:24:21:60:de:79:fa:6c:91:bf:60:3b:7e:b7:37:9c:
6b:fa:1d:4a:6a:bd:d8:02:45:62:fb:24:ef:93:fc:27:af:29:
bd:a2:2c:fd:49:85:64:9a:d4:d7:0b:eb:25:12:4c:5f:b4:c9:
29:68:82:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:16:10 2025 by rpki-client