Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier: QrybNcXMXnsNhRXAhYSNmUDFWc4OyWQMAhOj76CbXcw=
Subject key identifier: 77:4E:67:13:A5:44:89:74:75:ED:32:4A:71:31:26:62:AF:B3:46:18
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 01964D475292CA80EE6E5E11952B9C0ABB21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number: 073F
Signing time: Sat 19 Apr 2025 09:00:41 +0000
Manifest this update: Sat 19 Apr 2025 09:00:41 +0000
Manifest next update: Sun 20 Apr 2025 09:00:41 +0000
Files and hashes: 1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: hr49nt+XoYl5DOTiGjivRqwRVveEkkJvcwXZI0OgoJE=)
2: HUjG5wlXIs_S_8BTLmPoqHtpE_8.roa (hash: n0+Gv3Td1KV66vO7s/EA+fLLoF/hxd3hZyfSfNcw3NA=)
3: IosBMyCwhJpK9xWG1hvvXMqJa78.roa (hash: IYmZiNnkFwPxUpuPBI4TiPPkO8hQgA4aXIJpQwDNzpw=)
4: UNVV8q9mxHzj40ukB0dOp3qehFE.roa (hash: BXbVtWFAEKhtBygy5e3mBPkEaoCOBDieBmzKaOr8eAc=)
5: WJoZ3Cyd9hGNWW7azIwgdgzOVS4.roa (hash: 4VZTAKZBwZm9hthBlF7ANdxLjE6ybka+xW9+Dectll0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:52:92:ca:80:ee:6e:5e:11:95:2b:9c:0a:bb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Apr 19 09:00:41 2025 GMT
Not After : Apr 20 09:00:41 2025 GMT
Subject: CN=774e6713a544897475ed324a71312662afb34618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9e:b5:2e:e7:94:db:7b:c8:8f:01:05:42:86:
55:93:2e:29:93:a6:3b:6a:1c:14:c5:a3:ff:5c:dd:
ac:32:84:b4:69:d8:5e:8f:5e:13:c8:e5:54:43:0e:
c3:7e:b5:bb:4d:10:23:2a:71:40:c7:2b:36:ed:dd:
ef:d9:61:16:3f:cb:c9:e9:ed:13:ce:f8:00:ec:7c:
79:fa:80:a6:ea:93:83:5f:0a:e4:b9:e7:a4:46:a7:
f9:e2:58:ee:c1:ed:a4:2a:72:51:ba:ac:76:d3:bc:
0d:dd:68:d7:0c:40:a2:7e:e5:a8:22:d5:3f:10:e8:
70:39:6a:5e:63:21:c9:4f:90:23:e9:a8:1c:2a:bd:
8c:5a:73:26:7e:bb:08:67:d7:79:a9:97:10:a8:7e:
ef:87:a7:31:bc:13:0e:00:84:08:ac:84:d3:26:8a:
f9:7f:cd:ed:1c:f8:1d:0e:74:0b:e3:0e:19:57:79:
29:e1:67:a7:7f:5c:1e:78:10:fc:08:8a:3a:07:0b:
dd:98:60:53:8d:66:14:7c:a1:15:d8:7c:35:a1:9b:
a2:4d:2b:67:4e:41:7f:c5:8c:a2:e3:ec:2e:6b:a3:
3f:9f:11:6d:a2:4c:41:90:51:bb:2d:74:bc:83:12:
35:e6:a6:33:7e:a9:f4:57:9e:b4:80:99:8e:9f:04:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4E:67:13:A5:44:89:74:75:ED:32:4A:71:31:26:62:AF:B3:46:18
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d3:86:ee:fe:f9:4a:5b:fa:ff:e1:98:f9:7a:57:ef:25:08:
4f:1f:58:19:79:c5:79:fc:2f:6d:70:1e:7f:35:d1:5c:ce:68:
a0:b6:ac:97:f0:62:19:72:77:7e:d8:86:ec:dc:1a:2f:70:06:
d0:ab:6d:53:62:b1:79:dc:2e:1e:ba:f4:64:ad:0d:3b:ae:0d:
d8:1a:43:e4:89:de:a1:3b:ef:1d:de:be:09:72:12:43:b5:d7:
3d:2c:00:1b:2b:46:90:50:51:12:b1:61:77:06:23:e7:9a:e0:
ca:04:46:da:3f:1b:45:8c:57:af:65:fe:21:ee:3a:f0:f5:21:
6a:da:b0:33:d4:bd:30:f9:f9:f5:39:13:55:fd:25:b9:c4:a0:
3e:f7:5b:81:29:c7:8d:08:85:0a:6c:0a:e6:1a:25:90:09:60:
ee:1f:c7:2f:71:fc:5c:01:d2:ce:65:79:8b:09:79:a0:32:6b:
3c:49:0f:d1:2b:5c:c6:29:3f:77:e7:c0:e2:eb:64:82:66:74:
e6:d4:92:70:65:b5:34:81:87:cc:28:af:ab:94:50:bc:87:fe:
5c:75:5e:1b:6a:b4:42:c1:a2:ad:86:fe:fb:42:12:88:30:7a:
c8:fd:24:38:73:99:bf:77:4b:a9:4a:8d:00:af:c5:74:aa:f4:
1b:b8:84:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:28:02 2025 by rpki-client