Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
File: 2QqBMQKSV7_3YURI5va1A8Ersp0.mft (raw, json)
Hash identifier: XRg3BcsILq/ES9qtArWDhRdW1OoIF7kiBQqesygP8sY=
Subject key identifier: 6F:60:BF:5D:B1:68:75:99:16:28:F5:10:F8:E9:07:4B:9F:86:6E:CF
Authority key identifier: D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D
Certificate issuer: /CN=d90a8131029257bff7614448e6f6b503c12bb29d
Certificate serial: 0196542514DFBD1F1D67D546A5708CDB7A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
Manifest number: 01CE
Signing time: Sun 20 Apr 2025 17:00:38 +0000
Manifest this update: Sun 20 Apr 2025 17:00:38 +0000
Manifest next update: Mon 21 Apr 2025 17:00:38 +0000
Files and hashes: 1: 2QqBMQKSV7_3YURI5va1A8Ersp0.crl (hash: WoSGmmnmjR8xCjEAMFzSW3pwcZzmnHl27g3cgJa+1C8=)
2: ktw-FkrMXPNswM8IraWY-5p7J3I.roa (hash: jzXeR9Bv5fkU8m0kPMqZ57dXqdxvNx+7MlrJIZfIQC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:14:df:bd:1f:1d:67:d5:46:a5:70:8c:db:7a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90a8131029257bff7614448e6f6b503c12bb29d
Validity
Not Before: Apr 20 17:00:38 2025 GMT
Not After : Apr 21 17:00:38 2025 GMT
Subject: CN=6f60bf5db16875991628f510f8e9074b9f866ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dc:02:4e:db:d1:42:26:40:48:2a:02:f9:7a:
55:9b:15:cd:ca:9e:19:eb:06:0f:35:67:bc:1d:a1:
e8:55:9a:81:7c:0a:b5:a0:47:4a:b8:92:d1:7b:9e:
da:48:ea:10:5e:52:9a:c1:cc:53:e2:3d:33:0d:43:
16:af:5e:0d:ae:d0:de:a3:c1:b3:42:21:5c:28:3b:
fa:6c:1c:f3:23:03:2c:da:c1:63:3c:16:e8:4b:b7:
51:f6:c2:ca:cc:f9:4e:df:91:13:c6:9a:ac:6e:a0:
07:a4:62:7b:41:be:99:dc:18:d9:d3:11:b2:94:1a:
09:66:c1:ab:41:f6:bf:bf:22:c4:b8:e1:14:22:67:
90:eb:a3:48:2f:3d:12:c0:31:a7:2e:bd:f4:00:22:
cc:d3:5b:7a:b8:e7:74:c7:da:ba:ba:00:2c:e3:b3:
9f:80:da:ee:57:1f:4d:bf:79:60:26:0c:d2:9b:c1:
6a:5b:90:1f:7e:bd:42:bd:8c:e4:fb:8c:74:0a:56:
1c:c5:b4:65:da:a5:83:ed:4f:12:35:02:59:12:cc:
b0:40:ce:88:d6:60:3b:2a:0b:69:a0:04:55:22:77:
bc:ae:4f:f0:fb:f9:4e:97:38:d9:e8:5f:ac:17:84:
e2:21:fa:ac:c7:c5:c2:98:d9:29:61:ff:1c:ee:97:
95:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:60:BF:5D:B1:68:75:99:16:28:F5:10:F8:E9:07:4B:9F:86:6E:CF
X509v3 Authority Key Identifier:
keyid:D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:de:31:27:ed:0d:a8:ba:dd:67:85:9e:89:b3:8e:e6:b9:1a:
ed:16:ea:45:fb:0e:b6:e8:30:8c:5c:ae:c7:98:1f:34:7d:04:
bb:6e:8b:be:4e:2a:68:43:9e:81:8f:71:0c:92:80:6b:9e:d7:
03:96:4d:00:4b:9f:fd:a1:2b:31:52:96:30:44:1b:51:b7:6b:
9a:20:93:ca:e9:43:eb:21:37:3d:96:f4:75:d1:c7:96:e8:e8:
77:80:67:e7:33:e6:2f:a7:7b:e6:74:cb:be:f0:2f:ce:80:b3:
19:17:ed:12:91:53:07:f7:65:30:bf:51:9e:0e:51:42:e8:50:
f5:03:cb:5e:3b:48:7a:31:aa:01:7a:0c:24:38:9d:a9:1a:98:
60:de:77:09:40:a0:a7:d8:7a:93:45:15:ce:d5:66:a0:d3:53:
99:94:ae:24:5c:ee:78:ec:73:fc:3d:31:c8:85:41:9a:cb:a6:
1a:e8:50:9a:f9:b7:6a:91:fa:0b:20:ba:a5:e0:05:1b:85:92:
6a:c5:57:39:ed:15:85:ae:0d:0e:92:54:0e:d9:70:30:36:66:
63:1e:6c:7b:1c:99:cd:84:b2:cf:87:66:74:f8:0b:59:e1:64:
87:a3:e0:6e:8c:28:51:e9:0c:ae:c3:f4:a1:50:0f:f8:03:04:
6d:84:9b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:27:45 2025 by rpki-client