Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: +Jp9F0bJq6kNHi+dK6sFfugQbaDwxJSOHmwDDwA5ryw=
Subject key identifier: 20:A2:4D:BC:23:33:53:DD:7A:00:62:37:D2:E4:E5:2C:99:8F:44:F1
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 019629E0364762669E6F03F3541CCEE20D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 14E8
Signing time: Sat 12 Apr 2025 12:01:21 +0000
Manifest this update: Sat 12 Apr 2025 12:01:21 +0000
Manifest next update: Sun 13 Apr 2025 12:01:21 +0000
Files and hashes: 1: 71gvIX06FZhti5C8KqbG-iL3ji8.roa (hash: ixliMnZsbefklIbCdZSQC08KvvVc2/x3CDK+CGl2CBA=)
2: KX5-b8tfIxZ9QaObI34wusMJAu8.roa (hash: E8pkGADzxdyLbNBpzexYq9jUYKSiA426sagviGcATi8=)
3: N7dkJGPV_ClH0zdsWhUXQhLf-fI.roa (hash: 61rIBj7suoaRe9FEYDOMgKbW4Bfv19fnscul85uRvy8=)
4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: +Zk2xuitjLp73uGaHgsNcNf0MEmh4t2GPGyZBvuyL+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:e0:36:47:62:66:9e:6f:03:f3:54:1c:ce:e2:0d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Apr 12 12:01:21 2025 GMT
Not After : Apr 13 12:01:21 2025 GMT
Subject: CN=20a24dbc233353dd7a006237d2e4e52c998f44f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:aa:33:8b:24:15:97:97:e2:d5:8f:25:e4:
73:89:b7:8b:49:ec:a5:a3:64:33:fe:01:bf:2b:3c:
1a:36:55:af:2a:e3:96:60:ca:1f:8e:56:e8:6b:8a:
40:6b:6a:1b:32:0e:e4:ac:ec:e9:57:be:3a:de:d1:
1a:10:72:20:72:78:7c:ed:88:db:26:af:16:34:d0:
84:50:a5:4c:fb:d1:08:6f:28:d2:cf:97:fd:8c:90:
cf:6c:1d:65:11:64:1b:99:12:28:fc:c8:ba:f6:c6:
ab:9f:dd:65:7e:3e:66:f9:9f:8c:d2:62:c1:b6:e8:
69:48:a4:35:33:73:75:38:90:da:88:3c:19:48:37:
31:9d:45:9e:6b:85:31:a0:b1:0f:76:59:20:37:a7:
cf:43:c7:15:a8:87:30:f4:b8:da:66:a3:28:dd:e0:
5b:4c:47:8f:4b:d5:95:13:da:50:64:4e:d2:f7:64:
61:75:a4:a9:27:73:7d:1b:a0:65:10:13:f0:1f:1b:
97:ca:3c:fd:26:ef:1d:da:16:85:f5:50:b3:99:4d:
e7:b2:ec:44:b5:21:86:c7:9c:8a:aa:49:4a:30:d1:
9e:85:83:1e:ff:e7:fa:66:a5:38:3b:78:89:2d:69:
26:e0:9c:1c:71:8b:27:ee:15:2e:4f:68:c1:34:b9:
5d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A2:4D:BC:23:33:53:DD:7A:00:62:37:D2:E4:E5:2C:99:8F:44:F1
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9b:87:2d:ef:41:2f:a6:98:27:42:4b:a2:34:35:33:b8:6a:
d6:a8:cc:3e:65:3f:26:6a:d0:ac:0c:44:77:cd:f8:41:87:ac:
ce:a3:3c:cf:59:b0:72:e3:2c:56:7e:ca:a6:63:23:94:95:13:
d5:3b:3c:28:0e:71:0e:0b:d9:f3:fe:35:1b:06:9d:6d:50:5b:
57:9a:cc:8e:7c:af:29:4e:b8:4a:13:e5:79:df:a6:21:b3:a9:
5b:72:41:e9:3a:ca:5e:7e:15:66:30:ce:c4:b0:bc:c8:9b:d7:
15:75:68:e5:bc:2e:ba:be:4b:4f:3f:fc:c0:f7:c1:aa:06:6b:
30:ce:6a:15:68:63:73:a8:0a:c7:ae:6c:7f:ad:bb:71:26:98:
c7:ef:69:ba:51:07:f2:ce:b7:87:96:3a:87:49:e1:71:74:74:
a7:ed:28:94:9c:76:32:80:18:aa:de:ca:07:d4:d2:bd:9a:83:
b3:89:c3:2b:da:4d:89:d9:96:a0:ba:b1:44:b6:8a:33:38:fe:
df:bc:6e:30:3f:2b:c9:c1:ec:05:70:a4:04:db:5a:2c:dd:73:
06:e4:ff:85:bc:5b:4c:fd:b2:3f:63:b1:55:df:cf:bf:cf:75:
e5:c8:db:e3:aa:2a:b7:c2:b5:21:fd:76:13:11:af:51:d4:1c:
1c:f5:1c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:09:52 2025 by rpki-client