Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
File: Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft (raw, json)
Hash identifier: zsURZMbrjKowSWGpCZDgsMnypc15UDjEo5BBQ2N9EMA=
Subject key identifier: FC:5E:77:21:94:1D:BF:96:97:74:6D:6B:E8:AD:1A:09:1A:5D:AB:1F
Authority key identifier: 43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
Certificate issuer: /CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Certificate serial: 01965E3AAAEFC73E87130C36110420D9346D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
Manifest number: 0F87
Signing time: Tue 22 Apr 2025 16:00:25 +0000
Manifest this update: Tue 22 Apr 2025 16:00:25 +0000
Manifest next update: Wed 23 Apr 2025 16:00:25 +0000
Files and hashes: 1: Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl (hash: HCBo/nlY4TjKgBlEAI6GT/6kcEdRqYy9wFn+VW9LVaQ=)
2: TrfKChON90CRCXVKGdWD_lFGLCU.roa (hash: GFMm+kc1nJBxOyEj3z/q6lfVZK3yETv8yRHloXoAgN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:aa:ef:c7:3e:87:13:0c:36:11:04:20:d9:34:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Validity
Not Before: Apr 22 16:00:25 2025 GMT
Not After : Apr 23 16:00:25 2025 GMT
Subject: CN=fc5e7721941dbf9697746d6be8ad1a091a5dab1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:c1:17:28:b0:65:52:d2:21:a2:0f:a2:0b:
ee:af:c5:53:01:b2:6b:cc:22:27:2b:6b:cf:97:86:
12:94:cd:fb:06:c3:15:98:3e:a8:26:26:f4:ce:02:
28:df:c0:fe:ce:f7:bc:80:ee:7e:a2:30:15:7a:4e:
1e:7f:06:38:5d:83:4a:fb:89:92:6d:d8:4c:ac:d0:
5b:86:ae:53:16:f0:11:27:93:73:ed:e6:cc:6c:09:
16:b0:cc:41:36:db:9c:00:30:21:65:4b:b0:2d:71:
dc:10:29:41:90:f9:73:ab:d6:11:60:c2:e0:2b:05:
68:22:38:11:e0:2f:9d:5b:34:a9:85:af:45:2c:35:
1e:0c:d6:4e:4c:10:17:3a:cd:29:79:5e:85:32:98:
4c:50:98:7b:5a:09:b0:e2:5b:31:42:61:26:36:dd:
18:05:ae:25:3b:c1:e0:db:11:4a:37:11:55:e2:1e:
04:09:06:36:dd:86:47:5a:00:8d:c9:71:49:b5:ae:
75:64:b0:c5:92:bd:78:b1:8f:8f:80:4f:44:cb:63:
75:f7:cb:c3:0c:7c:37:2c:18:40:d2:d5:c6:e3:b5:
35:96:f9:e5:ed:25:60:eb:5b:c7:ad:9c:08:f6:91:
73:58:34:ca:92:49:81:ee:0e:23:e1:33:04:4d:11:
cc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5E:77:21:94:1D:BF:96:97:74:6D:6B:E8:AD:1A:09:1A:5D:AB:1F
X509v3 Authority Key Identifier:
keyid:43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:35:0e:76:11:f5:07:e0:59:b4:5d:dc:04:1a:7f:1e:1c:cc:
a8:af:47:31:79:f0:26:91:81:af:b7:70:7d:62:cf:e2:8f:1a:
fc:cc:72:c6:98:32:ce:14:e6:7e:71:9a:77:9b:6a:0d:f3:4d:
6f:55:28:43:bb:f2:2a:45:a4:ac:5a:7c:f7:fb:e8:d7:52:90:
9f:cc:8e:77:a2:0c:d6:00:14:cf:14:db:a1:e6:c1:91:81:53:
93:46:92:e9:6d:27:86:8d:bb:56:a5:60:f9:d0:85:f9:69:46:
77:03:0f:c5:b5:a0:61:dc:65:60:2b:49:ca:d8:20:a1:8d:dd:
af:0e:62:d0:de:fc:d3:6e:ec:0a:46:15:20:cb:ea:ca:51:bd:
74:f2:22:19:bc:07:a3:41:ca:be:e3:3a:42:aa:f7:94:0e:de:
54:23:a0:aa:19:79:0f:42:99:d8:7a:91:45:fa:a7:04:57:67:
ee:1c:46:ee:3e:9b:22:9d:17:a9:4c:6a:6d:d4:ca:8d:08:00:
4e:f0:c6:2e:4e:7b:f2:48:5a:8e:cb:c4:e5:43:e9:06:0b:0d:
d0:61:3b:e7:00:dd:da:24:41:ce:89:70:7c:5c:2e:6b:b3:5a:
e5:31:33:e6:be:14:c1:ca:77:b3:a1:ae:4b:84:dd:22:c4:40:
55:2a:b5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:52:25 2025 by rpki-client