Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier: UPQGgxa6EPaOdPE5WRRccoLLM0aG6XLlWCotAHFOykM=
Subject key identifier: 28:F8:31:FF:11:48:AF:D0:25:1A:A5:57:86:E0:7C:9E:CF:40:3F:0F
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 01967755E8CE12CF5496074D7453F3E11AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number: 13A3
Signing time: Sun 27 Apr 2025 13:00:40 +0000
Manifest this update: Sun 27 Apr 2025 13:00:40 +0000
Manifest next update: Mon 28 Apr 2025 13:00:40 +0000
Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: 6CxMv42jLvPrYn7asLhHgHqNGTF1OFS3yufgcr9+kas=)
2: TmgqBpglNVZfQ6dNI0QikqOaRh0.roa (hash: G5eisvL1sfpBh2+KIjiXidcLDo6qfpZS+YH09MKDa08=)
3: quAevwWcT98bf654qLWm8mJZnuo.roa (hash: Cjjwh3AHZnP9cZfkJf8nJGuosyVJj9NPURda/Hfp5vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:e8:ce:12:cf:54:96:07:4d:74:53:f3:e1:1a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: Apr 27 13:00:40 2025 GMT
Not After : Apr 28 13:00:40 2025 GMT
Subject: CN=28f831ff1148afd0251aa55786e07c9ecf403f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:79:e1:ba:d8:48:e0:75:80:3b:86:cf:48:de:
a0:55:cd:1d:44:6b:29:af:66:59:4b:d2:3b:74:f2:
67:29:46:d9:31:b8:75:ce:6f:36:f4:b3:ba:58:9c:
43:1a:4f:33:f4:e8:87:c4:2b:22:23:84:53:82:fe:
b5:73:39:fb:e7:b6:d8:bf:00:ec:55:df:12:e3:36:
df:c7:56:0e:b7:29:15:07:3b:80:0e:49:a9:33:20:
e2:75:5d:2c:0e:2d:1c:40:d7:3a:75:a3:22:96:96:
e7:ec:c8:7a:99:8b:8d:1c:39:10:60:d4:77:44:7f:
85:fe:97:a4:9d:91:ba:2d:d1:6f:68:53:26:98:3a:
53:e7:df:a5:46:df:1f:b3:a5:e5:95:3c:ba:e9:a2:
cf:7e:99:1c:b6:16:f7:4c:7a:18:2e:05:4f:5f:ed:
c3:10:38:3e:2a:7a:2d:bb:a5:6b:9b:14:27:97:88:
5c:b2:08:8b:3b:23:21:4a:ad:1b:54:6f:89:c2:ac:
61:5c:1b:b3:92:cf:fe:82:ad:63:84:95:d5:15:e8:
d5:cb:16:8c:57:45:72:15:db:b1:a4:ad:42:ae:6a:
ea:fc:e0:d8:66:83:1f:b1:20:5f:33:32:bb:2d:1a:
dc:3f:cb:b0:2a:76:1b:ab:84:f6:b8:93:2c:dd:80:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F8:31:FF:11:48:AF:D0:25:1A:A5:57:86:E0:7C:9E:CF:40:3F:0F
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:aa:d5:c4:12:19:f6:9a:6a:5a:1f:ed:53:28:6f:9d:b9:9d:
01:9c:b9:6e:6e:0a:97:d1:1b:45:3f:f6:5b:92:6c:73:84:9f:
70:7f:fd:04:05:5a:37:ff:36:09:b5:0b:d0:e8:91:02:a8:72:
fd:e7:86:18:1c:fa:14:5a:29:53:72:7d:8f:87:dd:86:fa:e8:
ef:0a:e2:84:6c:1e:9a:af:df:d5:e9:9e:cf:12:a6:8e:40:4b:
d8:cb:a6:68:86:1a:bd:ba:c2:12:49:a6:80:2d:75:65:b0:1a:
ca:6e:be:ac:f8:59:e5:fe:e0:d9:3c:c6:34:58:02:71:da:c0:
c1:1c:cc:1d:4f:ad:cb:36:e2:d2:d8:95:0c:03:62:b7:df:70:
e1:3e:2b:d9:65:24:66:f3:09:33:63:b1:13:91:d1:2e:ab:7d:
25:f9:5f:bb:28:4f:81:b0:c3:ba:3d:ad:d0:05:6d:01:55:a9:
39:f0:cb:17:89:27:4d:c1:02:e3:55:ac:74:d5:fb:35:a0:9e:
c0:11:e7:90:bb:65:15:34:89:df:1b:d5:f3:51:85:6f:59:83:
40:15:98:5a:d1:1a:f0:72:4f:f4:73:b1:c3:5b:8b:d8:9c:99:
ac:f7:2e:05:b2:b5:8a:98:20:bd:e1:88:77:40:63:3a:13:71:
45:cb:30:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:22:24 2025 by rpki-client