Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier: fyLsu5rfB3zH6v1VaXfGAtUz1wKwxeRYVlWIDJh48fA=
Subject key identifier: 80:36:DE:3E:A8:28:1F:F3:87:77:93:8F:5D:15:C8:54:C9:16:57:1B
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial: 01967E6A58BAE6E622EB8EAC5D76891DEA82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number: 06D8
Signing time: Mon 28 Apr 2025 22:00:20 +0000
Manifest this update: Mon 28 Apr 2025 22:00:20 +0000
Manifest next update: Tue 29 Apr 2025 22:00:20 +0000
Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: AQLF7jZc1hPf25Fhq7g3yQnsE5K3oLFp0Q8xbiQOaqo=)
2: z1aZ7-bmH6l6J7mLCP5moL6leU0.roa (hash: yKL3bhklKR6G8Kxo3AuOxdxqmVoJuUJSKeF/iJ4ql/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:58:ba:e6:e6:22:eb:8e:ac:5d:76:89:1d:ea:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Validity
Not Before: Apr 28 22:00:20 2025 GMT
Not After : Apr 29 22:00:20 2025 GMT
Subject: CN=8036de3ea8281ff38777938f5d15c854c916571b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:b6:55:91:5d:7e:4d:51:98:f3:6b:ba:c3:
6f:ab:6b:4f:53:1d:ed:e3:41:c0:17:9b:6b:a7:e6:
b0:01:11:c6:1e:65:a3:11:b4:f8:35:97:69:83:56:
8b:f8:be:f6:35:ce:85:e9:26:1e:94:52:c5:59:7e:
96:b6:27:ee:d0:fa:98:cc:7b:4c:41:75:6f:57:f1:
d3:0f:44:2c:f1:57:70:05:40:ba:2f:b8:50:42:c0:
45:2d:b2:42:92:71:5c:eb:24:c3:ba:e6:59:48:90:
7c:a0:0b:b2:f4:fd:63:40:79:15:de:17:8b:ae:26:
61:13:f7:d3:98:0e:65:d1:7c:90:85:fc:dc:72:93:
69:9d:7b:2b:48:67:10:e2:05:30:c6:b8:60:a5:e9:
5e:0f:37:87:97:95:6a:81:fd:41:c5:ca:00:b5:bd:
34:28:40:90:5d:4e:ea:a4:5f:c6:dd:99:90:83:ce:
67:c5:82:d5:78:01:d3:7d:b7:cf:ca:1e:b3:40:93:
f4:20:7a:cb:9f:d6:bc:da:a6:f9:10:05:e8:be:4d:
8a:a5:fb:7c:f0:1d:ba:0c:e5:8f:ac:ff:e3:65:22:
0c:e0:0e:35:0e:97:e4:70:6e:ec:b4:5c:3e:6b:d0:
bc:87:93:b0:6d:f0:d8:71:bd:58:91:ee:0c:bc:ef:
f0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:36:DE:3E:A8:28:1F:F3:87:77:93:8F:5D:15:C8:54:C9:16:57:1B
X509v3 Authority Key Identifier:
keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7a:2f:5b:27:28:d1:c9:f9:32:52:4a:9d:f2:13:75:f7:5c:
ae:76:87:17:a4:80:cd:1c:8e:4f:70:83:cb:e6:c4:d8:45:e0:
6e:07:74:dd:fb:e1:bd:49:5f:70:1c:cf:5a:52:a2:61:bf:17:
3a:0b:06:1d:bb:63:84:45:6b:2c:4f:fc:e8:15:bd:79:18:d6:
ff:dc:af:84:ac:ed:b6:6a:9e:6a:c4:d9:82:f4:2b:b8:99:04:
e5:4f:27:61:d8:b8:6a:cf:a6:9f:5c:ad:15:79:aa:b3:d3:4e:
0f:e9:fc:81:e9:dc:3e:6b:7b:11:17:4a:fd:9e:a8:a1:2a:3b:
98:8e:2a:1b:a5:41:32:f1:77:75:fc:dc:fd:03:25:a4:66:5d:
c5:25:f0:7e:b6:1a:d7:d4:b8:2d:ca:f0:ca:41:f2:c0:c9:71:
38:ba:ac:56:03:a3:25:bc:6d:ac:10:97:33:67:73:1f:18:3b:
18:fd:60:46:66:10:b5:ff:24:ea:a4:19:83:c7:08:83:bb:63:
75:72:62:94:8a:99:66:b6:5f:3c:6d:b5:de:f0:0e:d9:06:dd:
43:4d:5a:df:f1:4d:b3:83:97:cc:02:45:91:2d:fc:58:3e:40:
d0:6b:c4:20:8e:3b:f4:81:b7:ea:34:a7:70:9a:40:23:c3:44:
85:31:fb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:34:14 2025 by rpki-client