Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
File: _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json)
Hash identifier: pHkC2Fin9Ll240BnIC3k9LV6HnUpZjHeTKI1JVvj2Hw=
Subject key identifier: 2C:EB:03:BF:FF:03:C4:76:79:5D:F1:97:D5:1F:72:DD:3F:6B:98:29
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Certificate issuer: /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial: 01964EFE4E298EF2C0734A047151D374A9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
Manifest number: 148C
Signing time: Sat 19 Apr 2025 17:00:11 +0000
Manifest this update: Sat 19 Apr 2025 17:00:11 +0000
Manifest next update: Sun 20 Apr 2025 17:00:11 +0000
Files and hashes: 1: ZFIfq_Xye8VtZ1sU3ca9G22FxVM.roa (hash: 1343QU7GIEueYXR0jEegPvkq04EIWR5lFSBDfcLfgSA=)
2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: 14x8iDuyn+N/LJwXsgppW7BAnOAw7CL47CyTvqN7iHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:4e:29:8e:f2:c0:73:4a:04:71:51:d3:74:a9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Validity
Not Before: Apr 19 17:00:11 2025 GMT
Not After : Apr 20 17:00:11 2025 GMT
Subject: CN=2ceb03bfff03c476795df197d51f72dd3f6b9829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:c8:97:cf:56:b6:e5:e1:b6:f6:96:7d:9d:
3b:ff:7d:6c:ae:42:74:d6:1c:63:b2:0f:28:5f:7a:
05:cd:25:52:f1:0c:62:7e:95:80:1f:3c:af:0c:e6:
70:b2:d4:ac:ca:1b:25:6c:87:20:63:5b:51:f4:b8:
5c:a0:9e:f3:09:15:93:4e:f1:c6:da:0d:e3:fc:a4:
dd:68:40:3d:d7:74:b3:4d:36:f1:ee:90:e6:7b:8f:
37:3d:59:72:ef:ed:90:99:34:b6:b3:a6:4c:b2:21:
dc:a5:63:ce:e8:48:87:60:e5:73:d1:31:3d:57:e7:
89:b4:98:51:7d:60:03:8f:ba:f4:e5:67:f2:dc:af:
4b:1d:a1:5d:27:e8:c1:d7:d7:8f:f4:78:05:88:a7:
e7:80:c8:59:13:d6:b4:a3:38:f5:b1:a4:ee:5d:f7:
c6:bf:3a:4e:ba:47:2f:7e:fb:41:b8:3f:9c:56:17:
1c:19:25:95:29:4d:d1:c5:06:cc:f6:b0:2d:a7:d7:
4d:29:12:6f:19:f1:bb:cb:b2:5d:24:50:3a:e5:54:
ec:6f:66:e7:b2:ad:63:07:81:d4:84:6e:c8:d1:24:
9b:24:56:5a:eb:13:01:1f:89:8f:2c:08:6c:ec:8c:
68:cd:de:15:8b:03:27:38:a8:20:0a:6c:e6:c7:58:
f1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EB:03:BF:FF:03:C4:76:79:5D:F1:97:D5:1F:72:DD:3F:6B:98:29
X509v3 Authority Key Identifier:
keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:cc:ff:70:e4:ad:73:de:06:13:f6:37:8a:7c:fb:96:a3:e8:
aa:52:82:00:f5:cd:37:71:ea:81:ef:b1:41:18:5f:38:cc:c5:
65:26:cc:a4:ec:35:27:c6:07:72:08:8c:da:d7:8e:a0:52:06:
32:e6:1b:45:0c:28:45:14:25:5e:8a:63:fa:26:1e:32:55:08:
be:83:02:eb:0d:ee:33:40:6d:e5:83:da:5b:81:07:4e:1a:42:
ca:44:30:03:cc:90:3e:2b:19:62:de:c4:23:3d:02:52:36:50:
26:a4:60:5a:b6:2d:b7:6c:b9:97:56:8b:59:1a:8a:14:57:51:
53:4f:f3:f1:aa:cd:a6:7e:73:61:b8:b3:8f:1f:5a:b6:a0:3c:
f1:52:aa:8e:03:6c:87:e5:e3:f3:f5:10:8b:29:2e:a9:e5:de:
ea:a6:dd:7c:58:e1:a9:b0:7a:17:88:9c:f9:b3:75:dc:f9:75:
d4:19:5f:d7:57:e4:46:fb:de:df:ee:75:af:df:a4:66:b4:72:
d6:09:25:1c:94:4f:ce:85:fa:10:23:ed:79:ce:97:e6:48:63:
d9:51:d8:72:c0:34:ad:c1:34:72:05:a7:51:cb:1d:a1:59:ca:
31:76:26:b6:33:c9:44:78:7c:a0:fb:19:5f:df:6e:07:92:cb:
0c:b4:10:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:48:06 2025 by rpki-client