Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: 4PdeFE77jVX+3m5jCiLd+gw6eAk/eIzWZR+vkpgHSrI=
Subject key identifier: 01:0D:BC:E1:27:CD:53:05:42:D1:04:9D:3A:9C:90:E9:3C:B3:E9:0E
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 01960E6954F4D7DBC3809D033EE850E1D69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 11CE
Signing time: Mon 07 Apr 2025 04:01:46 +0000
Manifest this update: Mon 07 Apr 2025 04:01:46 +0000
Manifest next update: Tue 08 Apr 2025 04:01:46 +0000
Files and hashes: 1: KgttFz6IodgLZeLta7RLneUK6Ro.roa (hash: IYP5zin82ggYoVWQmz/dnK+iP1pdsQlzD5cbI7kYfRQ=)
2: T1_HIEmvBSvtxZPEKcCF4aZsCPs.roa (hash: 0CEooqGIOmFXehL8CMLN24SE73s+yk1wsCLjJu3HBUc=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: TcXuXscuc2M3bOQFl8lFaiiUWCVRu11lbZfd2PpzF+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:69:54:f4:d7:db:c3:80:9d:03:3e:e8:50:e1:d6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Apr 7 04:01:46 2025 GMT
Not After : Apr 8 04:01:46 2025 GMT
Subject: CN=010dbce127cd530542d1049d3a9c90e93cb3e90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:31:b4:35:cf:e3:e3:c2:cc:6b:67:24:6e:
0e:86:cd:a1:5d:bf:f3:f3:96:a4:75:9d:9c:39:06:
e2:9b:c7:ae:c1:9a:3b:d2:8e:c6:b1:09:1a:2f:74:
e7:f1:00:84:22:83:bc:a1:71:cb:34:d5:4b:c1:24:
35:9a:4a:5e:1d:30:f1:64:1d:62:ea:be:ea:ac:a8:
15:d5:87:87:ca:58:5d:8f:2a:33:4e:42:6f:11:62:
ea:fb:cb:45:90:30:0d:4d:b1:71:3d:9d:1d:f4:69:
ee:2d:ff:65:6c:fc:cf:bf:27:84:2f:88:e9:6d:d4:
73:2a:24:63:a4:74:d0:7a:fa:c5:c8:a0:e5:66:b0:
01:af:c6:c4:5a:1c:1c:d0:4f:9c:2f:af:79:1c:36:
3a:59:4b:91:f5:42:90:c3:9b:d5:0e:95:e0:b9:f7:
e0:bb:13:c7:c3:8a:a9:c4:b6:b8:af:b2:01:a5:e5:
e7:88:bd:e2:b5:5d:6c:22:39:6f:30:6d:d7:53:60:
92:92:1e:a1:83:b4:68:4f:be:08:0f:02:0f:b8:1e:
21:30:aa:86:34:21:ba:52:7b:40:62:06:74:5c:cc:
6d:40:fc:b3:40:b2:da:44:80:3c:0a:36:58:50:60:
a6:f9:87:8d:c4:59:ff:b1:be:c4:ab:5f:88:6c:8f:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0D:BC:E1:27:CD:53:05:42:D1:04:9D:3A:9C:90:E9:3C:B3:E9:0E
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0b:3b:74:ff:bc:6d:7c:26:fa:b9:29:d7:a2:d2:db:3c:b8:
8c:9e:d6:0d:84:d3:6a:5f:81:dd:32:39:5a:0d:a2:67:3e:71:
1b:b6:d1:25:14:55:31:a8:b9:c7:44:08:e9:e0:ea:3a:c1:d1:
cf:b3:cd:69:91:ce:74:ae:2d:1e:db:79:c2:ba:18:40:b9:1f:
c3:03:e1:e5:fa:94:16:7d:be:13:6a:6d:3c:62:92:41:45:39:
59:89:36:2f:97:5c:81:c1:34:3e:1e:83:91:f2:1f:f6:cd:df:
ad:94:a2:70:4e:53:f2:c5:91:cc:b0:87:59:2c:27:fb:f5:aa:
7a:09:61:a2:6b:c9:0c:28:96:f4:0f:07:71:a6:65:49:0e:a2:
e0:f9:e3:1a:09:fe:a7:82:ef:75:1e:7c:c5:cb:89:ed:91:d6:
d2:f7:99:c8:7d:4e:9c:e1:b7:ac:8d:83:39:88:ca:56:73:18:
62:0c:88:77:3c:4f:bb:39:9e:4d:95:7a:6f:d9:25:37:40:77:
44:17:2f:cb:cd:1b:fd:0d:1b:bf:75:80:8c:9f:ab:ef:2c:55:
9a:3b:48:dd:16:a4:5a:95:cb:eb:80:bc:27:93:71:15:19:14:
27:99:3e:d1:5e:73:2a:47:4a:51:c0:6d:fd:7f:be:46:47:65:
3b:5e:6b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:59 2025 by rpki-client