Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json)
Hash identifier: ZkAwwOR0mbBdgiXcDI08y9OWNH3AVtdHvstRpgQwZnI=
Subject key identifier: 3F:E4:11:49:E3:C3:D6:19:5C:80:C9:E6:BE:8E:96:30:57:5F:92:7B
Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Certificate serial: 01965C15BE7A27667068111A6E5FAF1520F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
Manifest number: 110C
Signing time: Tue 22 Apr 2025 06:00:50 +0000
Manifest this update: Tue 22 Apr 2025 06:00:50 +0000
Manifest next update: Wed 23 Apr 2025 06:00:50 +0000
Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: Cd1MW7S1idkjwMNkXsSzbiD08THfQMDZBTCj54T6cYs=)
2: kgzoK8BF6aDaCA7s2y2-oNomvaU.roa (hash: thv0x/fHxG1HTXAqa1M1DqYuduWmIxV8jm8IAHJKruM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:15:be:7a:27:66:70:68:11:1a:6e:5f:af:15:20:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Validity
Not Before: Apr 22 06:00:50 2025 GMT
Not After : Apr 23 06:00:50 2025 GMT
Subject: CN=3fe41149e3c3d6195c80c9e6be8e9630575f927b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:ee:82:7f:fd:04:6c:3d:f5:d5:68:50:f1:
8c:a7:f0:70:0e:c2:ed:50:2b:16:12:c5:bc:77:7b:
a5:66:5f:52:27:b3:1b:8c:a4:af:97:e7:e0:9d:27:
f4:d7:33:ee:dd:90:6b:79:1a:f7:0c:e7:38:8f:c0:
54:90:8e:2d:ae:5b:58:57:f1:e6:cc:88:bc:49:3d:
d0:bc:49:90:23:00:bb:4f:48:0e:05:29:60:be:c6:
6d:9d:fc:4f:7a:fc:bd:7f:bc:d1:a1:97:2f:ea:92:
f0:54:a5:33:96:4c:4a:09:a2:ca:63:a7:6e:5f:03:
53:c9:86:5e:c2:b5:bd:1e:cd:44:4a:02:16:b4:34:
7d:d5:98:bf:5b:fa:50:a3:69:0b:84:6d:86:bb:55:
c7:ce:55:60:89:9d:34:71:3e:61:33:ef:59:f3:e6:
d0:ee:49:a9:33:ea:53:43:75:59:b4:2b:f3:9a:f4:
85:54:6a:b0:2e:3a:45:f0:07:33:12:e8:d2:e1:33:
47:2d:2c:08:63:38:0d:d0:80:f0:32:67:8c:bd:28:
fb:5e:ed:89:2b:ac:b8:13:ad:22:f7:6c:0e:84:e9:
05:9c:aa:07:80:e6:44:1f:b9:65:d6:80:b8:79:b8:
a2:4e:f3:d5:cc:be:8b:51:02:f3:bb:0d:22:99:77:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E4:11:49:E3:C3:D6:19:5C:80:C9:E6:BE:8E:96:30:57:5F:92:7B
X509v3 Authority Key Identifier:
keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b6:2c:23:7e:40:da:ca:ac:67:3a:11:1a:dd:c7:9d:02:ff:
4b:0f:14:e4:e2:cf:b2:fb:d0:69:05:c2:3c:9c:28:3c:91:fc:
e6:36:bb:d5:26:21:ca:53:a7:02:5b:1e:8f:14:62:55:a3:d7:
4e:6e:45:1a:50:2c:45:81:f8:56:41:28:ea:41:4f:97:a0:7c:
d1:79:3f:eb:11:53:74:c3:e5:cf:c5:cb:75:60:16:5d:51:8e:
85:2c:d9:d1:f0:68:82:8f:3b:68:5f:e9:b8:6e:bf:4f:35:7e:
58:40:9c:d0:a4:1e:02:70:25:35:60:99:c0:3c:a0:1a:7d:5c:
31:a1:25:0c:b7:51:a6:4a:ba:9e:c2:b0:7e:a3:08:51:7d:ae:
bf:ed:b4:d9:87:02:ba:c1:0c:50:2f:6b:c8:f6:14:f3:15:00:
80:d8:c8:64:19:f2:58:d7:e2:72:85:8c:b4:a0:cc:c4:dc:9e:
64:43:92:df:84:21:ee:bf:98:ad:69:8f:34:03:0f:aa:87:c5:
29:1e:10:00:a6:3c:97:0d:8b:b0:ac:82:85:06:c8:72:a9:7f:
42:15:7f:ff:2b:4c:2f:8d:94:95:b4:23:9b:b2:84:8b:73:2a:
df:4b:33:f8:3a:ca:a6:a9:69:df:93:85:bd:df:c4:8e:ef:80:
7b:8f:4b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:47:40 2025 by rpki-client