Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
File: Q5p_k_yoCMgtJvv-D94bloz26NM.mft (raw, json)
Hash identifier: wdbRin3IR3O8wCxVqO7A/FkewNnr3vpU9I19UYwgKm8=
Subject key identifier: EB:10:7E:C9:88:5D:06:45:F1:2F:43:25:99:54:6A:14:48:31:0C:5C
Authority key identifier: 43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3
Certificate issuer: /CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
Certificate serial: 01967642FB60652A96EA4CC69C817834AB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
Manifest number: 072F
Signing time: Sun 27 Apr 2025 08:00:23 +0000
Manifest this update: Sun 27 Apr 2025 08:00:23 +0000
Manifest next update: Mon 28 Apr 2025 08:00:23 +0000
Files and hashes: 1: O9UxuLNdjVpPMRVJ8_xamVbi3ck.roa (hash: w7PnuXi3vgOvtTP6oScaXCDqYyS0FwVpkDFtt58ndZ4=)
2: Q5p_k_yoCMgtJvv-D94bloz26NM.crl (hash: XMW7/D4uUHP3aojNSSDdr8fvJbHET9xOkCKxOqXZKvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:fb:60:65:2a:96:ea:4c:c6:9c:81:78:34:ab:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
Validity
Not Before: Apr 27 08:00:23 2025 GMT
Not After : Apr 28 08:00:23 2025 GMT
Subject: CN=eb107ec9885d0645f12f432599546a1448310c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:b8:6d:35:00:cb:2a:12:45:72:bd:f5:c3:
38:a2:69:23:f4:95:f6:db:6e:9a:9c:bf:7b:48:80:
fc:58:b9:67:51:ff:72:89:cc:16:d5:e5:03:51:1a:
00:40:dc:01:e0:af:f2:b8:ad:a6:7f:2b:07:43:c6:
b5:1a:1b:46:2e:e8:33:a3:84:08:02:ae:2e:15:95:
62:c5:95:bf:c9:ad:bb:f2:8e:c2:f6:c9:fe:a5:80:
e0:7f:f8:08:cf:8e:8e:f6:31:71:96:54:95:b0:68:
67:e4:77:9e:4f:47:7b:82:24:dc:0b:e7:bf:95:62:
08:a7:b1:42:df:38:f0:be:42:1b:d5:e2:8a:a0:bf:
c2:b1:fd:1a:3c:a0:8e:ce:83:12:cd:26:b8:88:7c:
80:27:aa:b5:50:29:d8:e3:89:aa:ee:ba:06:a3:50:
1d:46:ae:75:bc:6f:5a:8c:a6:47:06:81:3a:9a:2b:
c7:9a:3e:12:9e:d5:d6:3f:18:79:59:9b:f9:39:96:
36:e3:7f:04:81:a4:dd:02:fd:8c:de:13:ae:45:8e:
37:f5:b2:0a:aa:ee:a7:01:e0:ef:78:e0:f5:fe:32:
46:cd:60:b8:58:67:81:ce:8c:41:a0:a5:a8:f3:c0:
13:12:09:58:aa:41:47:b8:b9:75:1f:d8:2b:df:8f:
42:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:10:7E:C9:88:5D:06:45:F1:2F:43:25:99:54:6A:14:48:31:0C:5C
X509v3 Authority Key Identifier:
keyid:43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:34:b3:5c:9b:37:1d:d7:c6:0a:5e:25:ec:0a:b3:5b:20:47:
09:bb:d9:c7:cd:97:fb:27:bb:75:2f:fa:7c:40:be:e5:f3:76:
89:27:3f:32:b6:97:fa:3c:8a:bb:dd:be:32:20:f8:21:44:e2:
8f:76:4b:82:e1:f6:2d:a3:ed:01:0c:31:37:bb:b7:83:08:be:
53:50:b9:f4:96:0e:be:ba:80:5e:e5:65:d6:58:92:fc:34:fc:
11:9f:2c:5d:d4:75:b3:f6:b8:ef:ba:a0:28:5e:4f:ba:c5:de:
9b:d5:7e:a6:fd:f6:5e:57:d3:2b:24:a9:31:8f:e1:f9:ed:6d:
e3:52:c7:e1:f0:33:7e:90:cf:64:a2:d5:08:ab:07:54:96:16:
86:bb:8d:d3:82:61:ac:75:ae:6d:0c:e9:59:38:7c:dd:40:36:
cf:d9:45:68:27:87:ed:e7:b0:2a:d5:18:45:97:ed:eb:49:b2:
03:c7:85:fa:ee:36:03:cd:05:04:3e:92:1c:e5:2d:7f:e5:2a:
5a:e2:d9:81:db:f3:b0:e1:42:ec:0c:cd:4f:fa:57:b9:65:08:
8e:54:73:6d:32:29:cc:9a:19:08:e5:be:9d:f7:2b:91:0b:12:
c1:25:25:d5:b0:04:ef:0a:ba:a0:a7:53:27:4e:64:7c:00:8c:
42:2a:a8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:55:19 2025 by rpki-client