Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
File: QpXD7wDP_s4vcbYZkcbG09pJwRA.mft (raw, json)
Hash identifier: Y5LXequ41Z7zO/wyVaK4n1Lm9foK6HrcrEKGW79xj20=
Subject key identifier: 4B:AB:78:61:66:09:57:F1:91:99:2D:79:6E:F8:25:6A:40:47:DD:32
Authority key identifier: 42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
Certificate issuer: /CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Certificate serial: 01963F547339B4F04E069D67F07803C7C111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
Manifest number: 01DC
Signing time: Wed 16 Apr 2025 16:00:21 +0000
Manifest this update: Wed 16 Apr 2025 16:00:21 +0000
Manifest next update: Thu 17 Apr 2025 16:00:21 +0000
Files and hashes: 1: QpXD7wDP_s4vcbYZkcbG09pJwRA.crl (hash: AMh+WvNcBYYqALTEp+OtyVtC98YnysxQO8Ea75sBvr8=)
2: SGxwV5wEplv2xVzvW6jMMH0Hi4k.roa (hash: p0OjWToBEfnkzQw/yjz+AdE3+kwiUg0q1pmwBXRywUk=)
3: eC0FosjTUlbZcnWZVWIH359Lcd8.roa (hash: qDWdvtB5VIYnR+iPBmUfW1ayU92Br+j2BjK1vo1fUg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:73:39:b4:f0:4e:06:9d:67:f0:78:03:c7:c1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Validity
Not Before: Apr 16 16:00:21 2025 GMT
Not After : Apr 17 16:00:21 2025 GMT
Subject: CN=4bab7861660957f191992d796ef8256a4047dd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:79:7c:fb:2f:34:2f:1f:ac:fb:e6:e3:d0:34:
7b:08:f0:63:ce:97:1e:69:0a:87:b2:58:82:a0:ce:
a3:19:2c:ca:e9:30:59:5d:09:96:b9:76:73:7a:fe:
a1:dc:eb:2a:bb:7c:98:92:6c:49:3b:de:d6:75:5e:
c0:2a:ef:58:8c:aa:cf:eb:98:57:c2:fe:51:fc:81:
b0:20:fe:b3:ad:c7:42:92:d9:87:52:19:80:d4:b4:
cc:30:39:c1:2d:2a:8d:26:f4:a6:40:2f:61:47:99:
53:73:f5:a4:35:3c:a4:4d:50:f6:55:49:ff:16:22:
83:5b:fe:cd:c5:24:62:0b:95:87:10:8d:7e:27:63:
ff:25:5e:67:69:e8:d1:b2:4b:82:8b:ab:4e:df:09:
22:6e:a4:3d:c6:dd:74:96:39:ed:ff:4c:76:d6:dc:
12:a9:a6:cd:aa:3e:53:d8:83:e7:e5:90:e0:0b:f7:
c0:16:ae:46:06:ff:f8:3d:4e:d6:92:13:9e:d7:67:
67:bb:f7:6d:d5:fe:e0:73:4b:a7:d3:57:e4:e2:60:
56:a9:04:53:f1:33:60:cb:09:b9:13:eb:21:ee:f1:
97:3c:1e:1e:26:89:e9:58:45:86:fa:50:e4:36:87:
f9:9d:c7:2e:b5:d7:42:3a:90:62:bb:73:38:9d:84:
ac:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AB:78:61:66:09:57:F1:91:99:2D:79:6E:F8:25:6A:40:47:DD:32
X509v3 Authority Key Identifier:
keyid:42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e6:1f:4b:e6:e4:13:01:c1:b3:f6:23:fc:13:8d:87:77:10:
3a:7c:12:cf:e8:65:86:58:5a:ae:f7:c1:f0:0d:28:aa:9b:52:
47:cc:de:ab:5d:7b:5f:f3:58:b3:93:0f:8d:fd:f4:ba:8c:a7:
15:4d:7d:19:69:1e:09:1c:bb:f9:1a:fc:b8:da:fd:c8:69:7c:
fd:3d:55:43:37:75:50:2c:4f:ac:c3:b0:fc:6b:ea:44:49:ed:
fb:8c:87:d7:dd:ac:5c:1a:39:ea:91:23:71:21:72:c7:e0:1b:
f6:6f:47:b1:02:d1:72:fb:3b:01:9b:40:55:b7:b1:f3:0c:1e:
98:b1:5d:db:8e:ae:a1:9e:82:2d:69:fe:a9:dc:44:2b:65:70:
02:2e:fb:53:2c:da:30:5b:75:10:af:f0:81:a0:54:d7:90:a5:
19:c1:24:dc:6c:06:fe:a5:b4:7b:9a:27:f6:fa:89:1b:95:e7:
c1:52:63:85:15:c5:46:d3:9b:ad:6c:ad:55:5e:ba:42:39:4b:
db:88:84:5d:33:ce:33:60:78:56:32:3d:1b:b1:a3:bd:23:d1:
7d:50:85:06:bc:41:59:bb:dd:e1:a4:ce:c4:64:fa:72:80:6e:
13:85:c8:c5:5e:41:5f:50:b1:8e:d8:f8:f2:93:3c:8c:51:e5:
cd:bd:32:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:08:56 2025 by rpki-client