Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: YYeXcI9SvgviJIiV0FJhS5VRMEXKUBU/iAGg6bsMzeQ=
Subject key identifier: D0:4B:8C:82:7C:CE:01:89:0E:0A:2E:34:E3:7F:12:F7:D5:FF:80:A2
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 0196564A31C38D7DF72BB8595007C29A2232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 01F2
Signing time: Mon 21 Apr 2025 03:00:25 +0000
Manifest this update: Mon 21 Apr 2025 03:00:25 +0000
Manifest next update: Tue 22 Apr 2025 03:00:25 +0000
Files and hashes: 1: B5665HYy6kSNy90OpMzSYkfYZ78.roa (hash: l3LMbVnBNYo1auwulw02upGn169zVSqtpPpAH0JkHoI=)
2: BhseQy6cfY2KxD85qSiLzXh-5UM.roa (hash: 0YvZXzvsO+BZgmZ0JpcK1I5V3fjP6y+JiPN3ak5ChGQ=)
3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: pLR+lH3nvVmeP0MdGr4TanJpUzWG4x5qBqxK0VgjT4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:31:c3:8d:7d:f7:2b:b8:59:50:07:c2:9a:22:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Apr 21 03:00:25 2025 GMT
Not After : Apr 22 03:00:25 2025 GMT
Subject: CN=d04b8c827cce01890e0a2e34e37f12f7d5ff80a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:db:6b:d9:a9:ef:a7:ec:1c:7c:95:9b:71:
34:4a:8e:e3:87:3d:1f:28:fe:1c:69:ec:b2:c4:7a:
e1:4c:cb:81:7c:99:a5:0a:a4:d3:03:34:1c:c3:0a:
38:43:b0:52:cb:86:36:a5:d6:01:81:61:08:dc:a3:
ce:c2:80:16:ac:56:eb:4d:6e:fb:7c:ee:d0:2e:55:
b2:08:bc:27:db:dc:bc:3b:6c:f6:66:81:9c:e4:aa:
ab:7b:92:db:79:6d:44:40:90:be:86:f3:d4:be:7b:
0e:c9:20:31:6e:e5:10:ea:36:3e:d1:62:92:5f:46:
fd:e9:df:46:72:29:af:9a:d9:85:4b:bd:7a:74:3a:
ba:6d:f3:24:b0:90:c9:08:cb:07:5b:a7:ad:c5:2d:
3e:3a:ca:99:20:b3:1c:5c:a6:b0:e2:c6:ef:e0:6f:
b3:eb:38:cd:47:c1:13:54:7a:fa:43:e4:1a:a2:03:
04:23:9b:9f:51:ec:76:5d:4f:82:ee:05:62:bc:f5:
8a:5d:c3:fc:c0:4c:c7:b3:21:eb:e6:5f:f5:71:76:
b1:ad:6a:55:e5:59:76:a8:d8:5e:49:fd:88:d9:a2:
bb:25:69:64:96:cc:f6:a0:fc:b7:25:18:b8:8c:13:
b3:f8:37:6e:00:2c:4a:b5:cf:b4:f4:b9:b6:d3:23:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4B:8C:82:7C:CE:01:89:0E:0A:2E:34:E3:7F:12:F7:D5:FF:80:A2
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:47:7c:8c:1d:ee:df:3b:8e:d3:fc:0d:f8:f8:df:8b:24:5c:
60:55:44:ac:b8:3b:87:5e:e7:f2:3a:36:85:b3:6e:cf:a6:f9:
2f:a2:5a:47:06:f5:5a:49:12:64:6c:c7:af:f4:40:c5:74:e1:
b0:55:a7:50:26:42:ac:34:de:e0:ee:b3:7b:c4:8a:42:71:00:
d1:b6:0d:51:45:92:d5:50:44:0b:74:ca:d1:8c:d5:f8:af:60:
f8:02:3b:fd:63:74:fe:55:c9:3e:03:69:26:fb:e0:ed:dd:d7:
08:cd:f5:d7:fa:ef:75:4f:09:19:15:cb:e0:a6:d7:e0:5c:fc:
eb:1e:fd:de:d2:f4:62:c4:75:19:3c:4a:0b:c4:47:05:f1:5a:
fe:4b:e9:d6:01:e1:a1:51:b7:00:c4:f2:82:20:67:06:67:5e:
f0:b6:94:87:b0:33:1e:9d:cd:7a:80:ee:28:44:3d:45:05:96:
d6:2a:b8:c5:b1:ba:9b:89:57:66:4f:8c:c1:84:62:a6:77:34:
35:fe:19:5c:ad:a5:8f:ca:a0:55:04:c4:bd:5e:8c:f8:1f:f5:
b7:b0:d3:ed:94:75:c4:98:dc:15:44:0e:46:e7:1e:15:f7:55:
4c:d8:9e:0c:f3:2d:a9:f1:77:19:82:87:b0:98:61:c2:0f:2f:
9c:94:b1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:40:03 2025 by rpki-client