Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
File: Q-ZRNoOGaONd1VLvDCH76avtE5s.mft (raw, json)
Hash identifier: KizJ0Q/h3vcHo5TvqFbGp5/KskmGdZo/nq2IgtOaERs=
Subject key identifier: 11:03:3E:FB:95:57:FF:32:E6:D1:7C:31:AB:5F:15:7C:EE:C3:69:2A
Authority key identifier: 43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
Certificate issuer: /CN=43e65136838668e35dd552ef0c21fbe9abed139b
Certificate serial: 019656B82ACF1EE4F81BD7B9A7F6A35741A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
Manifest number: D9
Signing time: Mon 21 Apr 2025 05:00:32 +0000
Manifest this update: Mon 21 Apr 2025 05:00:32 +0000
Manifest next update: Tue 22 Apr 2025 05:00:32 +0000
Files and hashes: 1: Q-ZRNoOGaONd1VLvDCH76avtE5s.crl (hash: yGpvgFZdQruGW5q3uSgiIRCke3gqpUvT0be78J1G/ro=)
2: aIJd5q5n1BMhAvDcaHy6hyORixY.roa (hash: g4oLD9R9gouTz6cg2k+J0gSsSi5IKrB+jtKfUgG2zS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:2a:cf:1e:e4:f8:1b:d7:b9:a7:f6:a3:57:41:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e65136838668e35dd552ef0c21fbe9abed139b
Validity
Not Before: Apr 21 05:00:32 2025 GMT
Not After : Apr 22 05:00:32 2025 GMT
Subject: CN=11033efb9557ff32e6d17c31ab5f157ceec3692a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:c2:d2:8e:d5:24:66:47:2a:aa:ee:2d:2a:
88:e3:da:ca:35:86:04:ee:36:c5:9a:72:bf:44:76:
2b:4f:8d:1d:17:63:99:67:b5:4f:d1:8e:d1:46:6b:
22:0c:e4:95:05:88:39:28:35:28:db:6a:6c:9c:c7:
ac:d5:ad:f5:43:fc:c6:e3:ad:b0:7c:1c:31:c2:17:
8e:a7:53:e2:51:aa:a7:b8:17:98:87:c4:cd:4f:59:
53:05:41:a8:fa:30:02:02:8a:a2:3e:1d:c9:7f:bf:
d5:b0:e7:c7:d4:8b:20:6a:98:95:09:29:b8:4c:4c:
d7:10:70:c1:f4:94:40:37:78:2e:f9:8b:b8:48:a7:
4f:c8:25:5e:68:41:a3:51:20:69:7d:a0:8e:a1:c9:
23:8f:f1:52:7c:d7:ce:ab:1e:be:4f:cd:7b:96:c6:
91:c2:52:91:3d:42:3d:0a:ee:df:92:bb:21:22:39:
78:c4:7f:9a:f1:ba:e7:50:02:bc:d8:4f:7a:a3:fd:
a7:88:b9:78:56:82:ae:6c:1f:c6:fe:fd:00:0b:d3:
d6:5f:fd:3c:29:24:9d:72:fa:c1:b1:30:78:92:f9:
b8:b7:0e:c8:15:01:29:8b:fa:65:91:19:cc:de:ed:
c9:70:3d:60:9d:36:b6:75:33:8f:cf:7f:ba:e4:98:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:03:3E:FB:95:57:FF:32:E6:D1:7C:31:AB:5F:15:7C:EE:C3:69:2A
X509v3 Authority Key Identifier:
keyid:43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:85:9d:be:ed:00:85:ed:65:05:00:5b:c3:98:21:3b:f1:63:
f1:f1:4e:ae:37:42:d7:16:35:ab:d6:48:20:b1:a4:7f:32:1d:
11:c6:97:0c:4d:e9:bd:90:9d:df:b5:3e:2d:9a:4d:a3:11:12:
ab:e4:40:ee:fd:dc:94:a3:4f:46:51:7a:e0:6e:0c:24:6f:2e:
69:89:ce:36:b5:07:66:9a:cf:be:9b:02:63:c1:c3:9d:1f:f9:
0e:56:f4:59:ec:0e:87:8e:6d:56:81:a2:0d:01:e2:38:73:53:
86:69:06:73:0d:d2:4d:bc:68:1f:28:14:cb:a6:15:fa:72:c1:
8d:38:cb:73:66:4c:c5:7c:e9:94:85:c5:d9:b5:10:17:56:6e:
3c:2d:0b:cd:80:13:ed:68:2f:bb:1e:38:2d:3e:2c:9d:0d:99:
78:e9:f8:d7:e1:be:fb:de:20:86:56:0d:92:80:df:93:ed:9b:
3d:51:09:57:e9:0f:98:20:da:9f:88:df:b9:67:61:1c:60:23:
04:28:be:e5:b5:32:79:b7:89:3f:6d:9c:a0:29:22:3e:34:27:
34:14:12:fa:c2:12:f8:95:d0:40:2a:4e:4a:03:3e:1d:28:1c:
0c:be:4c:ac:46:78:08:0b:a1:c9:20:a2:f4:a8:59:f9:17:85:
42:84:c3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:26 2025 by rpki-client