Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier: IOpaFDoGpd9Q0ABEthj0H+pums87+UoLJqHjOcOoFGI=
Subject key identifier: 3E:A4:2A:D9:07:A2:30:7C:73:52:32:60:43:D2:15:06:D5:60:43:70
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 01960FB3A11383CE9B0B37F29A0A478B132A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number: 14D9
Signing time: Mon 07 Apr 2025 10:02:32 +0000
Manifest this update: Mon 07 Apr 2025 10:02:32 +0000
Manifest next update: Tue 08 Apr 2025 10:02:32 +0000
Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: SOLmDSq7I04/j1xuPmN5whEjmmZlj8jqatVg25WlmqY=)
2: U_YkWvIbAgSV60H8mUEYqY805XM.roa (hash: rIv2yHmGWREBYz1rPgWWMboLSc3Q207kM2zjs8JlUoo=)
3: muAVUu1aPnEHmAc-r1xMJMX_xwE.roa (hash: t/IG40S9IeJr1JmuDkCemhTExv33uEsQ8ntTYx4HhXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:b3:a1:13:83:ce:9b:0b:37:f2:9a:0a:47:8b:13:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Apr 7 10:02:32 2025 GMT
Not After : Apr 8 10:02:32 2025 GMT
Subject: CN=3ea42ad907a2307c7352326043d21506d5604370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:8e:7d:16:64:0e:d7:6e:60:b1:48:35:0d:
6c:a0:dd:0b:14:cf:80:ab:1d:6f:33:e9:67:1e:d2:
bd:27:36:0b:a9:74:ab:3a:c1:d3:d9:30:de:76:79:
5f:e1:9a:1a:09:e6:40:c2:d9:ab:b8:57:c7:9e:75:
0d:7a:bf:00:1a:33:ed:ca:b8:aa:24:73:fc:5c:8a:
ba:7e:f6:51:48:64:c6:1f:78:2c:db:aa:8c:8d:a5:
a3:38:55:4e:71:d0:15:ce:a8:e6:d3:d7:d4:17:f2:
50:92:94:41:82:cf:5e:0e:a1:ec:b3:03:34:e9:d1:
fe:3b:f6:08:70:82:8d:99:7b:04:d9:6e:ca:46:c2:
49:a9:15:c6:b5:ae:b8:be:98:a5:6b:ae:29:f7:d5:
52:a2:3d:a4:66:01:03:e1:94:d7:5b:b4:f7:30:22:
10:d6:b1:2f:54:5c:ad:c4:77:4b:46:ff:4b:e7:b1:
8c:6c:3d:06:bb:55:df:a8:cd:5e:67:e9:36:cf:cb:
db:5c:b1:a3:42:4f:5b:ed:ff:a1:38:a7:58:20:22:
2b:94:96:00:54:61:76:38:22:d7:84:d0:5e:d9:2c:
1e:0d:ad:7b:fd:03:60:99:11:ff:5a:3a:af:56:63:
1e:3a:61:ab:ea:a4:82:b8:cc:6e:82:88:25:1f:83:
a5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A4:2A:D9:07:A2:30:7C:73:52:32:60:43:D2:15:06:D5:60:43:70
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:81:50:fd:b9:f4:65:1a:ca:61:f8:18:08:c1:bf:e7:55:07:
05:4e:fc:ee:5c:4f:be:d3:f7:1b:31:8d:dd:41:ad:6f:1b:c0:
36:fc:38:b9:64:cd:e2:a0:32:3d:93:fd:cb:cb:56:72:3d:8e:
c8:b3:fa:a3:6e:ab:05:b8:a7:02:8d:86:71:34:86:6c:53:78:
9b:46:29:90:a9:b7:2f:fe:56:d4:3c:22:1f:2d:12:08:a6:fd:
55:11:63:a7:99:c7:88:ed:b9:6d:ae:a6:de:54:18:93:c5:63:
5f:80:71:30:07:07:a3:11:4c:07:4f:eb:92:2b:d0:af:c7:77:
cf:20:42:ae:70:9f:07:78:7c:b0:af:71:ab:d7:1b:9d:09:c7:
d7:74:59:4a:ef:15:a6:bd:70:49:93:6c:c7:ba:ac:ad:e8:f3:
b6:0b:64:15:b3:98:2f:b7:8c:f6:96:ad:f0:8a:d7:03:ef:32:
2d:ed:b5:21:71:0c:ca:b9:96:cd:f8:07:00:8f:3e:ea:68:7c:
77:04:8d:c4:be:c6:31:21:33:1f:b8:0d:8b:26:14:2a:1e:67:
a3:33:f3:c7:38:95:07:b2:e6:64:fa:0a:07:b5:47:f7:bd:95:
8a:ce:4e:4e:76:f9:c1:ae:9a:0c:0e:39:a3:4f:4b:3f:c5:8c:
35:a2:06:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:40 2025 by rpki-client