Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
File: QFphtYwdUt5SLgQQCcv80fflK3w.mft (raw, json)
Hash identifier: h20g+2sg3lWl1zsUlnLcdnwFagkk/tQKqdW8ktnpLq4=
Subject key identifier: 27:07:E9:54:C0:61:7A:CA:EC:98:51:BA:6D:41:3E:53:BF:40:D1:9E
Authority key identifier: 40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C
Certificate issuer: /CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
Certificate serial: 019657261A5341FD77B353A04B7450867A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
Manifest number: 0FF9
Signing time: Mon 21 Apr 2025 07:00:36 +0000
Manifest this update: Mon 21 Apr 2025 07:00:36 +0000
Manifest next update: Tue 22 Apr 2025 07:00:36 +0000
Files and hashes: 1: QFphtYwdUt5SLgQQCcv80fflK3w.crl (hash: FyT5zASi6yGW/hcBlCzcPhxNLjRf9hY5oJklzQS2TJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:1a:53:41:fd:77:b3:53:a0:4b:74:50:86:7a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
Validity
Not Before: Apr 21 07:00:36 2025 GMT
Not After : Apr 22 07:00:36 2025 GMT
Subject: CN=2707e954c0617acaec9851ba6d413e53bf40d19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:b5:df:bd:de:47:a4:e6:64:ee:65:62:7e:
c6:d7:09:48:d1:2c:05:1f:f5:19:1e:cf:57:cc:30:
85:34:05:d4:e7:1a:00:32:13:26:d4:47:e3:80:a4:
6c:48:08:9c:cb:83:ae:38:e6:71:d5:d6:e8:72:9a:
e9:11:a3:00:61:ad:0a:0f:20:38:70:ff:25:87:09:
32:10:f2:5a:9a:ab:74:5b:ce:5e:58:4a:e6:62:9f:
71:74:fe:92:bb:67:83:e4:b0:14:bb:c4:b1:8a:88:
f7:5d:67:0e:d3:b7:df:04:ca:03:cd:bd:68:25:fb:
05:77:ca:6d:ee:fd:a3:a9:e7:14:a1:2a:b1:92:06:
2b:c1:cc:21:f8:64:aa:b4:6b:f9:41:ab:78:95:be:
44:15:04:9a:65:b5:7d:e0:13:ce:1c:ea:76:16:c8:
3f:4a:6b:05:58:08:bb:4c:e2:7d:26:d4:e4:f5:fc:
6b:71:e0:24:f6:62:9e:f2:54:53:5a:c3:47:28:d8:
d7:78:15:c5:b7:38:8f:92:33:40:4f:6a:58:e9:ca:
fc:74:39:53:64:c5:b2:62:cc:3a:bb:c3:a5:4c:07:
ae:0e:2c:5c:d3:8a:77:18:b5:17:b7:62:a5:8a:d2:
fe:4f:ec:ed:bb:b9:43:63:a1:55:31:84:56:9e:dd:
d7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:07:E9:54:C0:61:7A:CA:EC:98:51:BA:6D:41:3E:53:BF:40:D1:9E
X509v3 Authority Key Identifier:
keyid:40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6c:2d:fb:2a:8a:b8:0a:15:5e:8f:c4:4c:b9:07:96:ab:76:
c0:39:76:db:7b:2a:7a:ac:c1:42:a9:d2:1e:19:36:7a:8c:9d:
1b:92:17:d0:1b:72:72:0b:b7:d6:75:88:97:8b:34:54:0c:b7:
e9:9d:a2:34:f3:33:84:59:7e:a4:85:f5:e7:4d:cc:40:e9:5f:
81:3e:6a:bc:e7:91:e1:81:ae:55:10:04:68:12:57:71:5c:70:
ad:d5:b5:90:03:d1:ac:4a:ad:c8:73:e9:0a:39:03:55:ce:91:
c6:50:9a:b5:6f:90:40:65:e4:58:c2:f3:36:51:d8:0f:9f:69:
91:92:00:70:70:49:24:f0:02:d1:51:5b:1c:0f:51:c3:16:fd:
32:63:86:e5:f5:3b:98:32:8e:1b:32:cc:84:8e:84:a2:6d:bb:
6f:f7:1e:8a:6c:b2:d6:97:9f:0e:57:17:03:ea:74:b3:78:95:
f7:99:98:4d:a9:3d:43:dc:5f:4b:0f:57:e3:e6:60:e3:a9:c0:
35:85:42:3d:84:1c:fb:f8:da:97:e2:c6:2f:4b:5a:9b:2a:b8:
48:fd:bc:4b:e1:e1:17:0b:12:63:ff:14:a7:d6:3b:e7:67:e2:
7c:8e:f0:7d:b6:db:51:27:65:63:d1:b2:ce:91:24:19:40:2d:
de:7c:35:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:39 2025 by rpki-client