Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json)
Hash identifier: Q13a/Z9gZovyq4LldGRu5e6j6IBYltaQqc56TPPR/6E=
Subject key identifier: 4C:EF:1D:17:91:84:4A:9F:FE:75:CE:DE:4F:21:D4:AE:E5:0C:6E:14
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 0196748C09F207400146BB39EF7E752B5C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
Manifest number: 074E
Signing time: Sun 27 Apr 2025 00:00:56 +0000
Manifest this update: Sun 27 Apr 2025 00:00:56 +0000
Manifest next update: Mon 28 Apr 2025 00:00:56 +0000
Files and hashes: 1: W0dMAnO6aF0Yx6O8KQpDYw42KzU.roa (hash: hYKeaXsd87cAB8WiR9boDz94K2aYD6Hd49egFLgXH3M=)
2: aC_hdK5CbbWAdY5r2a47t0lmkv0.roa (hash: OC741thwNdbktYi4ltIPLb7G2UMVurZWZKeSAWhRUXM=)
3: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: KMJbY4KRqMlcD4ujLbzsNpK9k23UFO6l4dsWdfKnS3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:09:f2:07:40:01:46:bb:39:ef:7e:75:2b:5c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: Apr 27 00:00:56 2025 GMT
Not After : Apr 28 00:00:56 2025 GMT
Subject: CN=4cef1d1791844a9ffe75cede4f21d4aee50c6e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:31:ec:42:58:d3:1f:cd:07:99:ab:13:4c:0c:
44:6d:5c:7b:e3:aa:1a:c2:76:ec:74:7a:3e:0e:28:
59:1a:79:7b:60:7f:2b:c1:26:ae:c8:ef:c2:74:3b:
46:00:8a:f5:a4:02:56:e0:63:e4:a9:47:2c:69:2e:
56:fe:1b:82:90:ca:2e:63:87:70:89:64:68:ad:b8:
49:da:78:5e:be:0b:17:3e:9d:d3:bf:7c:2d:05:36:
8b:14:01:fa:68:99:f0:55:4f:05:b5:c9:c4:84:1c:
63:2a:d5:a4:6c:3d:30:10:22:2d:91:96:45:00:18:
ae:8c:b0:13:41:70:bd:32:ac:9c:22:cf:88:5d:33:
d7:54:61:a6:32:57:18:6e:23:6a:7a:00:ff:a8:51:
5b:3b:92:cc:7c:e5:e1:2e:12:8e:a7:8f:8c:4d:6d:
5d:cd:43:6c:cc:4d:36:94:10:1a:00:54:27:7e:b6:
35:ab:56:bb:16:b2:e0:dc:b3:96:93:38:de:a4:95:
d1:0e:da:e4:36:42:58:1c:08:f5:5e:f5:bb:16:c8:
2b:53:3a:d8:5b:12:0b:9c:40:1d:2a:80:9e:55:c3:
38:3c:98:09:bf:57:11:01:37:4a:cb:5e:b2:d4:54:
d8:a0:ec:ea:5c:39:d5:55:60:76:35:fa:d5:c3:12:
14:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EF:1D:17:91:84:4A:9F:FE:75:CE:DE:4F:21:D4:AE:E5:0C:6E:14
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a7:39:0e:e2:0d:b9:42:63:d7:83:38:60:0c:81:b9:e7:3c:
82:8c:21:d1:63:db:41:c3:11:59:a2:09:8a:a5:25:2c:92:c1:
41:0b:0d:33:08:b1:81:00:22:0b:4b:73:1f:42:0b:f8:17:97:
c9:07:b2:fe:a3:93:ac:8d:bd:e3:a1:f5:e4:e6:71:f3:26:a1:
93:18:3c:ff:ff:eb:30:7b:62:38:31:df:a7:01:55:c0:55:af:
fd:2a:04:0a:01:4d:ff:66:2d:1e:35:ea:5a:c8:94:d6:b7:2e:
50:50:da:22:a8:55:9c:fd:8b:a5:c5:5a:f7:9d:95:b8:53:f0:
d3:c3:69:23:67:29:71:71:a8:12:b4:17:a4:f7:1f:e3:71:7c:
9c:0e:5a:b2:fd:3c:2e:30:a6:e0:93:bd:4f:1f:9e:4d:5f:67:
c5:45:8f:cf:84:2a:d1:96:e8:e7:68:f0:6a:cf:33:b9:55:c6:
6a:bc:42:52:cc:36:0b:da:b5:4c:cf:eb:f4:e8:b5:44:63:43:
51:a9:b0:fa:6e:37:52:e5:9a:28:2a:8f:88:6a:eb:cc:12:b2:
86:cc:e8:c9:0d:1b:1a:b6:c3:40:64:30:f6:db:02:1f:ef:0c:
f2:5b:92:a0:9a:5e:74:40:b1:66:a8:f0:3c:38:51:19:8a:74:
ea:05:68:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:41 2025 by rpki-client