Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
File: Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json)
Hash identifier: 9Vab6RukgPXYzzAkzA/s4xTl2x/9aLCaP++UyUYQMXI=
Subject key identifier: 93:4D:A7:C0:DB:B0:BB:BC:DC:42:1E:2E:F5:CC:C8:B0:AB:50:F1:15
Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Certificate serial: 01967F7D1E9B9E576BDB351B61E4B8FCA342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 03:00:28 +0000
Manifest this update: Tue 29 Apr 2025 03:00:28 +0000
Manifest next update: Wed 30 Apr 2025 03:00:28 +0000
Files and hashes: 1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: 76T+rd2IBe0KZh2BRKmBMqyhmIzuVY8DFl7VS2cqEuw=)
2: pFcInvEW15iKWvoPMx5EVwuCano.roa (hash: nE+nXG0xZdbwspGUmTTrOhLDVrJyA6M8TZL//6qKpZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:1e:9b:9e:57:6b:db:35:1b:61:e4:b8:fc:a3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Validity
Not Before: Apr 29 03:00:28 2025 GMT
Not After : Apr 30 03:00:28 2025 GMT
Subject: CN=934da7c0dbb0bbbcdc421e2ef5ccc8b0ab50f115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:9c:c9:63:35:99:33:a9:5e:3b:03:88:24:
e6:c1:10:5d:4b:77:52:8f:28:fa:03:70:ba:d5:02:
6a:45:19:31:bb:7e:bb:ba:d4:2c:a5:22:ee:cb:90:
2b:43:5b:71:dc:d2:b9:d4:c1:07:ba:92:bd:4a:32:
55:f0:53:bf:15:6d:c4:5c:70:a4:50:7f:8e:6f:ea:
af:8f:bf:db:8e:99:13:24:5c:ae:0f:7c:da:21:f4:
33:32:3a:1c:ab:4d:be:5e:5a:92:ba:b3:06:c9:56:
73:a6:b5:14:11:4d:5e:45:8e:06:e0:c3:98:44:b7:
a5:7f:a6:c4:1f:e2:37:20:c6:a2:f0:0d:cb:dd:42:
ec:aa:b9:50:2f:bb:93:e6:aa:7d:cd:ff:d6:b8:85:
60:41:72:c5:35:c3:78:cb:b0:ad:c0:81:65:dd:36:
2f:a0:b2:17:85:3e:25:35:9c:85:6b:3a:c8:a9:9c:
7b:c0:3a:1e:e0:9b:dd:bc:a6:73:08:68:9c:3b:1d:
90:4b:24:35:4c:7c:ff:75:7e:8a:d0:0a:a2:12:8a:
d8:7b:8d:9b:ba:80:ea:6b:85:35:8c:0b:ac:24:f7:
13:3d:34:ed:fd:2e:57:9e:66:24:fe:d0:86:e8:50:
e5:29:af:c4:5e:74:b3:0a:e8:eb:55:37:b6:92:15:
f8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4D:A7:C0:DB:B0:BB:BC:DC:42:1E:2E:F5:CC:C8:B0:AB:50:F1:15
X509v3 Authority Key Identifier:
keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f5:88:f5:ff:3f:ea:e1:d0:43:98:17:ba:ba:dd:07:ae:43:
78:49:9a:a6:6e:8e:9a:13:b2:ab:e4:ae:1a:25:5d:26:c1:28:
e2:cc:ba:69:cc:ca:10:1f:2f:c5:7a:aa:ba:4e:5f:7a:94:79:
9b:3e:8f:88:d1:11:4b:66:e9:5a:e2:6a:6e:1e:9f:7d:71:ae:
87:f5:89:33:d0:d2:ca:12:df:3f:39:14:af:8c:f1:90:c3:7e:
c0:7f:b0:e4:1b:34:79:f6:73:20:32:9e:c6:9c:7a:7b:96:0f:
e6:2b:b0:b3:bb:7f:fc:93:02:8b:2f:a6:83:e8:58:71:9e:04:
10:14:81:0c:f5:b1:0f:1b:7c:dd:b6:d3:83:e1:db:22:0e:6f:
08:a3:0b:5f:de:11:8e:31:16:4b:92:d3:f1:59:f0:61:b1:00:
78:67:c0:50:46:c8:b2:9d:84:01:fc:d3:f5:d1:6a:61:66:08:
57:61:6e:84:0a:38:3b:9f:51:92:d1:eb:da:30:d2:9e:29:8f:
da:8b:c8:06:b5:04:52:57:07:8c:ec:9b:2a:59:a6:34:f4:89:
2f:ea:c3:ca:00:69:91:a8:1a:37:1b:a6:6e:2d:b0:c3:d1:c6:
d5:70:98:be:98:13:61:fe:b5:52:3c:2e:7e:30:cf:ac:d7:73:
73:3b:53:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:19:29 2025 by rpki-client