Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
File: p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft (raw, json)
Hash identifier: QYw9iw9fHDsf8m+fGCiNe6kjODbeYt5PYcgKXMfYGDE=
Subject key identifier: B3:2A:2E:35:CB:47:08:79:4C:10:B2:DE:78:13:18:76:79:69:3D:75
Authority key identifier: A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
Certificate issuer: /CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Certificate serial: 019678689083CB47EF6B21E71F350C26CA1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
Manifest number: 11DE
Signing time: Sun 27 Apr 2025 18:00:40 +0000
Manifest this update: Sun 27 Apr 2025 18:00:40 +0000
Manifest next update: Mon 28 Apr 2025 18:00:40 +0000
Files and hashes: 1: AGh_BXwDaFnqdr1rluMLMPMOrnM.roa (hash: L7VSHEAFfvwnZGbHuhPcAH6Mmh4M0FtFsSBsZ0VnfV0=)
2: p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl (hash: e/D9DFn/6GIA51AtJSNDeSaF2t2ID2YWTHsuDe1BW7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:90:83:cb:47:ef:6b:21:e7:1f:35:0c:26:ca:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Validity
Not Before: Apr 27 18:00:40 2025 GMT
Not After : Apr 28 18:00:40 2025 GMT
Subject: CN=b32a2e35cb4708794c10b2de7813187679693d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:a8:19:97:53:8e:1a:fe:83:01:13:b1:db:
c3:fb:9f:11:01:c3:e5:dc:41:40:49:a7:be:b6:0a:
94:a9:68:04:3b:73:c2:f6:79:06:78:99:79:d4:77:
5a:2d:73:26:df:29:9f:a9:da:fa:e1:f3:e7:6f:5d:
f8:bf:35:62:7a:a0:cb:b9:d9:9b:fd:e1:e0:ac:a3:
84:bb:0b:57:72:4d:59:8c:3c:16:f2:af:8c:e6:c0:
95:55:04:b4:0a:39:18:6c:f5:3a:bf:e5:d4:44:96:
73:ac:c1:e2:5f:ab:49:85:72:14:0b:ff:b3:bb:34:
b2:c9:92:59:3e:c0:35:28:f4:dc:e4:c2:51:de:d5:
e0:c4:4f:e5:e8:0f:43:32:75:98:79:88:da:d6:24:
1a:0f:1f:d7:7d:c3:25:f6:d4:37:92:0a:af:03:68:
26:40:7c:d1:50:88:fc:cc:93:0b:c9:1b:f0:b3:7f:
1a:e3:99:29:37:fa:69:07:61:3f:04:ad:f6:6b:4e:
c1:96:a3:a5:c1:e2:93:e4:4d:1c:36:ab:6f:f5:b8:
a1:09:cd:cd:6a:82:e5:b5:34:3f:79:73:95:e8:7d:
94:b1:c1:1e:f6:36:6e:c4:e2:57:e2:61:7b:4b:99:
ee:ff:25:3f:87:e9:f9:35:e8:9f:da:2f:56:f5:72:
0b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2A:2E:35:CB:47:08:79:4C:10:B2:DE:78:13:18:76:79:69:3D:75
X509v3 Authority Key Identifier:
keyid:A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3f:f5:17:a7:10:b0:0a:61:73:8a:f7:1b:dd:9c:13:24:42:
05:c9:3f:23:ab:de:74:68:49:bd:03:fe:c0:8d:18:f2:77:1e:
8a:dd:c7:64:21:f5:41:fc:fc:2b:7f:c1:d1:03:58:aa:7c:51:
92:fb:c0:a4:d0:98:f5:f7:32:66:a7:61:41:72:12:b7:68:c6:
e7:0b:b7:5a:2b:a6:a2:96:26:9a:f7:98:94:cc:08:f9:41:f0:
7a:cc:45:7a:ff:02:fa:6b:e7:aa:63:ee:e6:d3:d2:c1:50:09:
06:20:cb:a7:c1:2a:97:27:e9:9d:33:11:46:2a:a1:ac:67:bc:
7f:d8:a2:79:8a:37:d3:bc:e9:29:3f:f5:23:a3:c5:d8:ad:67:
2e:06:28:f5:e2:0e:62:f7:04:2f:cf:0c:a8:14:e4:a2:35:d0:
15:ba:0f:02:64:a3:cd:0d:32:82:c2:59:e1:06:1f:a2:51:9c:
1e:62:96:88:bc:de:55:02:ee:de:9a:5e:ad:52:c2:d6:b1:dc:
bd:55:ca:20:1d:e7:af:41:07:06:c6:8e:ad:b7:80:9b:68:29:
ce:f7:ad:29:25:37:39:95:2d:ec:c2:aa:af:02:53:c6:03:ef:
de:d7:47:3d:2e:fd:d3:d6:a1:71:bd:e6:01:32:f5:13:0d:57:
49:75:e3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:20:05 2025 by rpki-client