Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
File: Q7iP8e37ZyBmAwJncaquyEuLHrg.mft (raw, json)
Hash identifier: FmXKwkmfn8HOhfh7K2oJNxbaYTSyjiScJssKvW2NysM=
Subject key identifier: 2B:56:A7:22:24:2D:94:A3:4F:F1:BB:11:DC:93:FE:47:F8:87:B1:B4
Authority key identifier: 43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
Certificate issuer: /CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Certificate serial: 0196504899B6E40467E1FFED4647BE0B61B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
Manifest number: 0CAB
Signing time: Sat 19 Apr 2025 23:00:57 +0000
Manifest this update: Sat 19 Apr 2025 23:00:57 +0000
Manifest next update: Sun 20 Apr 2025 23:00:57 +0000
Files and hashes: 1: Q7iP8e37ZyBmAwJncaquyEuLHrg.crl (hash: ETb1+ZaSQl9hLNzdgc23imYY30xRuF95H8XLqugHccc=)
2: gg-emnwJIGdBmpEHYh5OFvjnfmc.roa (hash: f0YF0XqFky78qYjbpn5730w15nHy84AldxyEdZxgOEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:99:b6:e4:04:67:e1:ff:ed:46:47:be:0b:61:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Validity
Not Before: Apr 19 23:00:57 2025 GMT
Not After : Apr 20 23:00:57 2025 GMT
Subject: CN=2b56a722242d94a34ff1bb11dc93fe47f887b1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:24:a5:47:a5:e1:1a:b9:ef:88:be:86:8c:
0f:00:02:73:9e:08:7c:28:df:f8:f4:a4:ed:c0:c2:
2d:ff:0c:18:b9:e1:f1:1d:6d:a6:28:e8:b5:da:25:
90:a1:a3:14:71:0b:03:27:de:74:e9:ce:ea:e0:43:
5e:ee:1d:16:18:71:5d:a4:4f:3f:7f:94:6c:f3:25:
53:84:07:6b:dd:82:3e:57:5e:a4:b5:82:32:a2:07:
9e:b6:ac:58:1c:a2:64:42:0d:45:8f:c9:87:e6:e1:
74:7c:14:8e:27:ce:02:d9:32:eb:2e:b6:18:2f:ba:
8b:77:40:77:eb:ae:8d:53:ce:40:2f:1e:b3:27:2a:
c6:d0:5e:31:cd:2b:a8:01:a7:97:bd:a3:48:d3:6d:
28:48:1a:33:b0:f0:e5:e9:9e:53:d6:53:c6:8d:a4:
41:7e:6d:0c:c7:2b:3c:26:81:e9:14:67:2c:c2:1e:
de:7a:f1:de:b9:a0:e3:f0:ba:3e:12:c4:56:52:6c:
c7:8e:ba:31:dc:72:96:1a:cb:b0:07:d7:e8:ef:13:
ea:bd:92:1e:d2:b1:91:91:94:7d:e7:a8:50:d7:9e:
29:4c:3f:5f:4f:65:a1:02:44:5a:36:0b:ef:0c:71:
e9:f5:fb:17:13:c9:eb:e1:92:2f:af:8e:d5:fc:a0:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:56:A7:22:24:2D:94:A3:4F:F1:BB:11:DC:93:FE:47:F8:87:B1:B4
X509v3 Authority Key Identifier:
keyid:43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:08:f3:6c:0c:f3:b6:3f:f8:37:b3:08:db:a8:2b:96:99:f9:
a2:f9:1e:75:ef:53:bd:9d:8e:8b:29:12:1f:7a:4f:3f:6f:f5:
97:70:54:77:75:55:66:f8:37:43:e6:a7:ca:d0:d5:c8:46:a1:
40:6d:28:ff:ac:5b:95:4e:4f:05:14:ca:e8:b1:62:8a:b9:1f:
d8:4e:71:b6:e5:5e:de:71:19:a4:5b:75:c9:32:0f:d9:40:99:
a4:6c:6e:cc:bb:b5:45:08:c9:d2:34:18:e8:f4:d9:52:85:a4:
df:1b:92:18:d1:54:ed:99:8f:63:91:6d:e6:55:d7:7b:38:ab:
a7:f3:53:82:1b:d7:46:bf:2f:71:ee:77:6c:db:d1:db:dc:cb:
b5:d7:28:24:e3:c0:42:a4:0f:d5:2b:82:38:46:71:d1:7b:85:
e2:35:b8:58:78:60:ff:84:92:55:c1:d1:88:6e:6a:48:93:a6:
91:b2:d5:7a:ea:14:3b:92:30:b0:01:d3:36:26:4e:5c:e9:e2:
0c:eb:11:29:ee:6d:8d:93:91:74:4f:2e:6c:88:4c:54:95:39:
c8:3b:ec:82:b3:4c:d2:09:52:0a:74:3e:34:1e:f6:47:bf:94:
e0:00:36:81:af:2a:52:17:20:a6:5f:21:d4:e8:70:b0:9e:03:
f0:83:5e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:31 2025 by rpki-client