Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
File: q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json)
Hash identifier: bFaGHuFthd+3Pt5Lw9hzjAEtJHTFtPcVf7bJrT9kqhg=
Subject key identifier: 19:20:D3:23:62:4D:3D:5D:40:3F:01:3F:71:60:86:BE:28:EF:E2:01
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 019650114DC68953BE2BE0A1D5251E3A8C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
Manifest number: 155C
Signing time: Sat 19 Apr 2025 22:00:33 +0000
Manifest this update: Sat 19 Apr 2025 22:00:33 +0000
Manifest next update: Sun 20 Apr 2025 22:00:33 +0000
Files and hashes: 1: B_Tk3gL-p_aDMGxj8mFQXz7p6IU.roa (hash: towVudD3ZHXUrLOMltR/8PyVnF7v/kv+y5JbOeuwBgs=)
2: QIAcGzg1E-mkwGlMwIaZKUybW5U.roa (hash: vPFlVcoFxwCs0hnXKdVw9v7+IGUFGVEz3iANXdrxvec=)
3: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: +d0ERrjIq9j6TbE27uuT7BH6Xg2Q1JN2Q5Qajr197IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:4d:c6:89:53:be:2b:e0:a1:d5:25:1e:3a:8c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Apr 19 22:00:33 2025 GMT
Not After : Apr 20 22:00:33 2025 GMT
Subject: CN=1920d323624d3d5d403f013f716086be28efe201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:94:a0:8b:6c:2d:46:1c:cb:62:79:9b:16:c4:
c9:84:5e:af:1f:ce:9b:00:01:0a:4a:c7:8d:bf:88:
34:4c:da:00:69:60:ed:8e:c6:a1:88:ee:d6:85:b0:
e0:05:eb:e8:5a:0d:13:2c:bc:9e:e7:47:6a:43:46:
e2:8f:83:34:56:27:bc:f8:aa:6d:51:ff:6b:d9:3a:
e6:cc:de:b1:63:6d:5b:25:c0:83:97:58:f6:eb:ec:
ef:56:78:dc:a4:36:d9:b5:28:f1:b7:e1:30:80:d3:
c8:fb:a4:fe:1b:24:47:3a:20:e3:71:81:f2:bb:fe:
b8:55:6c:c5:31:23:c5:8d:e0:df:72:b7:29:bd:49:
28:3d:21:6e:2a:ce:7b:cb:46:34:4f:0c:5b:2f:12:
ac:09:c2:63:3b:02:6f:8e:50:f3:64:89:75:4a:a8:
6e:fc:69:37:62:f1:5c:1b:1f:0b:0b:47:d7:d9:39:
d5:b5:9c:ce:a7:4f:86:c8:ec:e9:c9:0f:0b:7f:b7:
0c:41:a4:ba:64:c0:7f:c9:39:93:e5:59:89:fc:40:
36:42:9b:d1:23:7d:11:e2:73:ed:27:b4:fd:33:4d:
4d:ff:a3:1b:a6:52:4c:78:a4:ac:ac:2a:7f:70:58:
2d:c5:d6:b3:93:b7:0e:8e:62:d0:76:6f:83:7f:a2:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:20:D3:23:62:4D:3D:5D:40:3F:01:3F:71:60:86:BE:28:EF:E2:01
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:6a:01:98:75:18:b9:05:83:e2:cb:d2:03:ca:13:0b:e0:f1:
72:d6:23:b8:93:35:0c:f2:5b:cd:67:97:c8:13:f5:12:7f:20:
2a:60:cb:75:76:f8:27:5a:dc:24:86:76:a9:71:5d:62:45:6d:
00:4c:8a:44:db:25:68:37:a7:2a:24:08:69:dd:89:2a:0c:3f:
4b:74:e9:a7:ff:5b:ae:c4:50:3d:ab:78:bc:f3:c4:ec:4f:c6:
a8:46:78:23:52:0e:11:be:57:cc:f1:d8:7b:bf:ca:1c:a1:18:
ec:45:dc:d3:37:0c:d4:6a:80:8c:dd:6f:f4:75:b4:ad:f5:4a:
e4:db:0e:89:11:d8:60:e4:d9:72:4c:37:21:d4:33:1c:14:ce:
8b:97:8c:24:66:4b:b8:11:f2:70:e8:b6:6a:9b:84:3c:d7:a8:
4f:f1:1c:b8:5e:ef:ad:e5:ad:1f:23:a4:63:a4:d1:10:f5:c6:
65:d3:ec:62:5a:8b:f1:b1:26:45:49:52:20:04:9e:f4:f3:57:
a6:02:e5:da:79:b7:28:de:91:c0:dd:e9:8d:43:cd:d5:28:7c:
da:25:83:01:da:e4:16:18:61:f2:a3:62:e6:76:20:79:12:b2:
6f:c9:37:20:1e:43:64:03:32:d0:be:9a:d6:4c:5b:60:65:9a:
91:0f:f7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:24 2025 by rpki-client