Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: z8Ie39hBez/VfqqercGq469E4zFKSqGvahDUGSSFOrs=
Subject key identifier: 08:D2:82:4E:DD:F6:BB:0C:D8:46:71:75:92:43:7B:B0:D8:74:AB:0B
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 01964DEBD8D387C7A9476748533FFF08E4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 1502
Signing time: Sat 19 Apr 2025 12:00:24 +0000
Manifest this update: Sat 19 Apr 2025 12:00:24 +0000
Manifest next update: Sun 20 Apr 2025 12:00:24 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: n71EQivJ2r8j8JEaCJN2UXPTgx/vDtskZ+W/l0aGfo4=)
2: mC6qnnktw8ocqw8es0LfRst29xw.roa (hash: ppmb2PFwvp6zlS01nCp0DE/SrZFmg3TuLccALf3DpFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:d8:d3:87:c7:a9:47:67:48:53:3f:ff:08:e4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Apr 19 12:00:24 2025 GMT
Not After : Apr 20 12:00:24 2025 GMT
Subject: CN=08d2824eddf6bb0cd846717592437bb0d874ab0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:82:dc:98:97:ee:02:1b:0e:1e:38:1c:d8:
94:84:cd:f6:a7:e3:eb:31:0f:c1:f9:a8:0a:b3:0c:
63:c7:fd:db:aa:2f:de:73:10:5b:d5:1b:29:0e:45:
dd:a0:92:e0:70:85:10:d8:2e:e7:d0:d2:b0:18:5f:
65:67:60:15:4e:86:4d:59:99:40:00:1a:67:43:f5:
49:4d:37:ec:c9:4f:df:c3:c1:8c:81:09:ef:e4:6d:
da:27:18:45:e8:7b:54:9b:a9:fa:dc:6c:0f:e1:de:
e3:a0:04:68:8a:d8:96:9a:4b:13:96:5f:1b:92:82:
9b:d0:5e:dc:52:18:0a:18:35:11:1b:0e:fa:3f:8f:
5f:26:c8:a6:45:4f:ef:a8:e2:ce:5a:57:4d:6b:62:
c3:a6:be:81:0e:9e:62:de:10:b6:92:2a:f6:1e:b0:
fb:76:03:3b:13:54:1e:d7:6b:43:3f:c0:0b:f8:30:
6d:28:d7:99:14:a4:99:cb:e0:34:ee:d5:fb:de:e7:
2a:31:af:69:03:b1:a1:ea:dc:85:02:d3:e5:94:3e:
3d:44:63:b4:f2:3a:11:1e:29:16:dd:81:72:29:cb:
82:55:d6:f0:bf:dd:84:31:7d:c5:ae:ea:c2:5a:8c:
94:47:fc:ea:62:e7:f4:2e:65:a1:ce:97:88:86:60:
23:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D2:82:4E:DD:F6:BB:0C:D8:46:71:75:92:43:7B:B0:D8:74:AB:0B
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4b:ce:2f:99:97:2f:d9:35:c2:a4:2f:97:63:89:b8:ab:c5:
42:f1:a3:8e:37:44:94:0f:9a:4f:e2:65:d1:53:5f:fa:de:cd:
c4:c2:d7:d0:f0:2a:ea:04:4c:6c:d0:b8:bf:9a:cf:e5:a5:db:
79:f9:43:9c:24:f0:f6:71:2e:47:7d:48:c9:e7:66:28:f9:76:
07:a6:eb:32:f2:1b:57:6a:32:d5:38:b0:0c:06:e6:26:a9:ca:
b0:ef:dc:64:09:a0:2a:56:9e:64:68:aa:1a:4b:55:49:81:71:
04:a5:25:0f:2c:89:5f:e6:dc:ca:b3:96:1b:44:93:9f:b7:88:
44:3c:26:34:f1:48:d1:04:43:f1:89:07:ef:60:57:af:f8:a6:
43:33:5f:df:9c:4a:25:36:97:b7:0b:e9:ef:10:0e:74:8d:82:
f8:9b:d5:b0:f3:e0:ab:4c:eb:3c:c2:50:62:68:02:18:c2:c0:
9e:17:f1:ea:73:4f:63:ce:c5:5e:4c:d4:9e:c9:7b:6b:59:9b:
38:38:e4:aa:5f:5a:37:c7:c6:ed:75:71:9e:cb:a0:7f:94:fc:
19:b2:8d:3e:bd:8b:d9:40:1e:2c:da:2f:01:cc:a3:8d:95:0c:
d0:3c:7c:c4:79:e7:9d:cb:1d:a9:aa:a9:ad:c9:2f:53:e7:06:
7c:43:2b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:02:44 2025 by rpki-client