Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json)
Hash identifier: IGdHEceUXMU2LjbqtkyG8aZDPf8kQzfjPCwtvuTpfuw=
Subject key identifier: 7B:CD:70:3A:A7:54:54:39:E4:D2:9D:8D:65:F4:75:77:8A:C8:CA:AD
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 01964D7EA7C8336F1246659A28BB0240485E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
Manifest number: 150D
Signing time: Sat 19 Apr 2025 10:01:08 +0000
Manifest this update: Sat 19 Apr 2025 10:01:08 +0000
Manifest next update: Sun 20 Apr 2025 10:01:08 +0000
Files and hashes: 1: 8it1mnGsBB_0bpcwXcQ7puN3Hok.roa (hash: DK3oH31M5a3fOw5ohHJX58zCY8Qd9F+oTkaNS/1tWA8=)
2: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: kaz/v9ohMySAB5kiHTCuraYsjsjOOJLsJsuIsmXoCeE=)
3: bOyfi-z2wqC5OBTk4v100ve7CxI.roa (hash: WiyMw0UdlKQAlB0ieoJy4RAqYir7UCqclb4nu/UNQCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:a7:c8:33:6f:12:46:65:9a:28:bb:02:40:48:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Apr 19 10:01:08 2025 GMT
Not After : Apr 20 10:01:08 2025 GMT
Subject: CN=7bcd703aa7545439e4d29d8d65f475778ac8caad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ab:43:b1:93:29:cd:09:e8:28:7c:26:cf:0b:
ef:4b:4b:d0:5d:7a:46:fc:d5:7b:c5:2b:55:98:19:
f0:a3:ff:74:a9:77:92:86:e4:f4:3e:9c:19:82:5a:
d7:db:59:11:7c:9f:cf:2c:04:f4:03:8c:29:fb:a7:
0d:5b:f7:92:ba:31:dc:4d:d2:c4:20:6a:54:f7:d1:
02:2e:12:06:c3:fe:6f:a9:2f:6e:c4:0c:64:6e:2c:
80:53:c9:a7:ae:9f:df:83:64:69:03:d2:ff:14:69:
b1:53:a7:2d:d6:4a:8f:bc:64:82:c9:1f:58:c6:40:
5c:b9:5a:8f:69:b8:37:cd:aa:0f:d3:14:3a:af:a8:
48:9f:a5:c7:f3:59:94:7c:87:b6:8b:1e:ef:63:5f:
90:8d:3b:bf:19:0e:70:aa:01:56:61:7b:1b:f7:5c:
43:de:6f:e1:87:1b:a4:0c:8d:de:3e:e4:26:74:ed:
6b:09:50:96:af:ab:a8:f2:d9:a9:69:16:f3:86:95:
09:35:e3:f5:a7:54:b5:53:9a:ee:28:06:57:6d:b1:
5a:57:17:06:ba:43:c6:a8:66:e9:38:4f:45:f8:29:
d3:0e:cc:f1:df:bd:e1:20:d7:c0:db:f7:2a:8c:45:
c2:37:ca:4d:38:51:c1:59:90:11:16:a9:c2:c1:fb:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CD:70:3A:A7:54:54:39:E4:D2:9D:8D:65:F4:75:77:8A:C8:CA:AD
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:32:5e:ae:c9:41:d6:f8:cb:76:88:a1:a8:f2:6a:ff:1e:b1:
50:99:dc:58:61:e9:12:d3:01:5f:91:80:2a:05:11:8b:38:f3:
db:64:94:d9:88:29:f5:e0:a6:1e:28:d5:1a:e3:de:73:ec:51:
c2:d1:ba:d2:3b:56:c8:14:de:ab:1e:39:da:93:44:0f:e2:ef:
1a:af:c6:1d:93:2c:8c:d8:98:9a:2a:ee:17:1e:c3:d1:ec:55:
9c:75:bb:6c:98:6a:6e:28:08:fd:84:0e:e0:ac:0c:63:24:35:
88:65:45:bd:f9:0d:28:51:da:28:db:64:cd:06:61:d9:1f:90:
0f:26:5a:82:aa:fe:46:cd:91:2e:a5:34:fd:f7:86:56:23:2c:
d5:10:29:b3:ec:e3:65:8a:8f:6d:c8:90:30:13:cb:8e:d6:b5:
f5:b4:71:98:bc:2f:3f:ad:89:ea:d9:a4:9b:da:1f:6b:6d:5c:
c8:ff:28:29:df:5e:cc:2f:61:c1:c8:08:d6:a0:b9:0f:71:0c:
62:bc:81:98:84:e2:1d:11:7a:78:2f:c3:06:71:35:bb:ea:fb:
2e:7d:30:71:5a:5a:28:bd:78:38:f4:12:8c:21:f3:51:7a:87:
48:01:5a:54:0b:01:02:4d:92:55:b8:d9:c6:17:51:52:98:9e:
88:9f:45:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:27:47 2025 by rpki-client