Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier: kjC6NZcbnyGFzPj9SkxbsVtFVzKAmEwe8FQZoiaNsl8=
Subject key identifier: 6B:66:3C:D8:95:37:84:B3:B4:FA:4D:AE:4B:6B:B1:4C:19:0B:AC:78
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial: 01964BFDC141706617F67F540E4785240834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number: 015E
Signing time: Sat 19 Apr 2025 03:00:43 +0000
Manifest this update: Sat 19 Apr 2025 03:00:43 +0000
Manifest next update: Sun 20 Apr 2025 03:00:43 +0000
Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: 40qTH1O6G4Ro6thXuuvEFwwsX/YDNZlErD5VsZ8uQXY=)
2: nNbHw-B9ovJEjkk8hXq6L72QjEA.roa (hash: gipZmwcUyYZU1rfrC2SjuA4uq7CTXt+ZJKoz6Ec8OnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:c1:41:70:66:17:f6:7f:54:0e:47:85:24:08:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Validity
Not Before: Apr 19 03:00:43 2025 GMT
Not After : Apr 20 03:00:43 2025 GMT
Subject: CN=6b663cd8953784b3b4fa4dae4b6bb14c190bac78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:36:ed:c1:8a:32:59:bc:b3:04:30:3a:14:
91:cb:39:51:82:03:42:f8:b6:b2:8a:75:af:86:2c:
3f:fb:9b:b4:6b:1a:49:b9:11:78:30:50:28:fd:b6:
03:57:c2:17:d9:2c:c0:2f:c6:f6:2b:a5:ca:c9:77:
8a:2d:30:d0:1e:a2:c0:45:83:44:dc:14:71:04:2e:
ab:85:c2:a2:d4:7a:c2:fa:9f:99:d0:7b:c8:cf:7a:
a9:9b:cc:df:02:1b:b8:32:3f:8b:1a:a8:50:81:c7:
c0:1a:7e:c0:d7:32:84:16:7d:00:8c:88:f4:f7:a6:
b8:61:d9:d3:7f:a7:4f:3a:6a:ab:d7:da:c2:d6:dc:
36:64:d2:c0:6a:4a:bb:32:c2:60:4c:91:e3:2c:04:
99:8e:3c:de:6d:56:61:dc:60:b9:f6:1b:5c:a1:09:
9a:bc:1c:69:8a:63:ca:97:08:d9:0f:b0:d0:58:22:
95:89:90:77:89:12:44:be:9c:36:9c:51:80:3c:5a:
38:8c:21:33:4c:9a:22:23:ac:e2:73:82:dd:9b:57:
db:40:e6:18:78:3b:b5:63:3c:06:99:29:bf:43:28:
6e:55:1e:e2:4a:d8:d3:2c:c3:5a:fc:72:4a:8d:63:
50:73:be:70:8e:1f:e0:59:e5:0b:8f:11:f5:60:49:
fa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:66:3C:D8:95:37:84:B3:B4:FA:4D:AE:4B:6B:B1:4C:19:0B:AC:78
X509v3 Authority Key Identifier:
keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:43:56:7e:75:54:e1:0d:e4:8a:e6:e2:75:64:a6:6f:dc:fc:
11:86:61:56:29:7a:a1:0c:bf:5a:d8:c9:1f:28:bc:c4:fa:29:
c5:ac:4f:28:b0:bc:a5:fd:1a:d3:c0:3d:60:3b:15:b5:38:1f:
a7:43:58:03:c9:db:5b:f7:9c:ec:8d:ca:d9:48:4d:f6:5c:10:
46:bb:4e:57:1e:d2:7c:2a:39:65:b1:a7:b5:68:ed:b6:16:84:
23:4e:06:05:f9:b9:8c:c3:d9:64:51:2a:f2:3d:35:37:e6:02:
90:e9:6e:66:52:2d:f4:e9:ab:71:22:b7:bc:19:5e:9a:ea:09:
f3:aa:91:be:e6:04:dc:f2:43:65:ca:f1:f1:27:a1:61:d5:1e:
6b:f7:3b:06:f8:ed:6e:ab:75:33:47:d5:89:3d:46:45:cb:61:
9e:8b:dc:d8:6d:93:e8:28:65:0a:e7:ec:7d:04:74:67:28:79:
c2:ea:69:5e:6e:60:a1:ba:06:36:09:4f:3f:b7:17:2c:bb:a0:
b8:69:fb:00:a1:fa:20:f4:c7:b4:f2:d2:d0:6a:ba:5b:33:0c:
39:7f:f2:b5:7c:46:60:0f:83:1b:0a:57:0b:d9:a1:a9:53:be:
3f:5d:09:ff:fa:9b:f9:1b:31:75:24:34:b8:32:99:57:e9:db:
46:30:57:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:32:52 2025 by rpki-client