Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
File: QmRGpKHLVrP3b-a03vq6072bUgc.mft (raw, json)
Hash identifier: tqqJDtT5MAHJtQ6QWzscuQsV6+P24Ayei53BM+flMPQ=
Subject key identifier: 23:98:96:11:23:90:19:29:2A:62:EA:67:79:00:97:69:1D:FE:86:3B
Authority key identifier: 42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
Certificate issuer: /CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Certificate serial: 01964FA3A3C0BEE0E112751E03138B3B8A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
Manifest number: 0A69
Signing time: Sat 19 Apr 2025 20:00:46 +0000
Manifest this update: Sat 19 Apr 2025 20:00:46 +0000
Manifest next update: Sun 20 Apr 2025 20:00:46 +0000
Files and hashes: 1: QmRGpKHLVrP3b-a03vq6072bUgc.crl (hash: boU10gBhj3bmGpQ2hG0z7H1uX4FHvmVUbPGSYcJV+Xo=)
2: fFstVPrb_3K-jl7g58_b4ihHTfY.roa (hash: sDN8YMAsFynzsUb+KhP7tCE7b4tst1zO6K3vmsmzSlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:a3:c0:be:e0:e1:12:75:1e:03:13:8b:3b:8a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Validity
Not Before: Apr 19 20:00:46 2025 GMT
Not After : Apr 20 20:00:46 2025 GMT
Subject: CN=23989611239019292a62ea67790097691dfe863b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c7:c0:de:29:05:15:9b:11:b1:54:0f:50:b9:
07:b4:43:78:bd:7a:11:5f:c1:b7:af:32:ea:17:af:
9f:57:00:20:e9:60:0a:aa:14:e8:90:ce:f6:29:75:
97:5a:f6:22:f3:6b:74:44:7b:f1:dd:1c:da:8d:a8:
63:d4:d2:35:36:60:d9:f8:cb:4b:24:61:e2:23:f4:
dd:94:f2:c4:c9:98:d4:d4:40:06:4a:13:18:60:0d:
75:ae:e9:6e:03:f7:18:44:da:35:e8:6d:6f:9f:0a:
13:b5:77:80:27:a0:d5:cc:e2:d9:58:6a:74:6c:16:
83:2e:a7:3c:d9:ee:52:fb:7d:9e:76:4e:e8:33:7d:
99:d8:ca:13:b0:c3:9a:e4:a0:e2:0a:96:06:6a:be:
d7:c1:61:f0:8f:3d:9c:1b:9d:e6:39:9c:9c:3a:1e:
a9:05:f3:f7:cb:d5:c8:4a:9f:0f:a3:e1:50:26:17:
a9:d9:4e:a7:60:d3:cb:59:2d:92:11:3d:e0:6f:d4:
d2:44:9c:ed:2c:2e:3a:e0:b3:45:26:e5:18:ef:b8:
5e:98:c7:ea:6b:8f:dd:3d:5c:65:05:fa:0b:e8:7b:
b3:1e:a1:06:00:ab:74:83:20:13:ea:00:2a:f3:d7:
a5:33:32:28:11:6c:2d:f4:dc:32:91:97:b8:10:03:
d1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:98:96:11:23:90:19:29:2A:62:EA:67:79:00:97:69:1D:FE:86:3B
X509v3 Authority Key Identifier:
keyid:42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1a:78:6f:d7:d4:71:fc:56:e9:74:30:07:7c:fd:d7:f1:b7:
9d:1b:94:09:f2:96:b2:6e:ae:65:91:99:da:1f:f1:01:5a:99:
22:58:5f:6f:bc:d0:88:f5:88:c4:91:20:70:7a:9d:ee:3f:b7:
59:10:e2:aa:ed:3b:b3:92:3a:4d:8c:76:32:d4:6d:9c:f5:d5:
a2:6c:0b:9b:b9:10:59:a3:8c:e9:ba:2a:bf:d4:fb:9e:f3:cb:
13:5f:52:17:04:03:35:ed:7c:61:fe:a5:6b:50:3b:d4:b0:bc:
a1:e3:b0:8e:fe:fa:a5:1f:ba:f4:17:aa:e2:04:90:7a:8f:26:
ab:19:f9:a7:24:c5:61:ac:c8:62:1a:8a:4f:d0:3c:69:4d:45:
40:bb:f0:89:ae:e3:88:1b:7c:02:06:ee:b8:25:02:e0:9b:23:
a9:da:06:00:75:a7:58:9a:13:66:e5:67:e5:a5:59:92:27:42:
23:0e:66:33:3e:21:44:86:64:6b:b5:44:84:ec:70:6b:24:3d:
34:9b:94:a4:69:b9:35:7b:8c:c7:65:ac:c5:50:8c:6e:c8:80:
23:dc:00:51:20:02:6a:0a:ad:94:91:ba:34:7c:91:f5:c2:d2:
6d:0e:fe:b4:9a:65:c6:51:f8:69:2d:d0:ce:71:1a:af:82:06:
d9:5c:86:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:49:52 2025 by rpki-client