Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
File: Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft (raw, json)
Hash identifier: Sl8o5M2q6J3HuoiJ7ALsfKlsVAwa8AqsWOZfGqOqj6Y=
Subject key identifier: FF:BD:1B:84:CE:04:5E:36:BA:1C:E6:37:59:DF:13:9F:33:B7:EE:AB
Authority key identifier: 43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
Certificate issuer: /CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Certificate serial: 0196515B5F6B6372C98102D1F91200FCEFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
Manifest number: 04BA
Signing time: Sun 20 Apr 2025 04:01:04 +0000
Manifest this update: Sun 20 Apr 2025 04:01:04 +0000
Manifest next update: Mon 21 Apr 2025 04:01:04 +0000
Files and hashes: 1: Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl (hash: uGIXVXkAtO+JVAMjfSOVCv+NdoSFUMz/TIAR0zxkk2U=)
2: fiGpYaULVSGddPa40kO95drtEI4.roa (hash: hSGW2kYFHKKsMMUOHTMd5Mel06lDgF+QorDCIkRAx3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:5f:6b:63:72:c9:81:02:d1:f9:12:00:fc:ef:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Validity
Not Before: Apr 20 04:01:04 2025 GMT
Not After : Apr 21 04:01:04 2025 GMT
Subject: CN=ffbd1b84ce045e36ba1ce63759df139f33b7eeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:7e:4d:a2:71:8d:29:58:46:24:eb:fe:d3:
ae:f9:b3:89:04:5e:c3:76:65:6e:3d:ce:16:f7:8d:
e0:31:6e:3b:d2:a6:7c:84:64:2a:09:40:c2:a4:d0:
88:4a:32:ac:42:e7:a2:7b:f2:b7:bb:1c:0d:72:77:
a7:51:93:87:a3:be:3c:6c:e7:ff:f5:7a:bf:82:ae:
22:50:88:2d:93:ed:d9:b9:be:b4:e8:fa:98:8a:f2:
26:91:94:df:bd:2c:7c:10:8a:46:e4:e7:e7:8b:ce:
a1:bc:b7:5b:75:83:03:69:0c:fd:8e:f8:88:37:b9:
b9:3e:38:cd:79:bf:01:4a:31:29:68:ed:a4:e7:9c:
d2:68:53:da:11:c2:66:a1:56:61:54:fc:9c:0b:cd:
e7:77:cc:88:1d:ce:fd:f2:7a:5e:1b:e8:12:f6:b5:
cd:60:f7:6a:df:4e:10:ef:dc:47:46:33:63:40:18:
87:e8:d3:d7:ee:ec:f5:76:aa:0b:65:44:d1:2b:ab:
55:31:10:40:24:78:b4:09:04:f7:f5:32:d4:ee:0c:
17:f5:b1:66:9c:90:33:fc:da:ec:32:0e:9e:e3:7e:
86:8b:bd:d5:ff:3d:6f:f0:1f:f7:e7:6d:a1:6e:c9:
5f:f6:15:19:20:46:6d:ff:ec:b0:9e:52:fc:38:02:
2b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BD:1B:84:CE:04:5E:36:BA:1C:E6:37:59:DF:13:9F:33:B7:EE:AB
X509v3 Authority Key Identifier:
keyid:43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:31:87:34:aa:38:97:0d:1b:da:99:1c:5e:d9:00:2a:95:b5:
72:bc:60:77:c8:49:85:79:b6:d2:6d:ac:99:8d:f6:92:1f:f8:
89:35:4a:b5:7f:37:d8:93:d6:87:d2:68:7b:a2:82:1f:64:2f:
b7:dc:a8:1c:05:15:cf:f9:b0:c7:45:4f:7d:d0:bb:6d:b4:01:
d3:dc:56:58:bf:51:48:3d:f8:b8:d6:10:7f:a1:9b:bd:44:0c:
c4:3f:81:d4:d6:a3:01:e8:14:0b:11:48:b8:d0:f9:72:fa:be:
9b:da:7b:07:3a:8d:eb:a7:84:3b:70:d7:a5:e5:e7:67:b5:e6:
4f:78:68:d6:19:f0:e5:37:f1:09:64:6a:39:95:08:2c:51:4f:
9d:e5:17:86:4c:9f:0e:59:eb:d6:cb:d8:a3:c5:2a:b6:69:ac:
18:39:61:49:4e:65:de:c3:37:7d:86:f1:9a:89:e1:e2:17:9a:
0f:9a:fb:97:9d:00:60:bf:48:72:1c:58:79:0f:c3:e6:74:25:
90:f7:a9:d3:9f:98:3c:ff:2b:e9:de:cf:c5:29:00:c6:5e:90:
50:60:d1:86:eb:e8:2d:6d:18:a0:2d:43:ac:a4:00:3e:89:17:
ee:48:b5:2b:07:2f:d9:55:a0:97:67:df:fc:aa:12:2f:5b:7b:
d1:5b:46:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:18 2025 by rpki-client