Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
File: cqPGykNevb-W__pMXZjkYAgo9xI.mft (raw, json)
Hash identifier: xfmW2QzpsZ3iq57Lh/QVLN7nLeetAh3HDruoTGAg5nE=
Subject key identifier: 98:FD:F5:FD:B4:EB:FC:53:E4:4D:EA:F3:44:A5:67:FA:37:4A:80:43
Authority key identifier: 72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
Certificate issuer: /CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Certificate serial: 01965870011351C0B1DD9DA6D50DF2334922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
Manifest number: 1042
Signing time: Mon 21 Apr 2025 13:00:57 +0000
Manifest this update: Mon 21 Apr 2025 13:00:57 +0000
Manifest next update: Tue 22 Apr 2025 13:00:57 +0000
Files and hashes: 1: QyiciSZUfA8bsg20fCYi0TNFfDg.roa (hash: nzxPGRU8Smq/P38KhFAc/j16WQcASyHCTt9cYC5aCls=)
2: cqPGykNevb-W__pMXZjkYAgo9xI.crl (hash: BWJ50DxTRjx1NUbKsWt//2R6P3MOI6bkUbDg2R6yLGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:70:01:13:51:c0:b1:dd:9d:a6:d5:0d:f2:33:49:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Validity
Not Before: Apr 21 13:00:57 2025 GMT
Not After : Apr 22 13:00:57 2025 GMT
Subject: CN=98fdf5fdb4ebfc53e44deaf344a567fa374a8043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:bd:74:4c:3a:f6:d4:e3:44:a8:fa:fd:06:
18:c5:44:dc:38:29:9a:21:1b:71:72:95:49:b0:0d:
1d:7d:9c:cc:d4:4a:20:a2:41:32:e8:37:00:18:68:
ee:eb:42:03:10:29:0e:1a:c8:ae:34:a0:6f:58:21:
9a:58:d5:ec:6d:11:b6:ea:d4:8d:4c:21:c3:fc:85:
04:fb:df:7e:a7:c8:72:45:fd:49:dc:3e:70:99:d8:
a8:19:9c:a4:f5:12:3f:83:0b:4f:4e:e9:23:43:a5:
d1:12:db:00:01:a1:ff:b9:ca:1a:7a:6c:7c:52:d5:
e7:da:bc:64:b4:90:a4:a9:63:9a:a3:0f:39:66:90:
ea:4f:9a:4e:d3:d7:fd:0d:b4:14:09:9d:5a:46:6b:
fb:b1:8f:2d:f3:b0:59:19:d1:57:fa:c5:8e:88:1e:
fd:d2:6d:c2:bb:19:a3:85:41:5e:aa:eb:6f:35:8e:
8f:54:57:fb:aa:4d:d2:7a:a3:79:97:6d:e2:3c:ee:
33:46:13:a9:df:03:d3:8c:35:90:8e:bc:8f:16:27:
f4:43:c5:0f:84:91:3c:ee:97:4c:0a:f7:0b:fe:09:
6d:a1:a2:95:2c:ac:ca:e4:a2:b5:18:4f:cf:90:27:
cd:51:c7:c2:f8:9f:ee:48:76:f9:50:d2:21:58:85:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FD:F5:FD:B4:EB:FC:53:E4:4D:EA:F3:44:A5:67:FA:37:4A:80:43
X509v3 Authority Key Identifier:
keyid:72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4e:1b:7d:4f:51:ed:ad:81:8b:75:18:d1:a6:56:74:d9:95:
be:ea:63:51:1d:c6:52:12:6a:2b:7b:d2:51:9d:36:3d:5f:da:
c7:c3:9a:2e:a6:d6:37:86:6e:bf:57:03:e1:be:6e:9a:46:78:
26:9f:81:26:9b:95:e7:3a:04:37:a0:b4:eb:c5:04:aa:55:0a:
45:88:68:a6:06:3b:53:44:3d:83:73:6e:dc:d5:85:8a:c5:bd:
c4:68:4b:af:7a:c6:20:79:a2:e4:e3:87:61:d0:62:08:22:e1:
76:be:df:a4:7d:b3:9a:d1:56:c1:59:ee:a9:5f:59:bb:16:ca:
c5:87:7e:3e:bd:62:7a:63:e4:75:55:ec:a6:9b:f6:04:f1:56:
c9:9c:e1:9d:93:49:41:6e:69:70:51:2b:85:2d:37:fb:f8:bd:
bb:2b:fd:da:e6:b6:03:ef:f8:e9:ab:a1:c4:f7:4d:10:ef:e3:
84:4d:4c:e8:66:47:19:ef:37:6f:99:97:4f:51:58:0d:9b:bb:
b2:34:5a:7d:d9:b7:1e:40:f5:66:4e:ef:c2:a9:6d:4c:60:08:
8d:ea:ca:bc:f2:46:d7:29:d2:2b:ed:f7:66:59:0e:da:bf:2e:
4e:2e:95:65:0e:52:a1:aa:4c:bf:48:6c:b1:24:7e:a4:38:fa:
0e:f0:ee:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:22:45 2025 by rpki-client