Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json)
Hash identifier: 0T+hfpKfH9r9LUs3SgySmDplCbYcNRhMH4a0bEKs4gQ=
Subject key identifier: EC:C3:CF:A2:D1:FD:23:B3:34:C3:F7:61:26:A4:CC:13:29:38:FC:7F
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial: 0196451FF4C45EE291792E6854ED49C42935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
Manifest number: 0286
Signing time: Thu 17 Apr 2025 19:00:44 +0000
Manifest this update: Thu 17 Apr 2025 19:00:44 +0000
Manifest next update: Fri 18 Apr 2025 19:00:44 +0000
Files and hashes: 1: _aJQ6oyDSsBM9CQBM0bENVTAfYk.roa (hash: TGsiDKL9QYKUEyLtO8kxrwWDCHZz/h4CK165UgZMbZA=)
2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: Z3jK8B5rrSGt48OBptlFnK7pI+/RDlrr0SfrqhXCcVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:f4:c4:5e:e2:91:79:2e:68:54:ed:49:c4:29:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Validity
Not Before: Apr 17 19:00:44 2025 GMT
Not After : Apr 18 19:00:44 2025 GMT
Subject: CN=ecc3cfa2d1fd23b334c3f76126a4cc132938fc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:51:e5:32:1a:f5:8d:41:5e:ea:a5:ca:7a:
5e:84:53:75:6c:8e:a8:dd:41:25:76:5e:f6:ae:08:
9f:31:04:0d:0d:c0:56:2f:82:cd:ce:b5:c4:51:2e:
d5:79:7c:87:76:96:c0:88:25:e3:18:d7:70:0a:da:
ec:5d:2e:8c:c1:5a:6c:82:ce:cc:18:e2:5e:b5:e4:
38:2f:61:ed:bc:58:c8:2a:76:51:4b:55:42:b4:61:
54:0f:88:51:54:02:90:7a:82:a6:a5:a2:c6:a8:0b:
75:0e:87:00:e2:02:e0:b9:89:a1:1a:2f:5c:6c:45:
72:b7:1e:7f:a3:3c:cb:c9:be:a9:09:14:e6:a8:9c:
b4:1f:b6:63:69:58:6c:b3:16:6b:25:32:89:59:2a:
a6:77:80:47:6f:49:dc:ff:91:1e:a4:2c:db:ae:8b:
b0:d3:74:22:51:6d:e4:b5:d3:3d:b3:ae:b9:21:85:
d4:6d:eb:4f:36:df:79:b0:a0:31:8f:0a:36:f5:8b:
2a:06:73:bc:18:89:b1:41:c3:9d:75:d9:c5:f5:e4:
7a:03:a7:74:9f:0c:6e:26:04:f3:e2:62:91:9d:55:
a8:57:24:59:9d:7a:05:e5:9f:b9:67:98:4e:cb:3d:
19:35:98:3b:37:2a:ae:3a:f0:80:ee:59:66:14:ed:
31:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C3:CF:A2:D1:FD:23:B3:34:C3:F7:61:26:A4:CC:13:29:38:FC:7F
X509v3 Authority Key Identifier:
keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:83:db:f8:5a:68:86:04:de:ad:50:7b:2d:d1:9d:be:4e:00:
b0:3f:f9:60:37:3a:97:59:5c:4a:00:69:24:e2:35:9b:25:e5:
57:b0:91:9d:51:c6:9e:12:a4:00:75:d7:e6:08:41:52:26:7d:
50:fd:3f:e5:bd:ef:cc:22:da:19:f1:d6:44:fd:15:91:f0:10:
52:c4:44:77:70:0b:bf:24:96:51:8a:f8:57:da:dc:ba:35:da:
8a:27:ef:b2:74:7f:93:cd:01:ec:d6:e5:98:3b:13:c3:3b:cc:
d6:1b:f7:4a:12:d4:6f:92:14:2a:c5:b0:6b:59:45:51:57:a5:
29:bc:cb:ce:4c:d6:a1:43:1f:f4:34:a2:30:8b:34:ac:c7:c2:
12:21:aa:fc:14:45:82:df:a3:0c:67:1f:9f:f9:ca:e1:3d:3d:
61:b3:ed:3d:af:46:a6:d7:5c:b2:c2:84:f3:22:7e:9b:3d:e4:
9c:06:f6:00:93:ca:62:dc:9b:1e:74:e4:d3:12:90:44:9b:76:
09:d1:3e:bb:cc:dc:23:1d:62:4e:15:e4:26:c4:f3:9b:d6:02:
1c:59:4a:ba:90:4b:db:c2:16:25:ba:36:9e:43:ff:0e:de:75:
09:26:67:3a:bb:85:1f:c4:99:07:d2:b9:20:15:28:14:1c:45:
3e:97:7f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:44:30 2025 by rpki-client