Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: 71sVJyqDDVLkhyGqhcP7BbqZLlue7n1jghzKJTt0HJc=
Subject key identifier: B1:A1:CF:D8:4E:18:AD:84:DD:22:3E:F4:7F:7E:AF:BC:B6:CA:A0:8C
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 01967CEA1403CD62EE130896BC12EDF4BA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 0940
Signing time: Mon 28 Apr 2025 15:00:37 +0000
Manifest this update: Mon 28 Apr 2025 15:00:37 +0000
Manifest next update: Tue 29 Apr 2025 15:00:37 +0000
Files and hashes: 1: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: p4AqQ4tzyxvajmsfLfgMvlHZHFB4zrOubdHQuvUS51g=)
2: wNJ0eSGK9CrxDXUJzqBGqZt1qoM.roa (hash: VARvN8MLdkZvFPQ8eRPdT6OVeyMm4bYhMp4omxBERho=)
3: yhcAHEKxZVCODOjWlW2pWrhXUoA.roa (hash: BQdy1juZTcnmVxJwEM6u9j9UTa+bDec5eXCStK/qQwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:ea:14:03:cd:62:ee:13:08:96:bc:12:ed:f4:ba:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Apr 28 15:00:37 2025 GMT
Not After : Apr 29 15:00:37 2025 GMT
Subject: CN=b1a1cfd84e18ad84dd223ef47f7eafbcb6caa08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:86:57:60:c0:40:0e:67:d6:fe:aa:d4:29:
98:5d:70:d8:4a:27:99:e7:88:9f:31:d3:5f:c6:4e:
4e:12:c0:80:b4:5e:f2:ea:26:a4:57:cd:aa:a8:ac:
7a:96:0f:91:09:e4:9e:39:7c:6d:2c:22:f7:9e:dd:
c0:2c:24:aa:0e:f0:b7:69:90:15:6a:30:90:9d:31:
02:59:1b:0e:8a:c5:74:e0:ce:e6:81:39:55:79:da:
96:c3:8c:e2:c2:5a:08:d7:9d:28:43:4b:2b:b8:07:
5b:f0:d5:10:15:fa:af:98:94:6f:85:31:25:ec:9d:
9e:49:d2:d1:24:8d:20:e5:c1:e2:3c:33:fa:fc:1d:
9b:f9:bb:28:59:0f:64:ce:be:aa:3a:e5:c7:c5:72:
ee:69:35:e6:ba:67:6d:bd:42:92:8b:94:64:c2:bf:
e0:a2:86:4a:a3:05:44:cb:04:8f:5c:6d:b4:12:61:
83:ed:37:f8:ef:9d:e7:e2:75:a8:cd:33:1b:40:bb:
87:64:65:d0:d1:e7:97:ef:16:17:61:75:cd:8b:24:
0e:43:27:8f:50:3d:dd:22:e5:ed:55:85:c8:42:57:
a8:33:23:28:d2:f3:71:ae:ab:29:21:fd:2c:5b:d6:
13:77:f0:e3:11:09:63:64:e1:7d:2e:08:09:0c:1b:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A1:CF:D8:4E:18:AD:84:DD:22:3E:F4:7F:7E:AF:BC:B6:CA:A0:8C
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8f:2f:74:54:78:10:21:5d:a7:bf:b6:f6:15:48:f1:87:1a:
5f:d3:c4:fe:17:1d:43:8a:46:71:4b:45:84:c9:68:21:0c:96:
25:7d:77:f6:41:8f:6d:26:d4:74:80:80:a8:29:08:39:d7:39:
1e:d4:70:6a:cd:b2:64:83:e8:7b:9a:5e:67:9c:9e:3b:0d:33:
85:ea:9f:72:ec:f2:8a:ea:2f:3f:90:07:54:d8:03:39:e8:d5:
29:97:8c:4c:02:ce:b6:46:bf:7c:83:5e:7a:ad:59:b5:af:8b:
dc:db:3b:2c:56:96:f2:b3:63:2f:1a:74:ac:a9:f8:21:85:ce:
43:1c:d2:7b:0c:17:50:95:be:fe:17:75:e0:dc:72:3a:6b:bc:
d3:b5:97:0d:e3:f0:2b:d4:e3:58:cb:90:61:c8:fb:b9:96:bd:
50:2e:1f:e4:0e:84:bd:d8:bf:e7:dc:20:58:75:50:35:ea:e2:
d8:a3:39:ab:fb:a8:38:34:58:d9:12:d0:dc:92:3b:33:d1:51:
79:21:0e:1d:cf:92:97:d5:87:79:87:14:f5:ce:d5:48:99:e6:
b0:32:f5:0e:f2:4c:03:cb:46:61:b9:bf:13:b4:e8:f0:ff:0e:
95:ac:de:68:43:f9:8b:28:b2:c6:c9:69:e6:59:8a:2a:2b:81:
34:1d:80:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:53:59 2025 by rpki-client