Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
File: 1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json)
Hash identifier: hEDCp8YBmtAXf1wvoXNqyfUKLQNCOPMuc39YfpmgNSk=
Subject key identifier: 8C:47:71:B0:96:94:E3:F0:33:DA:AC:C1:F7:94:A3:A1:31:47:DD:A0
Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
Certificate issuer: /CN=d50628b01ea4477183cbff92db7a0c58145195a4
Certificate serial: 01968021B428BE433FA766542F3581163E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
Manifest number: 09BA
Signing time: Tue 29 Apr 2025 06:00:14 +0000
Manifest this update: Tue 29 Apr 2025 06:00:14 +0000
Manifest next update: Wed 30 Apr 2025 06:00:14 +0000
Files and hashes: 1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: bvZ7tfgxtO5bFWK5lq5kLfB8Qgta5BA8I8cBY5DFxuU=)
2: _pIpWC2mISR6dq-6G_9xF8Tberk.roa (hash: AVYabGQyAC/dt95JDDKLIXfkPwJWf47FBbAQTadMiJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:b4:28:be:43:3f:a7:66:54:2f:35:81:16:3e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4
Validity
Not Before: Apr 29 06:00:14 2025 GMT
Not After : Apr 30 06:00:14 2025 GMT
Subject: CN=8c4771b09694e3f033daacc1f794a3a13147dda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:3a:95:cb:cc:4f:44:4d:a9:7b:58:5b:99:
e6:70:8b:f4:fc:28:11:0f:ac:9a:08:f7:75:e1:15:
b2:6e:b1:7c:05:4c:c6:8b:30:a6:e1:0f:9f:be:17:
60:07:39:ed:d2:4a:f5:60:1a:da:72:65:0a:35:ad:
44:da:6c:30:e4:40:61:96:47:ed:c1:de:35:91:d0:
0e:2d:7f:00:e1:ef:44:e5:1e:52:17:9a:81:ef:b5:
bc:2c:d9:91:a7:45:62:2b:30:56:c4:87:74:0a:c3:
02:94:c9:36:26:db:c0:49:9a:e4:57:02:38:bd:4d:
86:38:aa:1f:83:2d:45:15:0e:0d:ab:88:c4:dd:47:
06:ad:24:db:62:6a:d0:20:0c:c1:0a:05:72:25:55:
b8:d3:f6:dd:94:19:bb:52:97:1d:98:29:09:96:03:
f5:6a:1f:57:e6:69:13:20:19:7b:b6:b3:01:e7:3a:
1d:46:31:42:b0:f4:31:e3:36:da:5e:75:4e:98:40:
80:09:d4:46:b3:ac:60:f7:00:c1:1e:ed:12:8d:a2:
81:7b:2a:9d:32:70:28:be:89:c0:76:c0:06:4a:79:
fe:0a:83:92:8c:f9:c1:a6:67:66:9f:cc:f5:05:1c:
f7:7b:ca:c4:33:e2:fa:27:8f:ba:9b:10:86:4a:c2:
91:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:47:71:B0:96:94:E3:F0:33:DA:AC:C1:F7:94:A3:A1:31:47:DD:A0
X509v3 Authority Key Identifier:
keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:af:b3:05:87:f4:cb:ac:d5:53:97:0a:4b:7e:aa:c8:e0:db:
d7:94:44:1e:8e:67:ab:52:76:03:e8:8f:db:23:47:65:21:f5:
cb:21:7b:b5:f1:66:8b:72:3b:f9:95:51:e5:b2:41:3a:6d:6b:
41:39:f0:7b:76:3c:4d:a2:b2:b2:50:69:f0:a4:d9:3c:01:5b:
42:0b:a5:16:1c:b7:ca:84:f1:a8:28:50:fe:11:1a:37:e3:2d:
64:c3:ce:68:e0:0f:e2:17:8e:52:9f:e6:47:ba:b8:a3:79:f6:
98:27:6f:cf:4d:98:03:27:ae:3e:e8:84:ca:98:e4:c7:97:22:
5b:95:8c:03:3e:16:f7:45:cd:4b:17:49:4b:ee:11:d5:82:39:
df:87:3a:67:49:22:3b:5f:1a:32:c0:e8:ef:ec:3b:54:7a:fe:
a7:04:26:55:f0:4b:ba:51:e7:40:b0:a2:dd:f1:45:cf:4c:80:
6f:73:33:76:17:05:0b:96:5e:5a:0c:77:27:21:93:a6:70:26:
0f:18:f1:34:7e:b8:3f:af:2c:70:a2:16:a3:cf:12:29:95:bf:
56:b3:31:2a:33:e5:b3:7e:8b:5c:56:97:d4:3e:b8:9c:c2:72:
42:2c:e1:a0:0b:99:d9:6e:a8:bd:93:c9:df:15:86:dc:d7:18:
b0:82:2d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:31:09 2025 by rpki-client